last executing test programs: 16.226173139s ago: executing program 0 (id=4709): sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 14.01169557s ago: executing program 0 (id=4712): r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002240)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 13.317256847s ago: executing program 1 (id=4714): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3, 0xc, 0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0000120000000000000063b9e7a900000000fc020000000000000000000000000e01ff02"], 0x36) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 13.155719341s ago: executing program 1 (id=4715): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@mcast1, 0x4e23, 0x7, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0xc}, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x3ff, 0xe19}, {0x80, 0x4, 0x6, 0x9}, 0x6e2b, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x3, 0x0, 0xd, 0xc, 0x6, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4044) 11.822529243s ago: executing program 1 (id=4716): memfd_secret(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 10.802417832s ago: executing program 2 (id=4719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000", 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="021300000200000000"], 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 10.596790739s ago: executing program 3 (id=4720): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4044) 9.934793766s ago: executing program 4 (id=4722): sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 8.784394789s ago: executing program 3 (id=4723): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001880), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a210a3589f3e733990000000a00000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x113002, 0x4) open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000180)=0x80000039f8, 0x4) r4 = syz_io_uring_setup(0xc9a, &(0x7f0000000100)={0x0, 0x79af, 0x8, 0x0, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) r7 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000000)=@secondary) add_key(0x0, &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000240)='L', 0x1, r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.783093663s ago: executing program 2 (id=4724): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) madvise(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x16) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 8.411274439s ago: executing program 4 (id=4725): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3, 0xc, 0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0000120000000000000063b9e7a900000000fc020000000000000000000000000e01ff02"], 0x36) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.815077718s ago: executing program 0 (id=4726): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@mcast1, 0x4e23, 0x7, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0xc}, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x3ff, 0xe19}, {0x80, 0x4, 0x6, 0x9}, 0x6e2b, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x3, 0x0, 0xd, 0xc, 0x6, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4044) 7.814757402s ago: executing program 1 (id=4727): r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002240)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.742779298s ago: executing program 4 (id=4728): socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0}, 0x4000002}], 0x1, 0x20, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) syz_pidfd_open(r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 6.465086808s ago: executing program 0 (id=4729): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 6.006103427s ago: executing program 4 (id=4730): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x58894969, 0x141000) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x2ec600, 0x14) mkdirat(r1, 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000019300)='./bus/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x1, 0x40}, {}, @raw32}], 0x1c) mkdirat(r1, &(0x7f0000000240)='./bus/file0\x00', 0x2c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2941, 0x3}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_clone(0x4000, &(0x7f0000000700), 0x0, &(0x7f0000000100), &(0x7f0000000280), 0x0) r7 = gettid() r8 = eventfd2(0x5, 0x0) kcmp(r6, r7, 0x4, 0xffffffffffffffff, r8) 5.594666695s ago: executing program 2 (id=4731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) 5.337263381s ago: executing program 2 (id=4732): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) connect$rose(r1, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x4c000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x9}, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='z', 0x1}], 0x1}}], 0x1, 0x4004004) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) 4.88027319s ago: executing program 4 (id=4733): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4044) 4.155947461s ago: executing program 3 (id=4734): setrlimit(0x40000000000008, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$uinput(0xffffffffffffff9c, 0x0, 0xd9af22fca9a4adcb, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af83, &(0x7f0000000000)=0x1d) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x24000004) setregid(0xffffffffffffffff, 0xee00) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1100) 3.049550946s ago: executing program 4 (id=4735): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3, 0xc, 0x5) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000840)={0x10, 0x10001, 0x101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0000120000000000000063b9e7a900000000fc020000000000000000000000000e01ff020000000000000000000000000001"], 0x36) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.568147348s ago: executing program 1 (id=4736): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401", 0x68}], 0x3, 0xc, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@generic={0x3, 0x6, "b9e7a9", 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}, 0x36) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000300)="66660f3880a50f000f23de66b9100b00000f32ba420066ed0f8105000f32baf80c66b8c27db48066efbafc0cb80100ef0f01c30f78260c002626660f72f750", 0x3f}], 0x1, 0x43, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.489097179s ago: executing program 2 (id=4737): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x8030e8, &(0x7f0000000500)={0x0, 0x6976, 0x20, 0x2, 0x2f6}, &(0x7f00000003c0), &(0x7f0000000580)) r3 = io_uring_setup(0x3210, &(0x7f0000000480)={0x0, 0x14c7, 0x80, 0x23, 0x86}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x9, @empty, 0x7}, @in6={0xa, 0x4e21, 0xe, @empty, 0x7f7}], 0x38) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a37000/0x1000)=nil}) 2.460018457s ago: executing program 3 (id=4738): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3, 0xc, 0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0000120000000000000063b9e7a900000000fc020000000000000000000000000e01ff02"], 0x36) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.293598085s ago: executing program 1 (id=4739): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000003c0)={0x9, @output={0x1000, 0x0, {0xc47, 0x80000000}, 0x4, 0xfffff800}}) r4 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 2.280620612s ago: executing program 3 (id=4740): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x2, 0x7}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xa8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.043928823s ago: executing program 2 (id=4741): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB]) 947.43404ms ago: executing program 3 (id=4742): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) madvise(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x16) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 807.684661ms ago: executing program 0 (id=4743): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x58894969, 0x141000) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x2ec600, 0x14) mkdirat(r1, 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000019300)='./bus/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x1, 0x40}, {}, @raw32}], 0x1c) mkdirat(r1, &(0x7f0000000240)='./bus/file0\x00', 0x2c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2941, 0x3}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_clone(0x4000, &(0x7f0000000700), 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000780)) r7 = gettid() r8 = eventfd2(0x5, 0x0) kcmp(r6, r7, 0x4, 0xffffffffffffffff, r8) 0s ago: executing program 0 (id=4744): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001880), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a210a3589f3e733990000000a00000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x113002, 0x4) open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000180)=0x80000039f8, 0x4) r4 = syz_io_uring_setup(0xc9a, &(0x7f0000000100)={0x0, 0x79af, 0x8, 0x0, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) r7 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000000)=@secondary) add_key(0x0, &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000240)='L', 0x1, r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): [ 1278.713169][ T49] team_slave_1: left promiscuous mode [ 1278.776165][ T49] hsr_slave_0: left promiscuous mode [ 1278.786951][ T49] hsr_slave_1: left promiscuous mode [ 1278.802434][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.812366][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.949780][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.987619][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.343671][ T49] veth1_macvtap: left promiscuous mode [ 1279.354380][ T49] veth0_macvtap: left promiscuous mode [ 1279.373005][ T49] veth1_vlan: left promiscuous mode [ 1279.390401][ T49] veth0_vlan: left promiscuous mode [ 1279.548335][T18598] usbhid 4-1:0.0: can't add hid device: -71 [ 1279.574122][T18598] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1279.631494][T18598] usb 4-1: USB disconnect, device number 97 [ 1280.447957][T17665] usb 2-1: string descriptor 0 read error: -71 [ 1280.465153][T17665] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1281.064438][T17665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.088294][T17665] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1281.181828][T17665] usb 2-1: no configuration chosen from 1 choice [ 1281.212951][T18723] loop3: detected capacity change from 0 to 1024 [ 1281.227769][T17665] usb 2-1: USB disconnect, device number 62 [ 1281.615716][T18734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1283.045210][T18742] loop4: detected capacity change from 0 to 512 [ 1283.083492][T18742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1283.103891][T18742] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1283.306776][T18753] loop0: detected capacity change from 0 to 512 [ 1284.552918][T17680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.553707][T18753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.677803][T18753] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1286.132183][T18150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.553213][T18787] loop0: detected capacity change from 0 to 1024 [ 1286.602273][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1286.847614][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1290.192179][T18827] loop2: detected capacity change from 0 to 256 [ 1290.423873][T18827] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 1291.027663][ T49] IPVS: stop unused estimator thread 0... [ 1297.539065][T18891] loop0: detected capacity change from 0 to 512 [ 1297.552773][T18891] EXT4-fs: Ignoring removed bh option [ 1297.699349][T18891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1297.718000][T18891] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1297.829875][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 1298.221082][T18150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.201575][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.215070][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.047866][T17665] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1301.523900][T17665] usb 4-1: Using ep0 maxpacket: 8 [ 1301.594933][T17665] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1301.770860][T17665] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.897003][T17665] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1301.942934][T17665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.947958][T17665] usb 4-1: USB disconnect, device number 98 [ 1307.917665][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1308.092957][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1308.109680][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1308.118544][ T10] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.150521][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.184886][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1308.204211][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.235400][ T10] usbtmc 1-1:16.0: bulk endpoints not found [ 1311.150817][T19050] loop2: detected capacity change from 0 to 512 [ 1311.157728][T19050] EXT4-fs: Ignoring removed bh option [ 1311.525110][T19050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.548260][T19050] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.591721][T17665] usb 1-1: USB disconnect, device number 69 [ 1312.345520][T18598] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1312.465005][ T29] audit: type=1800 audit(1769535445.413:33): pid=19050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3456" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1312.758133][T18598] usb 4-1: Using ep0 maxpacket: 32 [ 1312.842508][T18598] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.875751][T18598] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1312.886776][T16142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.917298][T18598] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1312.935388][T18598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.002621][T18598] usb 4-1: config 0 descriptor?? [ 1313.585065][T17665] libceph: connect (1)[c::]:6789 error -101 [ 1313.648569][T17665] libceph: mon0 (1)[c::]:6789 connect error [ 1313.949346][T19063] ceph: No mds server is up or the cluster is laggy [ 1314.630916][T19081] netlink: 'syz.0.3465': attribute type 2 has an invalid length. [ 1314.639064][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1315.692200][T12631] usb 4-1: USB disconnect, device number 99 [ 1317.457730][T18598] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1317.637740][T18598] usb 4-1: Using ep0 maxpacket: 8 [ 1317.690347][T18598] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1317.763705][T18598] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.864693][T18598] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1317.958252][T18598] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1317.988331][T18598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.143461][T18598] usbtmc 