last executing test programs: 7m54.542929242s ago: executing program 3 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0b9106cd0000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6700330080200900ffffffffffff0802110000000802110000005f00ffffffffffffffff64008092000001000602fc0125030138093c040001880c2d1a00041603000000000000007b00470011000000000300000000017206030303030303760603002f00060000"], 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x0) 7m54.265120589s ago: executing program 3 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000040)={0x0, 0x10, 0x8, {0x7ff, 0x1}, 0x6e, 0xb153}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x290, r4, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_NAN_FUNC={0x170, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3}, @NL80211_NAN_FUNC_SRF={0x140, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3996a31add6a"}]}, @NL80211_ATTR_NAN_FUNC={0x100, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_SERVICE_INFO={0xe5, 0xb, "ab0f9f7e341f51e0bd948bc3e19974de0772f6cbbb6cf5049917117409cabf10cdc799ea57a36e2d497c49456046eec53e4b99d49742474e163182c5d41fe2813830572447deeed5f918bc3ebd8938f0fae617f55efa93740414b7c918180d767d554534e4d4511bf84ff2133ea83a25b8f14bc63d2073cc6bcf673d6146915c2dcf4c1250d6b2c8d710dbe189d9f67d0665b00683d985d4b6deac26a931f9d0e714f8d492473dce9d90e4d0f668d17176523c3644d1d45f388bc9a0cdcde56f0afaff20e3f262adf7e8da5b7a0b7215f028150265e205e0231687aeaebc60ee47"}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000004}, 0x11) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) r6 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x6d, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x461d, 0x200, 0x3fe, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582003a9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x28, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6a}, @void, @val={0xc, 0x99, {0xfffffff7, 0x36}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x2) 7m53.301029514s ago: executing program 3 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0140ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f00000000000000e7ffffffffe400000000060002"], 0x64}, 0x1, 0x620b}, 0x0) 7m53.206327483s ago: executing program 3 (id=658): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000fbff00000000000000000000000000000000ffffffffffffffff000001000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000003"], 0xfdef) 7m52.785542492s ago: executing program 3 (id=663): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100037400d72040206072e19d9aee75655e690320807a7e39010203010902120002000e7c7e3f33f3349cf11aec7304cab20625c058b5eb90f59f50cdb9c9fd5350eb78531c94bf04bc0e0ece230279bd466f0af6537907b59eaebe72ec44f6b75d78ecc1e92d6f93d793ee17cef4583304d93a1de81fb239604ee2"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f00000001c0)=0x40) mmap(&(0x7f00002d1000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x28f7f000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r5, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r5, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) 7m51.740522211s ago: executing program 3 (id=671): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae0210000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000b42104802800018008000100666962001c000280080001400000001508000240000000030800034000000032882101800a0001006d6174636800000078210280090001006473637000000000041003009153a04709dd3ce609dff7ed79a6b495475de7fb1ab757cefa6702b550641f1bc0f33a205505b2569471224ab9523b742af6a2a799407d48bec685a43c9fa1d84b2263623a39fa7d2373a858b35457216ee91bd3e98f97181b6f0abca47a3e5db91f5a0059d45a24730bddc5915ad5fcd19265f5dfeea8638bc7f3fe0fbefe12776b861bc591b7543536ebd3cf666a7a6366a7bb51f1011cfc40d26ccb7d27cba7e3ba76c82ccf6cf21f62bdb5c1dc9ffb5512c0c7f263fc19577efd96e3f8ea7ac0ac6058e344d8b2260c3f70badd0035a121a24d3926c18cdbc7b4e397d2b9925b54f549aac05575be911f1b0bc0b09114366933dd498a989085f3021f1dd0541a533516d85ac8a617621fa0ad728e5e77147cdcd4b310860e522a3780c8a92fc2e58a97d1bb432ecefbb0c85518da22a1071df27d204aabf65b3fc1aa04a6903a07548b4a2ee8b033821e727959b52528ae4bb4b8a7b9626b898bf1265b92540c67c05b476d1b9d83b7e43343748755e11081fe2394c817fc4e1d5962e929a9a85b66da20a7a100a0fe3ace658286342838271e7ce0765240260d67a0ab7cf8c601743c68f0ab0406e1a3bafa7561bdb08bc2002ad33e1bc80c1cb0dd72b6ac3f7c93bbea