4-1:16.0: bulk endpoints not found [ 1318.561419][T19116] loop0: detected capacity change from 0 to 256 [ 1318.634943][T19116] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 1319.063786][T18598] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1321.312049][T17665] usb 4-1: USB disconnect, device number 100 [ 1321.479013][T18598] usb 3-1: Using ep0 maxpacket: 16 [ 1321.522199][T18598] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.638082][T18598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1322.660541][T18598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1322.670339][T18598] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1322.680157][T18598] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1322.693853][T18598] usb 3-1: string descriptor 0 read error: -71 [ 1322.700604][T18598] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1322.710360][T18598] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1322.721090][T18598] usb 3-1: config 0 descriptor?? [ 1322.726598][T18598] usb 3-1: can't set config #0, error -71 [ 1322.735132][T18598] usb 3-1: USB disconnect, device number 68 [ 1325.139760][T18598] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1326.331713][T18598] usb 4-1: Using ep0 maxpacket: 8 [ 1326.397712][T18598] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1326.437766][T18598] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.462157][T18598] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1326.668846][T18598] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1326.733108][T18598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.943061][T18598] usbtmc 4-1:16.0: bulk endpoints not found [ 1328.030426][T18598] libceph: connect (1)[c::]:6789 error -101 [ 1328.529482][T19198] ceph: No mds server is up or the cluster is laggy [ 1328.543927][T18598] libceph: mon0 (1)[c::]:6789 connect error [ 1329.281328][T12629] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1330.381538][T12636] usb 4-1: USB disconnect, device number 101 [ 1330.442785][T12629] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.488499][T12629] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1330.532716][T12629] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 1330.540834][T19228] loop3: detected capacity change from 0 to 256 [ 1330.548881][T12629] usb 1-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 1330.574613][T12629] usb 1-1: Product: syz [ 1330.583855][T19228] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 1330.608747][T12629] usb 1-1: Manufacturer: syz [ 1330.629033][T12629] usb 1-1: config 0 descriptor?? [ 1332.539475][ T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1332.647761][T12629] usb 1-1: USB disconnect, device number 70 [ 1332.710530][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1332.741957][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.783992][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1332.810739][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1332.823196][T19253] loop1: detected capacity change from 0 to 512 [ 1332.836969][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.850127][ T10] usb 4-1: config 0 descriptor?? [ 1332.911890][T19253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.954845][T19253] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.904127][T17454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.003074][T19269] loop1: detected capacity change from 0 to 256 [ 1334.040674][T19269] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 1334.057626][T12637] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1334.237606][T12637] usb 1-1: Using ep0 maxpacket: 8 [ 1334.252964][T12637] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1334.261213][T12637] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.823161][T12637] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1334.958648][T12637] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1334.977654][T12637] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1335.013047][T12637] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1335.050908][T12637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.081391][T12637] usbtmc 1-1:16.0: bulk endpoints not found [ 1335.466833][T12637] usb 4-1: USB disconnect, device number 102 [ 1336.877837][T12631] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1337.092157][T12637] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1337.749010][T12630] usb 1-1: USB disconnect, device number 71 [ 1337.974579][T12631] usb 4-1: Using ep0 maxpacket: 32 [ 1337.982218][T12631] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1337.998403][T12631] usb 4-1: config 0 has no interface number 0 [ 1338.006636][T12631] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1338.016613][T12631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.025180][T12631] usb 4-1: Product: syz [ 1338.029384][T12631] usb 4-1: Manufacturer: syz [ 1338.033978][T12631] usb 4-1: SerialNumber: syz [ 1338.072242][T12637] usb 2-1: Using ep0 maxpacket: 32 [ 1338.081342][T12637] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.091980][T12637] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1338.101177][T12637] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1338.102214][T12631] usb 4-1: config 0 descriptor?? [ 1338.110315][T12637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.145380][T12631] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1338.148641][T12637] usb 2-1: config 0 descriptor?? [ 1338.413702][T12631] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1338.643371][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1338.991038][T12631] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1339.139511][T12631] usb 4-1: USB disconnect, device number 103 [ 1339.159590][T12631] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1339.202776][T12631] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1339.239413][T12631] quatech2 4-1:0.51: device disconnected [ 1339.655212][T19353] loop2: detected capacity change from 0 to 512 [ 1339.662400][T19353] EXT4-fs: Ignoring removed bh option [ 1340.579565][T19353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.592688][T19353] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.689161][T19324] usb 2-1: USB disconnect, device number 63 [ 1340.946240][T16142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.294092][T19368] loop0: detected capacity change from 0 to 512 [ 1341.306207][T19368] EXT4-fs: Ignoring removed bh option [ 1341.411632][T19368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1341.427188][T19368] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1341.757591][T12637] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1341.938984][T18150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.990016][T12637] usb 2-1: Using ep0 maxpacket: 8 [ 1342.001522][T12637] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1342.017722][T12637] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.046088][T12637] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1342.096094][T12637] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1342.144035][T12637] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1342.175944][T12637] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1342.196652][T12637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.229954][T12637] usbtmc 2-1:16.0: bulk endpoints not found [ 1343.229413][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 1345.630750][T12637] usb 2-1: USB disconnect, device number 64 [ 1346.359779][T19407] netlink: 'syz.4.3560': attribute type 2 has an invalid length. [ 1346.367751][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3560'. [ 1348.375194][T19419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3566'. [ 1352.645508][T19473] comedi comedi0: Minor 47 could not be opened [ 1352.837151][T19482] loop2: detected capacity change from 0 to 256 [ 1352.967565][T19482] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 1354.716371][T19512] netlink: 'syz.2.3594': attribute type 2 has an invalid length. [ 1354.716449][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'. [ 1359.354344][T19551] loop3: detected capacity change from 0 to 1024 [ 1361.976177][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.982575][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.493735][T19595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1363.661957][T19597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.717613][T12631] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1368.930044][T12631] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.959568][T19638] loop0: detected capacity change from 0 to 256 [ 1368.992255][T12631] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 1369.020824][T12631] usb 3-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 1369.042808][T19638] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 1369.053304][T12631] usb 3-1: Product: syz [ 1369.068347][T12631] usb 3-1: Manufacturer: syz [ 1369.081691][T12631] usb 3-1: config 0 descriptor?? [ 1369.105650][T12631] pwc: Askey VC010 type 2 USB webcam detected. [ 1369.915551][T12631] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1369.930060][T12631] pwc: recv_control_msg error -32 req 02 val 2700 [ 1369.940911][T12631] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1369.948753][T12631] pwc: recv_control_msg error -32 req 04 val 1000 [ 1369.955988][T12631] pwc: recv_control_msg error -32 req 04 val 1300 [ 1369.964528][T12631] pwc: recv_control_msg error -32 req 04 val 1400 [ 1369.978338][T12631] pwc: recv_control_msg error -32 req 02 val 2000 [ 1369.995872][T12631] pwc: recv_control_msg error -32 req 02 val 2100 [ 1370.010417][T12631] pwc: recv_control_msg error -32 req 04 val 1500 [ 1370.021297][T12631] pwc: recv_control_msg error -32 req 02 val 2500 [ 1370.039272][T12631] pwc: recv_control_msg error -32 req 02 val 2400 [ 1370.049848][T12631] pwc: recv_control_msg error -32 req 02 val 2600 [ 1370.079895][T12631] pwc: recv_control_msg error -32 req 02 val 2900 [ 1370.094133][T12631] pwc: recv_control_msg error -32 req 02 val 2800 [ 1370.120116][T12631] pwc: recv_control_msg error -32 req 04 val 1100 [ 1370.142809][T12631] pwc: recv_control_msg error -71 req 04 val 1200 [ 1370.154178][T12631] pwc: Registered as video103. [ 1370.171308][T12631] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input66 [ 1370.201036][T12631] usb 3-1: USB disconnect, device number 69 [ 1370.307864][ T9] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1370.547029][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1370.696989][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.731571][ T9] usb 1-1: config 0 descriptor?? [ 1371.014545][ T9] usb 1-1: USB disconnect, device number 72 [ 1373.178942][T12631] libceph: connect (1)[c::]:6789 error -101 [ 1373.179119][T12631] libceph: mon0 (1)[c::]:6789 connect error [ 1373.944216][T19684] ceph: No mds server is up or the cluster is laggy [ 1375.486630][T19708] overlayfs: missing 'lowerdir' [ 1379.240225][T19731] loop2: detected capacity change from 0 to 512 [ 1379.252334][T19731] EXT4-fs: Ignoring removed bh option [ 1379.325960][T19731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.349927][T19731] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.929759][T16142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.107630][T12637] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1380.204217][T19744] comedi comedi0: Minor 47 could not be opened [ 1380.347771][T12637] usb 4-1: Using ep0 maxpacket: 16 [ 1380.503072][T12637] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.041803][T12637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1381.111817][T12637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1381.147608][T12637] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1381.159569][T12637] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1381.174520][T12637] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1381.234839][T12637] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1381.499888][T12637] usb 4-1: Manufacturer: syz [ 1381.518204][T12637] usb 4-1: config 0 descriptor?? [ 1382.450512][T12637] rc_core: IR keymap rc-hauppauge not found [ 1382.468058][T12637] Registered IR keymap rc-empty [ 1382.653138][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1383.259023][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1383.398780][T12637] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1383.448459][T12637] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input67 [ 1383.493573][ C1] rc rc0: IR event FIFO is full! [ 1383.498835][ C1] rc rc0: IR event FIFO is full! [ 1383.503785][ C1] rc rc0: IR event FIFO is full! [ 1383.508725][ C1] rc rc0: IR event FIFO is full! [ 1383.513675][ C1] rc rc0: IR event FIFO is full! [ 1383.518839][ C1] rc rc0: IR event FIFO is full! [ 1383.523790][ C1] rc rc0: IR event FIFO is full! [ 1383.528729][ C1] rc rc0: IR event FIFO is full! [ 1383.533679][ C1] rc rc0: IR event FIFO is full! [ 1383.538613][ C1] rc rc0: IR event FIFO is full! [ 1383.543549][ C1] rc rc0: IR event FIFO is full! [ 1383.558202][ C1] rc rc0: IR event FIFO is full! [ 1383.563175][ C1] rc rc0: IR event FIFO is full! [ 1383.568401][ C1] rc rc0: IR event FIFO is full! [ 1383.573352][ C1] rc rc0: IR event FIFO is full! [ 1383.578294][ C1] rc rc0: IR event FIFO is full! [ 1383.583479][ C1] rc rc0: IR event FIFO is full! [ 1383.588842][ C1] rc rc0: IR event FIFO is full! [ 1383.594180][ C1] rc rc0: IR event FIFO is full! [ 1383.599124][ C1] rc rc0: IR event FIFO is full! [ 1383.604062][ C1] rc rc0: IR event FIFO is full! [ 1383.609002][ C1] rc rc0: IR event FIFO is full! [ 1383.613942][ C1] rc rc0: IR event FIFO is full! [ 1383.618881][ C1] rc rc0: IR event FIFO is full! [ 1383.623814][ C1] rc rc0: IR event FIFO is full! [ 1383.628734][ C1] rc rc0: IR event FIFO is full! [ 1383.634069][ C1] rc rc0: IR event FIFO is full! [ 1383.638993][ C1] rc rc0: IR event FIFO is full! [ 1383.643905][ C1] rc rc0: IR event FIFO is full! [ 1383.648815][ C1] rc rc0: IR event FIFO is full! [ 1383.653720][ C1] rc rc0: IR event FIFO is full! [ 1383.658634][ C1] rc rc0: IR event FIFO is full! [ 1383.663544][ C1] rc rc0: IR event FIFO is full! [ 1383.677909][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1383.702045][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1383.742039][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1384.399036][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1384.417688][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1384.437617][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1384.502201][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1384.547940][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1384.588552][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1384.632427][T12637] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1384.680576][T12637] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1384.720573][T12637] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1384.766466][T12637] usb 4-1: USB disconnect, device number 104 [ 1385.087632][T18598] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1385.630551][T18598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.672353][T18598] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1385.709985][T18598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.735063][T18598] usb 5-1: config 0 descriptor?? [ 1385.940627][T18598] usbhid 5-1:0.0: can't add hid device: -71 [ 1385.968510][T18598] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1386.002984][T18598] usb 5-1: USB disconnect, device number 72 [ 1388.175886][T19816] overlayfs: missing 'lowerdir' [ 1390.127907][T19833] netlink: 'syz.4.3687': attribute type 2 has an invalid length. [ 1390.135642][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3687'. [ 1393.691305][T19856] netlink: 'syz.0.3693': attribute type 2 has an invalid length. [ 1393.699068][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1395.548379][T19871] netlink: 'syz.2.3698': attribute type 2 has an invalid length. [ 1395.556114][T19871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'. [ 1397.458397][T19892] loop3: detected capacity change from 0 to 1024 [ 1399.241693][T19923] loop2: detected capacity change from 0 to 512 [ 1399.378493][T19923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.443046][T19923] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.471842][T19931] loop4: detected capacity change from 0 to 512 [ 1399.717139][T19931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.747784][T19931] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1401.160957][T16142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.238043][T19947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3715'. [ 1401.273710][T17680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.687717][T18598] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1401.867177][T18598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.972864][T18598] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1401.991626][T18598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.201335][T18598] usb 4-1: config 0 descriptor?? [ 1404.070857][T19978] overlayfs: missing 'lowerdir' [ 1405.243596][T18598] usbhid 4-1:0.0: can't add hid device: -71 [ 1405.250358][T18598] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1405.313504][T18598] usb 4-1: USB disconnect, device number 105 [ 1408.667868][T20016] netlink: 'syz.1.3739': attribute type 2 has an invalid length. [ 1408.675604][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 1409.218584][T12629] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1409.428500][T12629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.458092][T12629] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1409.487626][T12629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.508773][T12629] usb 4-1: config 0 descriptor?? [ 1409.530780][T12629] pwc: Askey VC010 type 2 USB webcam detected. [ 1410.083091][T12629] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1410.098247][T12629] pwc: recv_control_msg error -32 req 02 val 2700 [ 1410.105838][T12629] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1410.127678][T12629] pwc: recv_control_msg error -32 req 04 val 1000 [ 1410.136761][T12629] pwc: recv_control_msg error -32 req 04 val 1300 [ 1410.229293][T12629] pwc: recv_control_msg error -32 req 04 val 1400 [ 1410.638383][T12629] pwc: recv_control_msg error -32 req 02 val 2000 [ 1410.650236][T12629] pwc: recv_control_msg error -32 req 02 val 2100 [ 1410.662639][T12629] pwc: recv_control_msg error -32 req 04 val 1500 [ 1410.674002][T12629] pwc: recv_control_msg error -32 req 02 val 2500 [ 1410.681764][T12629] pwc: recv_control_msg error -32 req 02 val 2400 [ 1410.689810][T12629] pwc: recv_control_msg error -32 req 02 val 2600 [ 1410.697472][T12629] pwc: recv_control_msg error -32 req 02 val 2900 [ 1410.707801][T12629] pwc: recv_control_msg error -32 req 02 val 2800 [ 1410.717080][T12629] pwc: recv_control_msg error -71 req 04 val 1100 [ 1410.725942][T12629] pwc: recv_control_msg error -71 req 04 val 1200 [ 1410.829327][T12629] pwc: Registered as video103. [ 1410.845327][T20040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3741'. [ 1410.847126][T12629] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input70 [ 1410.964125][T12629] usb 4-1: USB disconnect, device number 106 [ 1411.697613][T12639] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1411.877674][T12639] usb 4-1: Using ep0 maxpacket: 32 [ 1411.897678][T12639] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.914419][T12639] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1411.944199][T12639] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1411.958789][T12639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.984054][T12639] usb 4-1: config 0 descriptor?? [ 1413.918577][T20088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3759'. [ 1414.607602][T18598] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1414.797599][T18598] usb 5-1: Using ep0 maxpacket: 16 [ 1414.809005][T18598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.837615][T18598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1414.868319][T18598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1414.882729][T12637] usb 4-1: USB disconnect, device number 107 [ 1414.890896][T18598] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1414.890924][T18598] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1414.893728][T18598] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1414.929291][T18598] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1414.937295][T18598] usb 5-1: Manufacturer: syz [ 1414.958510][T18598] usb 5-1: config 0 descriptor?? [ 1415.308844][T12639] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1415.449385][T18598] rc_core: IR keymap rc-hauppauge not found [ 1415.465534][T18598] Registered IR keymap rc-empty [ 1415.473926][T12639] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.494583][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1415.502070][T12639] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1415.626199][T12639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.663953][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1415.846699][T17665] libceph: connect (1)[c::]:6789 error -101 [ 1415.853841][T17665] libceph: mon0 (1)[c::]:6789 connect error [ 1415.861628][T12639] usb 1-1: config 0 descriptor?? [ 1415.886005][T18598] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1415.912571][T12639] pwc: Askey VC010 type 2 USB webcam detected. [ 1415.921118][T18598] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input71 [ 1415.938751][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1415.969157][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1415.997668][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1416.017736][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1416.037760][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1416.115735][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1416.159753][T12637] libceph: connect (1)[c::]:6789 error -101 [ 1416.165881][T12637] libceph: mon0 (1)[c::]:6789 connect error [ 1416.172177][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1416.197712][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1416.239797][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1416.278277][T18598] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1416.303654][T18598] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1416.318112][T12639] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1416.325644][T12639] pwc: recv_control_msg error -32 req 02 val 2700 [ 1416.334389][T18598] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1416.348322][T12639] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1416.357664][T20113] ceph: No mds server is up or the cluster is laggy [ 1416.441287][T12639] pwc: recv_control_msg error -32 req 04 val 1000 [ 1416.456114][T18598] usb 5-1: USB disconnect, device number 73 [ 1416.474320][T12639] pwc: recv_control_msg error -32 req 04 val 1300 [ 1416.497054][T12639] pwc: recv_control_msg error -32 req 04 val 1400 [ 1416.514770][T12639] pwc: recv_control_msg error -32 req 02 val 2000 [ 1416.522735][T12639] pwc: recv_control_msg error -32 req 02 val 2100 [ 1417.712333][T12639] pwc: recv_control_msg error -32 req 04 val 1500 [ 1417.727022][T12639] pwc: recv_control_msg error -32 req 02 val 2500 [ 1417.735156][T12639] pwc: recv_control_msg error -32 req 02 val 2400 [ 1417.752670][T12639] pwc: recv_control_msg error -32 req 02 val 2600 [ 1417.760464][T12639] pwc: recv_control_msg error -32 req 02 val 2900 [ 1417.767754][T12639] pwc: recv_control_msg error -32 req 02 val 2800 [ 1417.775147][T12639] pwc: recv_control_msg error -71 req 04 val 1100 [ 1417.783429][T12639] pwc: recv_control_msg error -71 req 04 val 1200 [ 1417.798596][T12639] pwc: Registered as video103. [ 1417.876250][T12639] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input72 [ 1417.895038][T20130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3773'. [ 1417.921078][T12639] usb 1-1: USB disconnect, device number 73 [ 1420.667411][T20159] netlink: 'syz.0.3780': attribute type 2 has an invalid length. [ 1420.675527][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3780'. [ 1421.588614][T20176] loop1: detected capacity change from 0 to 512 [ 1421.595858][T20176] EXT4-fs: Ignoring removed bh option [ 1422.478653][T20176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1422.491928][T20176] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1422.580649][T20188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3787'. [ 1422.879264][T17454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.091951][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.098840][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.926058][T20206] netlink: 'syz.4.3794': attribute type 2 has an invalid length. [ 1423.933832][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3794'. [ 1425.152842][T20227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3799'. [ 1426.787595][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1426.954769][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.976298][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1427.510488][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.521449][ T9] usb 5-1: config 0 descriptor?? [ 1427.530178][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1427.593631][T20267] binder: 20266:20267 unknown command 0 [ 1427.599419][T20267] binder: 20266:20267 ioctl c0306201 200000000080 returned -22 [ 1428.177320][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1428.188459][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1428.207694][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1428.228032][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1428.240051][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1428.249579][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1428.287709][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1428.307609][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1428.315396][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1428.359503][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1428.386536][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 1428.409983][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 1428.430857][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 1428.445300][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 1428.453913][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1428.461018][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1428.469600][ T9] pwc: Registered as video103. [ 1428.479337][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input73 [ 1429.131953][ T9] usb 5-1: USB disconnect, device number 74 [ 1430.333303][T20300] loop1: detected capacity change from 0 to 512 [ 1430.341796][T20300] EXT4-fs: Ignoring removed bh option [ 1431.136251][T20300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1431.152741][T20300] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1431.482496][T17454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.194179][T20320] loop1: detected capacity change from 0 to 1024 [ 1432.678230][T20328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3828'. [ 1436.292487][T18598] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1436.527614][T18598] usb 1-1: Using ep0 maxpacket: 16 [ 1436.534414][T18598] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1436.547227][T18598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1436.577117][T18598] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1436.589618][T18598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.602330][T18598] usb 1-1: Product: syz [ 1436.606824][T18598] usb 1-1: Manufacturer: syz [ 1436.626237][ T29] audit: type=1326 audit(1769535569.623:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20355 comm="syz.4.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1436.679940][T18598] usb 1-1: SerialNumber: syz [ 1436.730411][T18598] usb 1-1: config 0 descriptor?? [ 1436.743407][ T29] audit: type=1326 audit(1769535569.633:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20355 comm="syz.4.