95be309848ff5194e98ac171c7495623e773062affd7a1de1a86bc8827c5ea24d4dbe3cfc37eaddf1ffaeabf7cdcbd4795004f18d4caea50c2da08b71c9c5df1f8f15a9abb7a822ba57348d14a6d022c66d9e60bdc2809913e5a0408d0a6c80a29ee8968d0160a54d5374680f0326ff3a2f38eb16288a92680f4be3f78f999a65b12347903a7c2860b80d72bf27fee3d3cf7728fecccf6c737ea08c570b829f19fb19959580332a5bca3f03b088178b2166783a0390748525e347a8f016687b179293a3a47087094d714204c50f5a65868656786453bd9703dcea9978b736118fa03e9fb98da62bfc21965149aeb03d4800c1b0fc3861ef8582e8017b0e5965b4f474af98e9d7785d9434811345b82644e2086239657bd4fa7"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000fbff00000000000000000000000000000000ffffffffffffffff000001000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000004"], 0xfdef) 7m35.795325997s ago: executing program 32 (id=671): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000fbff00000000000000000000000000000000ffffffffffffffff000001000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000004"], 0xfdef) 3m30.357048396s ago: executing program 0 (id=2546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="758e0000", @ANYRES16=r1, @ANYBLOB="2508007a000000dfba27390000000700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 3m29.431432492s ago: executing program 0 (id=2550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001000000000000000000030094792158000a2c000000060a010400000000000000000a00000a0900010073797a31000000000900020073797a320000000034000000080a030000000000000000000a00000608000940000000010900020073797a32000000000900010073797a3100000000140000001100010000000000000000000200000a598033cb5446c0a91fe6e9f0809bd92f86b51204bfae570ac647a652008ec596dd72dda25a16a4fad0222d5a352104af498a2a664803ea4fa66a3f4b902b"], 0x88}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x26, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xc, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x5, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000070a050000000000000000000a0040010900010073797a31000000000900020073797a32"], 0x48}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) 3m29.170470474s ago: executing program 0 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f746f5f687372000000000900010073797a31000000004c000000050a05000000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746107000000080001"], 0xe8}, 0x1, 0x0, 0xf5ffffff}, 0x0) 3m29.080652399s ago: executing program 0 (id=2553): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0xc4c03d16, 0x0) dup3(r3, r1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x4, @remote, 0xedc}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000380)="f76d3a4a715b35d4f9dbbe0729fb86eee4cf348600911abc8ef03f50424ec43b4a28e2b9f47fccd4de2917875a9cd6ff7141a639c996b79c8b7c42336cbd5aa48c4ff22b9171b46d76b7cbfc9377d0ce7ece09f916e1d775db389e89b6e6f805f680b488e996a464a30689fbe5e5627b90f41997c0e11de47e701bbc28d76fb803167b95a6a6da566e1e93b322e53fd290fbd6e74632669ec32300bbfcbb809e718b7787def7d7baa26ad0e63fd203c743a5ff0e3f4b3600", 0xb8, 0xfffffffffffffffc) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, r5) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f0000000080)) chroot(&(0x7f0000000100)='./file0\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) setresgid(r6, r5, r4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x80, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 3m28.824244531s ago: executing program 0 (id=2556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0140ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f00000000000000e7ffffff000000000000060002"], 0x64}, 0x1, 0x620b, 0x1000000}, 0x0) 3m28.512184914s ago: executing program 0 (id=2558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000084, 0x0, 0x3}]}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x5100, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012000100000508000b400000cd200500010006000000050005000a00000005000400010000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 3m28.141740942s ago: executing program 33 (id=2558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000084, 0x0, 0x3}]}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x5100, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012000100000508000b400000cd200500010006000000050005000a00000005000400010000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 6.925234177s ago: executing