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1436.799879][T18598] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1436.817312][T18598] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1437.091964][T20369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3840'. [ 1438.348161][T18598] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1438.358581][T18598] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1439.676656][T20403] loop3: detected capacity change from 0 to 128 [ 1439.716102][T20403] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1439.833347][T20403] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1439.888374][T18598] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc5d57 [ 1440.125017][T18598] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1440.135407][T18598] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1440.146756][T18598] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1440.660880][T18598] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1440.672641][T17251] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1440.691375][T18598] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1440.706042][T18598] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1440.745367][T18598] usb 1-1: USB disconnect, device number 74 [ 1441.236336][T20424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3855'. [ 1442.937588][T12636] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1443.197610][T12636] usb 1-1: Using ep0 maxpacket: 16 [ 1443.204624][T12636] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.233543][T12636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1443.252833][T12636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1443.263034][T12636] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1444.579461][T12636] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1444.593828][T12636] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1444.603275][T12636] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1444.611577][T12636] usb 1-1: Manufacturer: syz [ 1444.637746][T12639] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1444.663315][T12636] usb 1-1: config 0 descriptor?? [ 1444.797698][T12639] usb 2-1: Using ep0 maxpacket: 16 [ 1445.658780][T12639] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1445.727842][T12639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1445.741697][T12639] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1445.760978][T12639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.785001][T12639] usb 2-1: Product: syz [ 1445.797632][T12639] usb 2-1: Manufacturer: syz [ 1445.817724][T12639] usb 2-1: SerialNumber: syz [ 1445.877657][T12636] rc_core: IR keymap rc-hauppauge not found [ 1445.883599][T12636] Registered IR keymap rc-empty [ 1445.898720][T12639] usb 2-1: config 0 descriptor?? [ 1445.932834][T12639] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1445.947804][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1445.960763][T12639] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1445.968669][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1445.993175][T20466] loop2: detected capacity change from 0 to 1024 [ 1446.004195][T12636] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1446.152740][T12636] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input74 [ 1446.214187][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.248991][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.287706][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.317667][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.347868][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.378288][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.417689][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.447690][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.478289][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.507637][T12636] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1446.541771][T12639] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1446.549177][T12636] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1446.564631][T12639] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1446.575819][T12636] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1446.607902][T12636] usb 1-1: USB disconnect, device number 75 [ 1447.548970][T20488] loop3: detected capacity change from 0 to 512 [ 1447.556244][T20488] EXT4-fs: Ignoring removed bh option [ 1447.694912][T12639] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc5d57 [ 1447.743920][T20488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1447.756735][T20488] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1447.914077][T12639] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1447.942723][T12639] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1447.958540][T12639] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1447.965344][T12639] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1447.974164][T12639] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1448.067290][T12639] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1448.085068][T12639] usb 2-1: USB disconnect, device number 65 [ 1449.850109][T17251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.910980][T20508] loop4: detected capacity change from 0 to 1024 [ 1451.524066][T20535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3886'. [ 1452.802306][ T29] audit: type=1326 audit(1769535585.843:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.3.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1453.423208][T20550] loop0: detected capacity change from 0 to 1024 [ 1453.434703][ T29] audit: type=1326 audit(1769535585.873:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.3.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1454.743821][T20568] loop0: detected capacity change from 0 to 512 [ 1454.751540][T20568] EXT4-fs: Ignoring removed bh option [ 1456.670590][T20568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1456.683729][T20568] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.924959][T18150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.597853][T12636] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1457.835009][T12636] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1457.927688][T12636] usb 1-1: config 0 has no interface number 0 [ 1457.976345][T12636] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1457.986790][T12636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.004687][T12636] usb 1-1: config 0 descriptor?? [ 1458.016892][T12636] usb 1-1: selecting invalid altsetting 1 [ 1458.023985][T12636] dvb_ttusb_budget: ttusb_init_controller: error [ 1458.030430][T12636] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1458.650441][T12636] DVB: Unable to find symbol cx22700_attach() [ 1459.578950][T20613] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1459.976173][T12636] DVB: Unable to find symbol tda10046_attach() [ 1460.017612][T12636] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1460.145316][T12636] usb 1-1: USB disconnect, device number 76 [ 1461.813562][T20652] blktrace: Concurrent blktraces are not allowed on loop7 [ 1461.840290][T20655] netlink: 'syz.1.3925': attribute type 10 has an invalid length. [ 1461.895767][T20655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3925'. [ 1462.490772][ T29] audit: type=1326 audit(1769535595.523:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20648 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1462.546948][T20655] team0: Port device geneve0 added [ 1462.562975][ T29] audit: type=1326 audit(1769535595.523:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20648 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1462.826723][T20665] loop4: detected capacity change from 0 to 512 [ 1462.833930][T20665] EXT4-fs: Ignoring removed bh option [ 1463.394852][T20665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.410043][T20665] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1463.882081][T20680] netlink: 'syz.3.3931': attribute type 2 has an invalid length. [ 1463.890090][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3931'. [ 1465.848631][T20703] blktrace: Concurrent blktraces are not allowed on loop7 [ 1465.941515][T20705] comedi comedi0: Minor 47 could not be opened [ 1468.350907][T20715] loop1: detected capacity change from 0 to 512 [ 1468.363077][T20715] EXT4-fs: Ignoring removed bh option [ 1468.838530][T20715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1468.851295][T20715] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1468.913353][T17680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.584187][T20724] netlink: 'syz.2.3943': attribute type 2 has an invalid length. [ 1469.592048][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1469.616213][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1469.623910][T17454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.878270][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1470.049216][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.087185][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1470.121157][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1470.167867][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1470.198131][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1470.281271][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1470.303541][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1470.312315][ T9] usb 4-1: Manufacturer: syz [ 1470.448616][T20736] trusted_key: encrypted_key: insufficient parameters specified [ 1470.552163][ T9] usb 4-1: config 0 descriptor?? [ 1470.704515][ T9] usb 4-1: can't set config #0, error -71 [ 1470.826706][ T9] usb 4-1: USB disconnect, device number 108 [ 1471.224524][T20742] netlink: 'syz.3.3950': attribute type 2 has an invalid length. [ 1471.232301][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3950'. [ 1472.957457][T20766] netlink: 'syz.0.3957': attribute type 2 has an invalid length. [ 1472.965451][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3957'. [ 1473.928944][T20781] sctp: [Deprecated]: syz.4.3962 (pid 20781) Use of int in max_burst socket option deprecated. [ 1473.928944][T20781] Use struct sctp_assoc_value instead [ 1475.964901][T20788] overlayfs: missing 'lowerdir' [ 1477.485391][T20806] netlink: 'syz.2.3969': attribute type 1 has an invalid length. [ 1478.578908][ T29] audit: type=1326 audit(1769535611.603:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1478.647022][ T29] audit: type=1326 audit(1769535611.603:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1478.698396][ T29] audit: type=1326 audit(1769535611.603:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1478.724380][ T29] audit: type=1326 audit(1769535611.603:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1478.813788][ T29] audit: type=1326 audit(1769535611.603:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1478.910708][ T29] audit: type=1326 audit(1769535611.603:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1478.956219][ T29] audit: type=1326 audit(1769535611.603:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1479.014007][ T29] audit: type=1326 audit(1769535611.603:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1479.132688][ T29] audit: type=1326 audit(1769535611.603:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1479.258768][ T29] audit: type=1326 audit(1769535611.603:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1480.168136][T20838] loop4: detected capacity change from 0 to 1024 [ 1484.518718][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.525436][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.170638][T20906] sctp: [Deprecated]: syz.2.4002 (pid 20906) Use of int in max_burst socket option deprecated. [ 1488.170638][T20906] Use struct sctp_assoc_value instead [ 1491.167801][T12636] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1492.517621][T12636] usb 3-1: Using ep0 maxpacket: 32 [ 1492.539615][T12636] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.640886][T12636] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1492.650007][T12636] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1492.705012][T12636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.726622][T12636] usb 3-1: config 0 descriptor?? [ 1494.963347][T20767] usb 3-1: USB disconnect, device number 70 [ 1498.422265][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1498.422282][ T29] audit: type=1326 audit(1769535631.443:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1498.601032][ T29] audit: type=1326 audit(1769535631.443:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1498.694790][ T29] audit: type=1326 audit(1769535631.443:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1498.779562][ T29] audit: type=1326 audit(1769535631.443:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1499.101110][ T29] audit: type=1326 audit(1769535631.443:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1499.539919][ T29] audit: type=1326 audit(1769535631.443:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1499.718032][ T29] audit: type=1326 audit(1769535631.443:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1499.811318][ T29] audit: type=1326 audit(1769535631.443:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1499.978587][ T29] audit: type=1326 audit(1769535631.453:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1500.001672][ T29] audit: type=1326 audit(1769535631.453:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.4.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1501.016667][T21012] trusted_key: encrypted_key: insufficient parameters specified [ 1501.378253][T21010] loop3: detected capacity change from 0 to 4096 [ 1501.760090][T21015] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1503.769000][T21040] sctp: [Deprecated]: syz.4.4042 (pid 21040) Use of int in max_burst socket option deprecated. [ 1503.769000][T21040] Use struct sctp_assoc_value instead [ 1506.054607][T21050] trusted_key: encrypted_key: insufficient parameters specified [ 1512.015907][T21090] loop0: detected capacity change from 0 to 512 [ 1512.023168][T21090] EXT4-fs: Ignoring removed bh option [ 1512.029578][T20767] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1512.219133][T20767] usb 3-1: Using ep0 maxpacket: 8 [ 1512.249266][T21090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1512.262423][T21090] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1512.317098][T20767] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1512.325657][T20767] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1512.338299][T20767] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1512.365196][T20767] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1512.388278][T20767] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1512.412444][T20767] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1512.544855][T20767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.826028][T20767] usb 3-1: GET_CAPABILITIES returned 0 [ 1512.841857][T20767] usbtmc 3-1:16.0: can't read capabilities [ 1512.992975][T18150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.370756][T21081] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 1513.378010][T20767] usb 3-1: USB disconnect, device number 71 [ 1513.780933][T12637] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1513.957617][T12637] usb 5-1: Using ep0 maxpacket: 16 [ 1513.969694][T12637] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1513.987086][T12637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1514.009655][T12637] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1514.019675][T12637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.037622][T12637] usb 5-1: Product: syz [ 1514.047563][T12637] usb 5-1: Manufacturer: syz [ 1514.052534][T12637] usb 5-1: SerialNumber: syz [ 1514.065655][T12637] usb 5-1: config 0 descriptor?? [ 1514.101500][T12637] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1514.146184][T12637] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1514.332511][T21123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.340043][T21123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.449881][T21113] loop3: detected capacity change from 0 to 32768 [ 1514.497434][T21113] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1514.550391][T21123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1514.565932][T21123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.583338][T21113] XFS (loop3): Ending clean mount [ 1514.765107][T17251] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1514.840630][T12637] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1514.849000][T12637] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1514.856476][ T2943] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.871034][T12637] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1514.878323][ T2943] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.887203][ T2943] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.898099][T12637] em28xx 5-1:0.0: No AC97 audio processor [ 1514.914043][ T2943] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.561011][T21157] loop0: detected capacity change from 0 to 512 [ 1516.568269][T21157] EXT4-fs: Ignoring removed bh option [ 1516.713678][T21157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.733115][T21157] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.113386][T18150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.176753][ T9] usb 5-1: USB disconnect, device number 75 [ 1517.194843][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 1517.253610][ T9] em28xx 5-1:0.0: Freeing device [ 1518.047649][T12637] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1518.247606][T12637] usb 3-1: Using ep0 maxpacket: 8 [ 1518.256078][T12637] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1518.264420][T12637] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1518.274563][T12637] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1518.285773][T12637] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1518.295953][T12637] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1518.309326][T12637] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1518.318504][T12637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.327909][T21178] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1518.335162][T21178] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1518.344132][T21178] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1518.350177][T21178] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1518.380621][T21178] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1518.387311][T21178] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1518.394942][T21178] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1518.400976][T21178] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1518.425658][T21178] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1518.432184][T21178] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1519.422423][T21198] blktrace: Concurrent blktraces are not allowed on loop1 [ 1519.679490][T12637] usb 3-1: GET_CAPABILITIES returned 0 [ 1519.685037][T12637] usbtmc 3-1:16.0: can't read capabilities [ 1519.717341][T12637] usb 3-1: USB disconnect, device number 72 [ 1519.947648][T17480] Bluetooth: hci5: command 0x0406 tx timeout [ 1520.537629][T21206] loop3: detected capacity change from 0 to 512 [ 1520.551419][T21206] EXT4-fs: Ignoring removed bh option [ 1520.845433][T17480] Bluetooth: hci0: command 0x0406 tx timeout [ 1520.851641][T17480] Bluetooth: hci2: command 0x0406 tx timeout [ 1520.856014][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 1520.857725][T17480] Bluetooth: hci1: command 0x0406 tx timeout [ 1521.103309][T21206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1521.116129][T21206] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1521.216462][T21210] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1521.222881][T21210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1521.230835][T21210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1521.237002][T21210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1521.243113][T21210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1521.411081][T17251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.750588][T21224] loop2: detected capacity change from 0 to 128 [ 1521.845202][T21224] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1522.053930][T21224] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1522.815285][T16142] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1523.207621][T21207] Bluetooth: hci5: command 0x0406 tx timeout [ 1523.227604][T21207] Bluetooth: hci0: command 0x0406 tx timeout [ 1523.451988][T21207] Bluetooth: hci2: command 0x0406 tx timeout [ 1523.452756][T21208] Bluetooth: hci3: command 0x0406 tx timeout [ 1523.460063][T21207] Bluetooth: hci1: command 0x0406 tx timeout [ 1524.117095][T21251] blktrace: Concurrent blktraces are not allowed on loop1 [ 1525.083104][T21277] bridge1: entered promiscuous mode [ 1525.089519][T21277] bridge1: entered allmulticast mode [ 1526.032715][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1526.174218][T21287] sctp: [Deprecated]: syz.0.4103 (pid 21287) Use of int in max_burst socket option deprecated. [ 1526.174218][T21287] Use struct sctp_assoc_value instead [ 1527.187826][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1527.419181][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1527.427405][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1527.437820][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1527.448876][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1527.459260][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1527.472559][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1527.481895][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.716376][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 1527.721995][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1527.802556][T21302] blktrace: Concurrent blktraces are not allowed on loop7 [ 1528.300456][ T9] usb 2-1: USB disconnect, device number 66 [ 1530.385882][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1530.385900][ T29] audit: type=1326 audit(1769535663.423:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1530.530475][ T29] audit: type=1326 audit(1769535663.423:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1530.745179][ T29] audit: type=1326 audit(1769535663.493:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1531.394344][T21338] sctp: [Deprecated]: syz.0.4115 (pid 21338) Use of int in max_burst socket option deprecated. [ 1531.394344][T21338] Use struct sctp_assoc_value instead [ 1531.797144][ T29] audit: type=1326 audit(1769535663.493:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1532.378459][ T29] audit: type=1326 audit(1769535663.493:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1532.419000][ T29] audit: type=1326 audit(1769535663.493:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1532.441821][T20767] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1532.449834][ T29] audit: type=1326 audit(1769535663.493:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1532.631051][T21347] blktrace: Concurrent blktraces are not allowed on loop1 [ 1533.283545][ T29] audit: type=1326 audit(1769535663.493:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1533.348215][ T29] audit: type=1326 audit(1769535663.493:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1533.388632][T20767] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1533.414510][T20767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.438823][T20767] usb 2-1: Product: syz [ 1533.443101][ T29] audit: type=1326 audit(1769535663.493:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3fa719aeb9 code=0x7ffc0000 [ 1533.515685][T20767] usb 2-1: Manufacturer: syz [ 1533.520409][T20767] usb 2-1: SerialNumber: syz [ 1533.533184][T20767] usb 2-1: config 0 descriptor?? [ 1533.631910][T21351] trusted_key: encrypted_key: insufficient parameters specified [ 1534.157441][T20767] usb 2-1: USB disconnect, device number 67 [ 1535.484060][T19324] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1535.712573][T19324] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1535.730492][T19324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.763889][T19324] usb 1-1: Product: syz [ 1535.774568][T19324] usb 1-1: Manufacturer: syz [ 1535.797099][T19324] usb 1-1: SerialNumber: syz [ 1535.820394][T19324] usb 1-1: config 0 descriptor?? [ 1535.997833][T20767] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1536.072874][T21379] sctp: [Deprecated]: syz.1.4128 (pid 21379) Use of int in max_burst socket option deprecated. [ 1536.072874][T21379] Use struct sctp_assoc_value instead [ 1536.191950][T20767] usb 5-1: Using ep0 maxpacket: 8 [ 1536.317164][T20767] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1536.505423][T20767] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1536.705555][T12640] usb 1-1: USB disconnect, device number 77 [ 1536.725638][T20767] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1536.788687][T20767] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1536.853158][T20767] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1536.907619][T20767] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1536.930103][T20767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.185460][T20767] usb 5-1: GET_CAPABILITIES returned 0 [ 1537.195230][T20767] usbtmc 5-1:16.0: can't read capabilities [ 1537.632288][T20767] usb 5-1: USB disconnect, device number 76 [ 1538.195465][T21393] netlink: 'syz.3.4131': attribute type 1 has an invalid length. [ 1538.320710][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4131'. [ 1539.512155][T21411] netlink: 'syz.4.4135': attribute type 10 has an invalid length. [ 1539.752974][T21412] loop3: detected capacity change from 0 to 512 [ 1539.768968][T21412] EXT4-fs: Ignoring removed bh option [ 1540.600523][T21411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4135'. [ 1540.710371][T21412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1540.724027][T21412] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.815757][T21411] team0: Port device geneve0 added [ 1541.021874][T17251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.427608][T19324] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1542.630290][T19324] usb 5-1: Using ep0 maxpacket: 8 [ 1542.644971][T19324] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1542.666135][T19324] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1542.704576][T19324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1542.758819][T19324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1542.772979][T19324] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.786406][T19324] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1542.795829][T19324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.917231][T21453] sctp: [Deprecated]: syz.0.4149 (pid 21453) Use of int in max_burst socket option deprecated. [ 1542.917231][T21453] Use struct sctp_assoc_value instead [ 1544.042588][T19324] usb 5-1: GET_CAPABILITIES returned 0 [ 1544.048581][T19324] usbtmc 5-1:16.0: can't read capabilities [ 1544.112901][T19324] usb 5-1: USB disconnect, device number 77 [ 1545.978762][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.991928][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.129862][T21502] kvm: kvm [21501]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1549.407704][T12637] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1549.551014][T21511] batman_adv: batadv0: Adding interface: dummy0 [ 1549.577619][T12637] usb 4-1: Using ep0 maxpacket: 8 [ 1549.589872][T21511] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.621313][T21511] batman_adv: batadv0: Interface activated: dummy0 [ 1549.628188][T12637] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1549.642200][T12637] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1549.675055][T12637] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1549.720359][T12637] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1549.746802][T12637] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1549.801776][T21512] batadv0: mtu less than device minimum [ 1549.818519][T21512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1549.829774][T21512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1549.840800][T21512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1549.851817][T21512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1549.862836][T21512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1549.873840][T21512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1549.884847][T21512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1549.895851][T21512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1549.906865][T21512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1549.967241][T12637] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1549.992016][T12637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.217224][T12637] usb 4-1: GET_CAPABILITIES returned 0 [ 1550.229510][T12637] usbtmc 4-1:16.0: can't read capabilities [ 1550.373528][T21522] netlink: 'syz.4.4172': attribute type 10 has an invalid length. [ 1550.381672][T21522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4172'. [ 1550.758748][ T9] usb 4-1: USB disconnect, device number 109 [ 1550.769949][T21504] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 1550.782285][T21526] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1551.198192][T21529] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1551.207809][T21529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1551.214820][T21529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1551.222811][T21529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1551.230774][T21529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1552.999206][T17480] Bluetooth: hci5: command 0x0406 tx timeout [ 1554.398530][T21208] Bluetooth: hci2: command 0x0406 tx timeout [ 1554.404588][T21208] Bluetooth: hci3: command 0x0406 tx timeout [ 1554.410680][T21207] Bluetooth: hci1: command 0x0406 tx timeout [ 1554.416743][T21207] Bluetooth: hci0: command 0x0406 tx timeout [ 1554.477632][T21561] sctp: [Deprecated]: syz.1.4180 (pid 21561) Use of int in max_burst socket option deprecated. [ 1554.477632][T21561] Use struct sctp_assoc_value instead [ 1557.592461][T12637] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1557.828031][T12637] usb 2-1: Using ep0 maxpacket: 8 [ 1558.081900][T12637] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1558.102513][T12637] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1558.337303][T12637] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1558.350478][T12637] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1558.360727][T12637] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1558.384065][T12637] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1558.654688][T21603] sctp: [Deprecated]: syz.2.4194 (pid 21603) Use of int in max_burst socket option deprecated. [ 1558.654688][T21603] Use struct sctp_assoc_value instead [ 1559.348274][T12637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.904482][T21602] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1560.966128][T12637] usb 2-1: GET_CAPABILITIES returned 0 [ 1561.058226][T12637] usbtmc 2-1:16.0: can't read capabilities [ 1561.251215][T12637] usb 2-1: USB disconnect, device number 68 [ 1561.442393][T21618] loop0: detected capacity change from 0 to 512 [ 1561.454632][T21618] EXT4-fs: Ignoring removed bh option [ 1561.539211][T21618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.564307][T21618] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1561.738048][T12640] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1563.138975][T18150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.148184][T12640] usb 4-1: Using ep0 maxpacket: 32 [ 1563.169773][T12640] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1563.199362][T12640] usb 4-1: config 0 has no interface number 0 [ 1563.290663][T12640] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1563.307869][T12640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.316834][T12640] usb 4-1: Product: syz [ 1563.347407][T12640] usb 4-1: Manufacturer: syz [ 1563.357166][T12640] usb 4-1: SerialNumber: syz [ 1563.548481][T12640] usb 4-1: config 0 descriptor?? [ 1563.679450][T12640] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1563.903672][T12640] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1563.942523][T12640] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1563.992091][T21635] netlink: 'syz.4.4203': attribute type 1 has an invalid length. [ 1564.027603][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'. [ 1564.351439][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1564.359321][T12637] usb 4-1: USB disconnect, device number 110 [ 1564.369622][T12637] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1564.514998][T12637] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1564.582421][T12637] quatech2 4-1:0.51: device disconnected [ 1564.806654][T21632] loop0: detected capacity change from 0 to 32768 [ 1564.905689][T21632] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1565.026023][T21632] XFS (loop0): Ending clean mount [ 1566.511503][T18150] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1567.450427][T21675] batman_adv: batadv0: Adding interface: dummy0 [ 1567.456696][T21675] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.495550][T21675] batman_adv: batadv0: Interface activated: dummy0 [ 1567.532974][T21675] net_ratelimit: 10 callbacks suppressed [ 1567.532988][T21675] batadv0: mtu less than device minimum [ 1567.563437][T21675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1567.574576][T21675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1567.585626][T21675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1567.596660][T21675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1567.607793][T21675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1567.618837][T21675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1567.629901][T21675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1567.640936][T21675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1567.651955][T21675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.586096][T21692] blktrace: Concurrent blktraces are not allowed on loop1 [ 1570.191708][T21714] netlink: 'syz.2.4223': attribute type 1 has an invalid length. [ 1570.237598][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'. [ 1571.686768][T21726] netlink: 'syz.4.4227': attribute type 2 has an invalid length. [ 1571.694825][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1573.161835][T12639] libceph: connect (1)[c::]:6789 error -101 [ 1573.183228][T12639] libceph: mon0 (1)[c::]:6789 connect error [ 1573.450627][T12637] libceph: connect (1)[c::]:6789 error -101 [ 1573.501051][T12637] libceph: mon0 (1)[c::]:6789 connect error [ 1573.638451][T21733] ceph: No mds server is up or the cluster is laggy [ 1574.757802][T21765] netlink: 'syz.0.4240': attribute type 2 has an invalid length. [ 1574.765541][T21765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4240'. [ 1575.187635][T19324] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1575.380620][T19324] usb 3-1: Using ep0 maxpacket: 16 [ 1575.642947][T19324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.653645][T19324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1576.566243][T19324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1576.575974][T19324] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1576.585683][T19324] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1576.718824][T19324] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1576.740298][T19324] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1576.763289][T19324] usb 3-1: Manufacturer: syz [ 1576.773771][T21773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.781192][T21773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.801234][T19324] usb 3-1: config 0 descriptor?? [ 1576.955901][T21773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.033123][T21773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.302305][T12639] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1577.571935][T19324] rc_core: IR keymap rc-hauppauge not found [ 1577.577606][T12639] usb 2-1: Using ep0 maxpacket: 16 [ 1577.585151][T12639] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.587601][T19324] Registered IR keymap rc-empty [ 1577.596809][T12639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1577.618533][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1577.650320][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1577.713338][T19324] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1577.731637][T12639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1577.742474][T12639] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1577.754908][T12639] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1577.776244][T12639] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1577.786547][T12639] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1577.796942][T12639] usb 2-1: Manufacturer: syz [ 1577.805774][T19324] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input96 [ 1577.813852][T12639] usb 2-1: config 0 descriptor?? [ 1577.843349][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1577.903255][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1577.919853][T18404] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.930786][T18404] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.948611][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1577.955920][T18404] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.970308][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1577.987025][T18404] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.017679][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1578.057663][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1578.103252][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1578.147670][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1578.170983][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1578.198476][T19324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1578.239735][T19324] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1578.268797][T19324] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1578.307590][T12639] rc_core: IR keymap rc-hauppauge not found [ 1578.313568][T12639] Registered IR keymap rc-empty [ 1578.320798][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1578.351309][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1578.351689][T19324] usb 3-1: USB disconnect, device number 73 [ 1578.594585][T12639] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1578.631290][T12639] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input98 [ 1579.213730][T21801] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1579.219800][T21801] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1579.225774][T21801] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1579.231768][T21801] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1579.241355][T21801] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1580.008202][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.048060][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.087749][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.117729][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.146717][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.667717][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 1580.841430][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.867654][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.888132][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.908318][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.927676][T12639] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1580.966072][T12639] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1581.060170][T12639] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1581.098280][T12639] usb 2-1: USB disconnect, device number 69 [ 1581.307876][T21562] Bluetooth: hci3: command 0x0406 tx timeout [ 1581.307906][T21208] Bluetooth: hci0: command 0x0406 tx timeout [ 1581.314564][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 1581.320331][T17480] Bluetooth: hci1: command 0x0406 tx timeout [ 1581.948035][T21824] trusted_key: encrypted_key: insufficient parameters specified [ 1581.977848][T19324] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1582.236920][T19324] usb 4-1: Using ep0 maxpacket: 16 [ 1582.326249][T19324] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1582.427084][T19324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1582.616045][T19324] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1582.708308][T19324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.823883][T19324] usb 4-1: Product: syz [ 1582.869076][T19324] usb 4-1: Manufacturer: syz [ 1582.922699][T19324] usb 4-1: SerialNumber: syz [ 1583.280653][T19324] usb 4-1: config 0 descriptor?? [ 1583.652194][T19324] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1583.726442][T19324] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1584.430861][T19324] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1584.447152][T19324] em28xx 4-1:0.0: Config register raw data: 0x00 [ 1586.147843][T21868] netlink: 'syz.2.4269': attribute type 2 has an invalid length. [ 1586.155583][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4269'. [ 1586.635083][T12629] usb 4-1: USB disconnect, device number 111 [ 1586.649227][T12629] em28xx 4-1:0.0: Disconnecting em28xx [ 1586.659853][T12629] em28xx 4-1:0.0: Freeing device [ 1590.157653][T12637] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1590.437593][T12637] usb 2-1: Using ep0 maxpacket: 32 [ 1590.444526][T12637] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1590.457634][T12637] usb 2-1: config 0 has no interface number 0 [ 1590.470444][T12637] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1590.487602][T12637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.507636][T12637] usb 2-1: Product: syz [ 1590.511886][T12637] usb 2-1: Manufacturer: syz [ 1590.535850][T12637] usb 2-1: SerialNumber: syz [ 1591.047459][T12637] usb 2-1: config 0 descriptor?? [ 1591.072799][T12637] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1591.553515][T21920] netlink: 'syz.2.4281': attribute type 2 has an invalid length. [ 1591.561687][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4281'. [ 1592.802067][T12637] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1592.821708][T12637] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1593.044789][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1593.055376][T12637] usb 2-1: USB disconnect, device number 70 [ 1593.073754][T12637] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1593.095111][T12637] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1593.117929][T12637] quatech2 2-1:0.51: device disconnected [ 1595.168475][T21943] netlink: 'syz.4.4288': attribute type 1 has an invalid length. [ 1595.204461][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4288'. [ 1599.187599][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1599.371484][T21990] blktrace: Concurrent blktraces are not allowed on loop7 [ 1599.435640][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.856174][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1600.037628][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1600.046715][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.718832][ T9] usb 3-1: config 0 descriptor?? [ 1601.393124][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1601.422886][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1601.688006][ T9] usb 3-1: USB disconnect, device number 74 [ 1602.449065][T12637] libceph: connect (1)[c::]:6789 error -101 [ 1602.565360][T12637] libceph: mon0 (1)[c::]:6789 connect error [ 1602.797445][T22020] ceph: No mds server is up or the cluster is laggy [ 1603.359179][T22037] loop0: detected capacity change from 0 to 512 [ 1603.371927][T22037] EXT4-fs: Ignoring removed bh option [ 1603.813083][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1603.813099][ T29] audit: type=1326 audit(1769535736.843:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1603.987580][ T29] audit: type=1326 audit(1769535736.843:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1604.010731][ T29] audit: type=1326 audit(1769535736.843:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1604.059660][ T29] audit: type=1326 audit(1769535736.853:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1604.082579][ T29] audit: type=1326 audit(1769535736.853:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1604.214270][ T29] audit: type=1326 audit(1769535736.853:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1604.520296][T22037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1604.536448][T22037] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1604.575892][ T29] audit: type=1326 audit(1769535736.853:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1604.602355][ T29] audit: type=1326 audit(1769535736.883:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1604.631762][ T29] audit: type=1326 audit(1769535736.883:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1604.654549][ T29] audit: type=1326 audit(1769535736.893:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.1.