program 1 (id=4055): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f2500402900"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="0ec7dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0x0) 5.928285961s ago: executing program 4 (id=4059): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1, 0x8, 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x200, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x20000091, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xfa, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0x10001, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x1ff, 0xff], [0x7, 0x4, 0x0, 0x650, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x7c, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0x5, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0xfffffffe, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100040010ef17496040000102030109022400010155100609040000000000f500220000090581030000000000"], 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d4, &(0x7f0000000040)) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r5, 0x400455c8, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x0, 0x0, &(0x7f0000000100)) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x10) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xdb) 3.860716152s ago: executing program 1 (id=4067): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x1, 0xff, 0x8}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0xb, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000200)={"9b90e4260eb3b05aede1c6ebac51b3f898cc51b19cbb2fd6d455e4040c4e9d6f", r2, 0xffffffffffffffff}) preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000400)=""/165, 0xa5}], 0x3, 0x2, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f00000000c0)=[{r7, 0x2004}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="1400000001060101d8af00000000000001000008"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) openat$cgroup_ro(r4, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000080)={0x5}) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd70a6e0ffff05000a00020000000c1c4900020004001b0d5de688aaaaa5cf415cad159c5f5eaaaaaaaa0500110001"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8894) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r11, 0x2, {0x2, 0xff, 0x3}, 0xff}, 0x18) 2.804935693s ago: executing program 1 (id=4070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000024000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) 2.804566098s ago: executing program 4 (id=4071): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f00000000000000500000000000000000000fd000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 2.77655003s ago: executing program 1 (id=4072): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a0008"], 0x24}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)='\x00', 0x1, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x80]}, {0x5, 0x7, 0x6d, 0x9}}, 0x8000, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7f}) close_range(r4, r0, 0x0) 2.53826463s ago: executing program 4 (id=4073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x42, 0x1000000, 0x0}) setuid(0xee01) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 2.469081243s ago: executing program 1 (id=4074): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x4000080) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a301d0000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0xc800) 2.43068935s ago: executing program 1 (id=4075): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f2500402900"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="0ec7dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0x0) 2.430204026s ago: executing program 4 (id=4076): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e00280010000000028000001294", 0x2e}], 0x1}, 0x850) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200008f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x6001}) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f0000000100)={0x58000, 0x100000}) 2.229125644s ago: executing program 4 (id=4079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00000000fffffffffffffff0", 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="1febd61063500aa3399be776f3c379534c529f86b7fa7607ce2cfd3aaef3b7590c149b3b8cc63a4ea9846f098de807b5ac84968eabc71e7ec1ed16cec957ef02797fb562cd12d1b3bf5a0540953f1f44e6ff4bc35589afe5772a031228b9", 