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a8f9aeb9 code=0x7ffc0000 [ 1604.753037][T22045] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1604.759296][T22045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1604.765354][T22045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1604.771425][T22045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1604.777466][T22045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1605.132562][T18150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.587750][T17480] Bluetooth: hci5: command 0x0406 tx timeout [ 1606.827664][T17480] Bluetooth: hci2: command 0x0406 tx timeout [ 1606.827694][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 1606.833746][T21208] Bluetooth: hci1: command 0x0406 tx timeout [ 1606.839659][T21562] Bluetooth: hci0: command 0x0406 tx timeout [ 1607.195132][T22065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.202384][T22065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.859392][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.866634][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.942604][T22065] batman_adv: batadv0: Interface deactivated: dummy0 [ 1608.298011][T22077] loop1: detected capacity change from 0 to 512 [ 1608.310295][T22077] EXT4-fs: Ignoring removed bh option [ 1608.710458][T22077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1608.723278][T22077] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1608.825813][T22083] loop0: detected capacity change from 0 to 64 [ 1608.878519][T22083] hfs: unable to open catalog tree [ 1608.935367][T22065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1608.949802][T22065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.984757][T22083] hfs: can't find a HFS filesystem on dev loop0 [ 1609.004064][T17454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.507592][ T8082] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.518551][ T8082] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.530834][ T8082] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.563013][ T8082] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.935142][T22111] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1613.941302][T22111] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1613.947356][T22111] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1613.953479][T22111] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1613.960016][T22111] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1614.183513][T12639] libceph: connect (1)[c::]:6789 error -101 [ 1614.289288][T12639] libceph: mon0 (1)[c::]:6789 connect error [ 1614.484224][T22122] ceph: No mds server is up or the cluster is laggy [ 1615.787576][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 1616.207877][T17480] Bluetooth: hci3: command 0x0406 tx timeout [ 1616.214136][T21208] Bluetooth: hci2: command 0x0406 tx timeout [ 1616.220412][T17480] Bluetooth: hci1: command 0x0406 tx timeout [ 1616.232342][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 1616.581350][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1616.581366][ T29] audit: type=1326 audit(1769535749.623:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.0.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1616.662325][ T29] audit: type=1326 audit(1769535749.623:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.0.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1617.819130][T22141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.826537][T22141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.423895][T22141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1619.851250][T22141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.108482][T16266] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.132064][T16266] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.177707][T16266] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.231067][T12443] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.386716][T22237] netlink: 'syz.4.4369': attribute type 2 has an invalid length. [ 1628.394485][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4369'. [ 1628.451576][T22236] comedi comedi0: Minor 47 could not be opened [ 1632.594179][T22283] loop1: detected capacity change from 0 to 512 [ 1632.606121][T22283] EXT4-fs: Ignoring removed bh option [ 1633.060200][T22283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.074895][T22283] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.245426][T22288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4382'. [ 1634.495198][T17454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.734592][T22324] sctp: [Deprecated]: syz.4.4393 (pid 22324) Use of int in max_burst socket option deprecated. [ 1637.734592][T22324] Use struct sctp_assoc_value instead [ 1643.289326][T22365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4407'. [ 1645.556552][ T29] audit: type=1326 audit(1769535778.583:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1645.638118][ T29] audit: type=1326 audit(1769535778.583:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1645.660889][ T29] audit: type=1326 audit(1769535778.583:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1645.797573][ T29] audit: type=1326 audit(1769535778.583:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1645.867685][ T29] audit: type=1326 audit(1769535778.583:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1645.937278][ T29] audit: type=1326 audit(1769535778.653:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1645.987340][ T29] audit: type=1326 audit(1769535778.653:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1646.085815][ T29] audit: type=1326 audit(1769535778.653:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1646.133222][ T29] audit: type=1326 audit(1769535778.653:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1646.166164][ T29] audit: type=1326 audit(1769535778.653:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.0.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672c99aeb9 code=0x7ffc0000 [ 1646.413988][T22400] sctp: [Deprecated]: syz.3.4418 (pid 22400) Use of int in max_burst socket option deprecated. [ 1646.413988][T22400] Use struct sctp_assoc_value instead [ 1647.847024][T22398] trusted_key: encrypted_key: insufficient parameters specified [ 1661.354864][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1661.354885][ T29] audit: type=1326 audit(1769535794.323:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22534 comm="syz.2.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1661.496566][ T29] audit: type=1326 audit(1769535794.323:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22534 comm="syz.2.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669e79aeb9 code=0x7ffc0000 [ 1663.983690][T22583] netlink: 'syz.4.4476': attribute type 1 has an invalid length. [ 1665.247528][T22620] trusted_key: encrypted_key: insufficient parameters specified [ 1668.307045][T22684] netlink: 'syz.3.4502': attribute type 2 has an invalid length. [ 1668.314912][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4502'. [ 1668.859515][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.865822][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.482234][T22707] netlink: 'syz.3.4505': attribute type 2 has an invalid length. [ 1672.490588][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1672.922225][T22732] netlink: 'syz.4.4515': attribute type 2 has an invalid length. [ 1672.930032][T22732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4515'. [ 1674.957579][T12629] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1675.177579][T12629] usb 2-1: Using ep0 maxpacket: 32 [ 1675.184360][T12629] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1675.192799][T12629] usb 2-1: config 0 has no interface number 0 [ 1675.204433][T12629] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1675.213633][T12629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.247570][T12629] usb 2-1: Product: syz [ 1675.251753][T12629] usb 2-1: Manufacturer: syz [ 1675.289420][T12629] usb 2-1: SerialNumber: syz [ 1675.334779][T12629] usb 2-1: config 0 descriptor?? [ 1675.352089][T12629] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1675.573704][T12629] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1675.616191][T12629] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1676.097848][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1676.099048][T12636] usb 2-1: USB disconnect, device number 71 [ 1676.573213][T12636] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1676.773648][T12636] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1676.801745][T12636] quatech2 2-1:0.51: device disconnected [ 1679.003957][T22793] netlink: 'syz.0.4538': attribute type 2 has an invalid length. [ 1679.011744][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4538'. [ 1682.019185][T22826] netlink: 'syz.1.4552': attribute type 2 has an invalid length. [ 1682.029128][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4552'. [ 1682.878472][T22837] blktrace: Concurrent blktraces are not allowed on loop5 [ 1684.747989][T22852] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1684.780080][T22852] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1684.788717][T22852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1684.794768][T22852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1684.800877][T22852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1684.999725][T22857] fuse: Bad value for 'fd' [ 1686.027706][T17480] Bluetooth: hci5: command 0x0406 tx timeout [ 1686.907831][T21562] Bluetooth: hci0: command 0x0406 tx timeout [ 1686.907852][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 1686.907869][T21562] Bluetooth: hci1: command 0x0406 tx timeout [ 1686.907916][T17480] Bluetooth: hci3: command 0x0406 tx timeout [ 1687.735669][T22886] netlink: 'syz.4.4567': attribute type 2 has an invalid length. [ 1687.755237][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4567'. [ 1688.389262][T22896] trusted_key: encrypted_key: insufficient parameters specified [ 1689.463437][T12639] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1689.859154][T22902] loop1: detected capacity change from 0 to 64 [ 1689.877012][T12639] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.000255][T12639] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1690.007201][T12639] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1690.047944][T12639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.058689][T12639] usb 1-1: config 0 descriptor?? [ 1690.091283][T22902] hfs: unable to open catalog tree [ 1690.096559][T22902] hfs: can't find a HFS filesystem on dev loop1 [ 1690.392618][T22910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4574'. [ 1690.808236][T12639] usbhid 1-1:0.0: can't add hid device: -71 [ 1690.814271][T12639] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1690.844557][T12639] usb 1-1: USB disconnect, device number 78 [ 1692.362912][T22931] blktrace: Concurrent blktraces are not allowed on loop5 [ 1693.099226][T22941] netlink: 'syz.0.4586': attribute type 2 has an invalid length. [ 1693.106996][T22941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4586'. [ 1695.468800][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1695.528479][T22961] blktrace: Concurrent blktraces are not allowed on loop9 [ 1695.779219][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1695.877757][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1695.884586][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.897226][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1695.917898][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1695.943319][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1695.956206][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1695.981075][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1695.994530][ T9] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1696.005644][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1696.702656][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1696.712699][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1696.722573][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1696.737042][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1696.749776][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1696.769093][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1696.781916][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1696.790356][ T10] usb 2-1: Manufacturer: syz [ 1696.797461][ T9] usb 4-1: Manufacturer: syz [ 1696.803523][ T10] usb 2-1: config 0 descriptor?? [ 1696.811267][ T9] usb 4-1: config 0 descriptor?? [ 1697.129113][ T9] rc_core: IR keymap rc-hauppauge not found [ 1697.135103][ T10] rc_core: IR keymap rc-hauppauge not found [ 1697.141946][ T10] Registered IR keymap rc-empty [ 1697.146815][ T9] Registered IR keymap rc-empty [ 1697.152425][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.159710][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.177631][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.184813][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.197579][T19324] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1697.208368][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1697.221210][ T9] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1697.235909][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input111 [ 1697.250080][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input112 [ 1697.265309][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.276330][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.297701][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.305409][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.329254][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.336921][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.347713][T19324] usb 5-1: Using ep0 maxpacket: 32 [ 1697.356033][T19324] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1697.364596][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.371811][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.379354][T19324] usb 5-1: config 0 has no interface number 0 [ 1697.389930][T19324] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1697.399185][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.406374][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.413705][T19324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.422450][T19324] usb 5-1: Product: syz [ 1697.426874][T19324] usb 5-1: Manufacturer: syz [ 1697.431924][T19324] usb 5-1: SerialNumber: syz [ 1697.437691][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.444882][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.454575][T19324] usb 5-1: config 0 descriptor?? [ 1697.466064][T19324] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1697.487782][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.494972][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.517771][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.525037][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.547660][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.556276][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.587767][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1697.607734][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1697.643332][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1697.653496][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1697.664105][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1697.692837][T19324] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1697.702297][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1697.712864][ T9] usb 4-1: USB disconnect, device number 112 [ 1697.738932][T19324] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1697.753799][ T10] usb 2-1: USB disconnect, device number 72 [ 1698.069434][T22986] bridge2: entered promiscuous mode [ 1698.076652][T22986] bridge2: entered allmulticast mode [ 1698.094858][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1698.106136][T19324] usb 5-1: USB disconnect, device number 78 [ 1698.115603][T19324] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1698.131538][T19324] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1698.158248][T19324] quatech2 