0x5e}, {&(0x7f00000002c0)="6aa7bcba8cf2d4b6380f814e125c6ec474ff2e1a70746293563814e5b1c4d0051ac25177a0b58a03d98d3a1ad06d41baad6a62d83305facd6eaae436fe480f7cb4b266613206042904942b95f5d5805ec75b3098010fb0e1a713210fc894353f7a5642f90076c5ca2a02725814470f8376e342a116a15a86e4dd944e1f2e04dad15135c53f4b9fbb78c6e0668ae05bd77b9b01a5032bb9c78fe094f39204664002ff8e3d133634093e35c383b713179e2bcc27f2aed2825f7e5ca320df379ab1593149acc045ab470d5e6fed97826dec5eabd4f89b", 0xd5}, {&(0x7f0000000180)="4a2ca20d107c98793d0b4d17cf331e7ec3812dfd0055c7d790cb7a7f9f7de7e49530f4f0eec68dbd019e673fc365ac86e64e6a47fab23f584e927b2233957ca4b841787daad7999f7976806316d21d9cc5d3acd3cdaa67d5af2b93fadc6af31b5e3dfff7f9af23353f256cd89c38b340b93da250a722742f31d0", 0x7a}], 0x3}, 0x44800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) socket(0x10, 0x2, 0x0) (async) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00000000fffffffffffffff0", 0x1c) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="1febd61063500aa3399be776f3c379534c529f86b7fa7607ce2cfd3aaef3b7590c149b3b8cc63a4ea9846f098de807b5ac84968eabc71e7ec1ed16cec957ef02797fb562cd12d1b3bf5a0540953f1f44e6ff4bc35589afe5772a031228b9", 0x5e}, {&(0x7f00000002c0)="6aa7bcba8cf2d4b6380f814e125c6ec474ff2e1a70746293563814e5b1c4d0051ac25177a0b58a03d98d3a1ad06d41baad6a62d83305facd6eaae436fe480f7cb4b266613206042904942b95f5d5805ec75b3098010fb0e1a713210fc894353f7a5642f90076c5ca2a02725814470f8376e342a116a15a86e4dd944e1f2e04dad15135c53f4b9fbb78c6e0668ae05bd77b9b01a5032bb9c78fe094f39204664002ff8e3d133634093e35c383b713179e2bcc27f2aed2825f7e5ca320df379ab1593149acc045ab470d5e6fed97826dec5eabd4f89b", 0xd5}, {&(0x7f0000000180)="4a2ca20d107c98793d0b4d17cf331e7ec3812dfd0055c7d790cb7a7f9f7de7e49530f4f0eec68dbd019e673fc365ac86e64e6a47fab23f584e927b2233957ca4b841787daad7999f7976806316d21d9cc5d3acd3cdaa67d5af2b93fadc6af31b5e3dfff7f9af23353f256cd89c38b340b93da250a722742f31d0", 0x7a}], 0x3}, 0x44800) (async) 2.086329294s ago: executing program 4 (id=4080): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x6e08cdb84f92943d, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc8, 0xd, 0x81}}}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x10) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xdb) 1.589162042s ago: executing program 2 (id=4082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000041000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) 1.523289553s ago: executing program 2 (id=4083): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f00000000000000500000000000000000000fe000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1.232194098s ago: executing program 2 (id=4084): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xc000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x44}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0xc, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x3c}, {0x4, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0xc000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x9df9ffeb, 0x0, 0x7000, 0x134, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000000240)=[{{&(0x7f0000000400)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001940)=""/4104, 0x1008}], 0x1) splice(r0, 0x0, r8, 0x0, 0x7151, 0xd) 841.178608ms ago: executing program 5 (id=4086): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 747.962177ms ago: executing program 5 (id=4087): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x2) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000440)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x4, 0x430001) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r7 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r7, &(0x7f0000000000)={0x22, 0xe5, 0x6, 0xf9, 0xdf}, 0x6) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x1000, 0x7, {r5, r6/1000+10000}, {0x5, 0x8, 0xa, 0x0, 0x7, 0xff, "aa156ad9"}, 0x91, 0x2, {&(0x7f0000000100)=[{0x4, 0xe000, {&(0x7f0000000080)}, 0x4}, {0x5659, 0x15, {&(0x7f00000000c0)}, 0x3}]}, 0x7}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000240)) 436.478742ms ago: executing program 5 (id=4088): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x5386, &(0x7f0000000380)) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e000905", @ANYRESDEC], 0x0) (async) fcntl$setflags(r0, 0x2, 