5-1:0.51: device disconnected [ 1699.827909][T23000] netlink: 'syz.4.4605': attribute type 2 has an invalid length. [ 1699.835643][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4605'. [ 1705.955678][T23062] loop2: detected capacity change from 0 to 64 [ 1706.026068][T23062] hfs: unable to open catalog tree [ 1706.040005][T23062] hfs: can't find a HFS filesystem on dev loop2 [ 1709.982716][T23121] netlink: 'syz.4.4642': attribute type 1 has an invalid length. [ 1709.990521][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4642'. [ 1711.429710][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1711.597676][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1711.605589][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1711.614754][ T9] usb 1-1: config 0 has no interface number 0 [ 1711.623305][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1711.656880][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.689422][ T9] usb 1-1: Product: syz [ 1711.693721][ T9] usb 1-1: Manufacturer: syz [ 1711.700253][ T9] usb 1-1: SerialNumber: syz [ 1711.716207][ T9] usb 1-1: config 0 descriptor?? [ 1711.734428][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1711.964845][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1712.007018][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1712.392324][T23142] loop2: detected capacity change from 0 to 32768 [ 1712.399603][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1712.406128][T12639] usb 1-1: USB disconnect, device number 79 [ 1712.422599][T12639] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1712.443160][T23142] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1712.877901][T23164] netlink: 'syz.4.4654': attribute type 1 has an invalid length. [ 1712.888307][T12639] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1712.904074][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4654'. [ 1712.952290][T12639] quatech2 1-1:0.51: device disconnected [ 1712.959922][T23142] XFS (loop2): Ending clean mount [ 1713.946555][T16142] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1721.797857][T23264] netlink: 'syz.1.4679': attribute type 2 has an invalid length. [ 1721.805587][T23264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'. [ 1726.106319][T23301] binder: 23300:23301 unknown command 0 [ 1726.168642][T23301] binder: 23300:23301 ioctl c0306201 200000000080 returned -22 [ 1726.335553][T23303] binder: BINDER_SET_CONTEXT_MGR already set [ 1726.447623][T23303] binder: 23300:23303 ioctl 4018620d 200000000040 returned -16 [ 1726.562001][T23301] binder: 23300:23301 ioctl c0306201 0 returned -14 [ 1729.376902][T23333] loop1: detected capacity change from 0 to 64 [ 1729.457049][T23333] hfs: unable to open catalog tree [ 1729.582103][T23333] hfs: can't find a HFS filesystem on dev loop1 [ 1730.358195][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.364611][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.838499][T23359] binder: 23358:23359 unknown command 0 [ 1732.844115][T23359] binder: 23358:23359 ioctl c0306201 200000000080 returned -22 [ 1736.723829][ T29] audit: type=1326 audit(1769535869.623:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1736.827257][ T29] audit: type=1326 audit(1769535869.623:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1736.890227][ T29] audit: type=1326 audit(1769535869.623:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1736.917070][ T29] audit: type=1326 audit(1769535869.623:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1736.985432][ T29] audit: type=1326 audit(1769535869.633:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1737.034127][ T29] audit: type=1326 audit(1769535869.633:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1737.099697][ T29] audit: type=1326 audit(1769535869.633:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1737.133855][ T29] audit: type=1326 audit(1769535869.633:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1737.169433][ T29] audit: type=1326 audit(1769535869.633:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1738.433628][ T29] audit: type=1326 audit(1769535869.633:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23387 comm="syz.4.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4519aeb9 code=0x7ffc0000 [ 1738.758669][T23402] netlink: 'syz.2.4710': attribute type 1 has an invalid length. [ 1749.747598][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1750.093627][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1750.100590][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1750.115251][ T10] usb 3-1: config 0 has no interface number 0 [ 1750.129271][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1750.160636][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.174643][ T10] usb 3-1: Product: syz [ 1750.181850][ T10] usb 3-1: Manufacturer: syz [ 1750.195472][ T10] usb 3-1: SerialNumber: syz [ 1750.231751][ T10] usb 3-1: config 0 descriptor?? [ 1750.293606][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1750.935280][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 1750.947182][ C0] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 1750.955582][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 1750.964758][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1750.974795][ C0] Workqueue: usb_hub_wq hub_event [ 1750.979819][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 1750.985001][ C0] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 1751.004587][ C0] RSP: 0018:ffffc900000077f8 EFLAGS: 00010002 [ 1751.010644][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 1751.018611][ C0] RDX: ffffc90002151000 RSI: 0000000000000208 RDI: 0000000000000209 [ 1751.026571][ C0] RBP: 0000000000000000 R08: ffff88806985e01f R09: 1ffff1100d30bc03 [ 1751.034530][ C0] R10: dffffc0000000000 R11: ffffed100d30bc04 R12: dffffc0000000000 [ 1751.042493][ C0] R13: ffff88806985e018 R14: 00000000000001c0 R15: 0000000000000000 [ 1751.050454][ C0] FS: 0000000000000000(0000) GS:ffff8881252b4000(0000) knlGS:0000000000000000 [ 1751.059369][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1751.065951][ C0] CR2: 0000200000005000 CR3: 0000000047658000 CR4: 00000000003526f0 [ 1751.073931][ C0] Call Trace: [ 1751.077225][ C0] [ 1751.080070][ C0] ? __asan_memcpy+0x40/0x70 [ 1751.084699][ C0] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 1751.090972][ C0] queue_work_on+0x106/0x1d0 [ 1751.095595][ C0] qt2_read_bulk_callback+0xe96/0x1030 [ 1751.101051][ C0] ? __pfx_qt2_read_bulk_callback+0x10/0x10 [ 1751.106933][ C0] ? kcov_remote_start+0x88/0x7a0 [ 1751.111948][ C0] ? kcov_remote_start+0x88/0x7a0 [ 1751.116966][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 1751.122327][ C0] dummy_timer+0xbbd/0x45d0 [ 1751.126834][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1751.131756][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1751.137544][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1751.142467][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1751.147390][ C0] __hrtimer_run_queues+0x529/0xc30 [ 1751.152584][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1751.158294][ C0] ? read_tsc+0x9/0x20 [ 1751.162351][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 1751.167453][ C0] handle_softirqs+0x22a/0x7c0 [ 1751.172206][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1751.176959][ C0] __irq_exit_rcu+0x5f/0x150 [ 1751.181537][ C0] irq_exit_rcu+0x9/0x30 [ 1751.185768][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1751.191389][ C0] [ 1751.194306][ C0] [ 1751.197221][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1751.203195][ C0] RIP: 0010:lock_acquire+0x221/0x330 [ 1751.208469][ C0] Code: ff ff ff e8 e1 1d fe 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 fb bd 75 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 88 6b 72 [ 1751.228059][ C0] RSP: 0018:ffffc900000f6778 EFLAGS: 00000286 [ 1751.234117][ C0] RAX: e9a7af6db1c0ba00 RBX: 0000000000000000 RCX: 0000000000000046 [ 1751.242080][ C0] RDX: 00000000770eb666 RSI: ffffffff8e14e200 RDI: ffffffff8c273e00 [ 1751.250047][ C0] RBP: ffffffff81762295 R08: ffffffff81762295 R09: ffffffff8e75dee0 [ 1751.258011][ C0] R10: ffffc900000f68d8 R11: ffffffff81b01a80 R12: 0000000000000002 [ 1751.265972][ C0] R13: ffffffff8e75dee0 R14: 0000000000000000 R15: 0000000000000246 [ 1751.273938][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1751.279048][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1751.285199][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1751.290307][ C0] ? usb_set_configuration+0x1a87/0x2110 [ 1751.295934][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1751.301037][ C0] unwind_next_frame+0xc2/0x23c0 [ 1751.305969][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1751.311073][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1751.316174][ C0] ? device_add+0x7b6/0xb70 [ 1751.320672][ C0] ? usb_set_configuration+0x1a87/0x2110 [ 1751.326295][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1751.332445][ C0] arch_stack_walk+0x11b/0x150 [ 1751.337202][ C0] ? usb_set_configuration+0x1a87/0x2110 [ 1751.342834][ C0] stack_trace_save+0xa9/0x100 [ 1751.347598][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1751.352970][ C0] ? number+0xe1/0xf80 [ 1751.357032][ C0] ? __pfx_number+0x10/0x10 [ 1751.361528][ C0] kasan_save_track+0x3e/0x80 [ 1751.366196][ C0] ? kasan_save_track+0x3e/0x80 [ 1751.371034][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1751.375792][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1751.381328][ C0] ? device_add+0xbe/0xb70 [ 1751.385731][ C0] ? usb_serial_probe+0x26f4/0x2e50 [ 1751.390919][ C0] ? usb_probe_interface+0x668/0xc90 [ 1751.396198][ C0] ? really_probe+0x267/0xaf0 [ 1751.400870][ C0] ? __driver_probe_device+0x18c/0x320 [ 1751.406320][ C0] ? driver_probe_device+0x4f/0x240 [ 1751.411509][ C0] ? __device_attach_driver+0x2d4/0x4c0 [ 1751.417046][ C0] ? bus_for_each_drv+0x258/0x2f0 [ 1751.422056][ C0] ? __device_attach+0x2c5/0x450 [ 1751.426982][ C0] ? device_initial_probe+0xa1/0xd0 [ 1751.432172][ C0] ? bus_probe_device+0x12a/0x220 [ 1751.437180][ C0] ? device_add+0x7b6/0xb70 [ 1751.441669][ C0] ? usb_set_configuration+0x1a87/0x2110 [ 1751.447310][ C0] __kasan_kmalloc+0x93/0xb0 [ 1751.451894][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 1751.457260][ C0] ? device_add+0xbe/0xb70 [ 1751.461664][ C0] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1751.467202][ C0] device_add+0xbe/0xb70 [ 1751.471436][ C0] ? allocate_minors+0x206/0x2b0 [ 1751.476357][ C0] usb_serial_probe+0x26f4/0x2e50 [ 1751.481378][ C0] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 1751.488567][ C0] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 1751.495752][ C0] usb_probe_interface+0x668/0xc90 [ 1751.500861][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1751.506491][ C0] really_probe+0x267/0xaf0 [ 1751.510991][ C0] __driver_probe_device+0x18c/0x320 [ 1751.516266][ C0] driver_probe_device+0x4f/0x240 [ 1751.521286][ C0] __device_attach_driver+0x2d4/0x4c0 [ 1751.526656][ C0] bus_for_each_drv+0x258/0x2f0 [ 1751.531496][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1751.537380][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1751.542742][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1751.547934][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1751.553726][ C0] __device_attach+0x2c5/0x450 [ 1751.558488][ C0] ? __pfx___device_attach+0x10/0x10 [ 1751.563769][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1751.568606][ C0] device_initial_probe+0xa1/0xd0 [ 1751.573637][ C0] bus_probe_device+0x12a/0x220 [ 1751.578473][ C0] ? device_add+0x726/0xb70 [ 1751.582966][ C0] device_add+0x7b6/0xb70 [ 1751.587286][ C0] usb_set_configuration+0x1a87/0x2110 [ 1751.592744][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1751.598193][ C0] usb_probe_device+0x1c4/0x3b0 [ 1751.603040][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 1751.608404][ C0] really_probe+0x267/0xaf0 [ 1751.612901][ C0] __driver_probe_device+0x18c/0x320 [ 1751.618179][ C0] driver_probe_device+0x4f/0x240 [ 1751.623197][ C0] __device_attach_driver+0x2d4/0x4c0 [ 1751.628562][ C0] bus_for_each_drv+0x258/0x2f0 [ 1751.633399][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1751.639305][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1751.644664][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1751.649851][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1751.655645][ C0] __device_attach+0x2c5/0x450 [ 1751.660401][ C0] ? __pfx___device_attach+0x10/0x10 [ 1751.665680][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1751.670521][ C0] device_initial_probe+0xa1/0xd0 [ 1751.675540][ C0] bus_probe_device+0x12a/0x220 [ 1751.680377][ C0] ? device_add+0x726/0xb70 [ 1751.684871][ C0] device_add+0x7b6/0xb70 [ 1751.689191][ C0] usb_new_device+0xa08/0x16f0 [ 1751.693946][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1751.699132][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1751.704313][ C0] hub_event+0x2a1c/0x4f30 [ 1751.708719][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1751.713659][ C0] ? __pfx_hub_event+0x10/0x10 [ 1751.718414][ C0] ? process_one_work+0x87c/0x15a0 [ 1751.723518][ C0] ? process_one_work+0x87c/0x15a0 [ 1751.728620][ C0] process_one_work+0x949/0x15a0 [ 1751.733549][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1751.738908][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1751.743929][ C0] worker_thread+0xb46/0x1140 [ 1751.748596][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1751.754397][ C0] kthread+0x388/0x470 [ 1751.758460][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1751.763558][ C0] ? __pfx_kthread+0x10/0x10 [ 1751.768143][ C0] ret_from_fork+0x51b/0xa40 [ 1751.772719][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1751.777818][ C0] ? __switch_to+0xc7d/0x1400 [ 1751.782481][ C0] ? __pfx_kthread+0x10/0x10 [ 1751.787063][ C0] ret_from_fork_asm+0x1a/0x30 [ 1751.791826][ C0] [ 1751.794843][ C0] Modules linked in: [ 1751.798733][ C0] ---[ end trace 0000000000000000 ]--- [ 1751.804170][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 1751.809356][ C0] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 1751.828944][ C0] RSP: 0018:ffffc900000077f8 EFLAGS: 00010002 [ 1751.834993][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 1751.842950][ C0] RDX: ffffc90002151000 RSI: 0000000000000208 RDI: 0000000000000209 [ 1751.850906][ C0] RBP: 0000000000000000 R08: ffff88806985e01f R09: 1ffff1100d30bc03 [ 1751.858861][ C0] R10: dffffc0000000000 R11: ffffed100d30bc04 R12: dffffc0000000000 [ 1751.866816][ C0] R13: ffff88806985e018 R14: 00000000000001c0 R15: 0000000000000000 [ 1751.874770][ C0] FS: 0000000000000000(0000) GS:ffff8881252b4000(0000) knlGS:0000000000000000 [ 1751.883680][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1751.890247][ C0] CR2: 0000200000005000 CR3: 0000000047658000 CR4: 00000000003526f0 [ 1751.898206][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1751.905712][ C0] Kernel Offset: disabled [ 1751.910014][ C0] Rebooting in 86400 seconds..