0x1) (async) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000980)={0x7b, 0x0, {0xffffffffffffffff}, {0xee00}, 0x7, 0x8}) (async) r4 = semget$private(0x0, 0x0, 0x201) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x0, r5, 0x0, 0x0, 0x0, 0x83, 0x180}, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a40), 0x10402, 0x0) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000a80)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000025c0)={0x0, 0x8, {0xffffffffffffffff}, {0xee00}, 0x9}) (async) r10 = getuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r12 = accept4$llc(0xffffffffffffffff, &(0x7f0000004640)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004680)=0x10, 0x180800) (async) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004c40), 0x0, 0x0) (async) r14 = syz_open_dev$video4linux(&(0x7f0000004c80), 0x5d51, 0x200000) (async) r15 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r15}, &(0x7f0000bbdffc)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004cc0)={{{@in6=@dev, @in=@remote}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000004dc0)=0xe8) (async, rerun: 64) r16 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$SNDCTL_MIDI_INFO(r16, 0xc074510c, 0x0) (async) r17 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r17, 0x28, 0x8, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e80)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)="75639f25df7e878f12533986d04ab9c276b42dbc7d161edcb30adb6b5b06ad8a57551ace78e9c34d0f", 0x29}, {&(0x7f0000000300)="329ecdafe77a3c3e5ff76e2fa7faad43d46c0ed7695d57fe544547b2df08639eae365ad1a93608250cce19c24c331aef30f857367af678327bb6b49fd03a7e0dbcc5a943e99805a434bd6427a69e2b7a9072b32c30bc238f19ff282a3133884f3058", 0x62}, {&(0x7f0000000500)="dcef9cb0bdafd58fe97301e631a5b003e0a7c7a60bdced28800b7f72a44f19a1b14c28385f84afe6fa893ff49021745d97ba0845aafbb3ac67ede441cb23917b9c063f7ac310696d64203fcda65751b3414aa8e3df5e53084359e89f66478f58368763a49af21f1210892109416cc97c0f0651455cc1fbd72a7c81910e6a1bda09e0efc213cfe27f3427e44264194cb25af0577d157b1fa276049b83870a77bee93eccf5a91aa9b88d649ca8d9a03a7761fb98835d2fc4e476a7d643072b76f9c699752571e81efb51259f2d7a81700f96051aea538bff3bd18cf0e6d8fe7ecb1248fe28940d698d664ea229", 0xec}, {&(0x7f0000000600)="310ea10d52a8a31e52f34c2bf86dd740b55036bec459ecf4b12efe6f2f7ebad3ce8079f26101f5f3a55d8703457cccf6850f8216ba06d7d703091bb05be21532f6622acadd8555a8bbd511da11f6ccf02c2a9aae8f5ec2c174dd28afa93ae6afb81464586a4ba9562efd3dfc3dcbb33780e839627b0ed42a4d1f", 0x7a}], 0x4, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r6}}}, @rights={{0x2c, 0x1, 0x1, [r2, r1, r1, r2, r7, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, 0xee00}}}], 0x90, 0x4044000}}, {{&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)="912fcac867294ad841f335985ac6239df4991b2f5dd3f799fe846af5ba652186e4c4189a31b6dce0f5f71917f6846ebb4762f96a58bdd1b2e8c0bf8c5920a64a17", 0x41}, {&(0x7f0000000cc0)="400681ca1359fd59eb72ba8c20dd01713020c3f013aa5c2d10bd61c53c5b164e8c15b3cdcafc16bc3e02c07d7e5625acb9a17f63cc581380790f204d", 0x3c}, {&(0x7f0000000d00)="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", 0xfb}, {&(0x7f0000000e00)="99c8c13e9918ec75853f71aefecc2773696cf99a63eab2c8eb1c2d1a3911bea315920c93d38ce9cede06a232", 0x2c}, {&(0x7f0000000e40)="671d43dd450d805e32beff466dc91938eef881bb456671306fa4ec944f4e41464a7ddbf106d1477dd11895bcc8eb0933087bf03333970fc2d121df782d96879ff1f79c90e23eefb88b64754f331a1a4353048ff3464adfb18994135e3bdca9af7ce2cb2f7c4d169e81869a2b11f1574aa96dd31bd9a9c464fb58067e919a020cad53915edb02b9a472ccec9edde0d307bdc1ef89e40515e1a15d0b0c560ac3a8d212da46e1bef374a01ed067224439e3dfc87f3f52081f", 0xb7}], 0x6, &(0x7f0000000f80)=ANY=[@ANYBLOB="20000000000000000500000101000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2], 0x20, 0x4800}}, {{&(0x7f0000000fc0)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000001040)="c27c2604207f0f4b01ad351199915548e302ada5ac001b2efd0bc544089fd5c5319ba486c32c56c3a0932a0b1760948564127e6ccff3f8db4a5b487b3e482d47978e14a43b5cc4c93d88832565a3709ca2f045f649c546109d1bbe5dba383e3c9a10e46d359ebe0100a1affbd1f7722c984a0b28884bbab0f96e3d22f8b5bbec10ee9d80111e876482bac4504c4c29ed7a1f12e1299c2368044652ac86a10db427f2172867e7a1c5", 0xa8}, {&(0x7f0000001100)="447a05b860d3a9c7eaf018c16e77d2061c2537bdb18a94e2d7fe2b402776b62f5f970edb8cac5439323bb37fd1d7da6106fb2c2f841503160820adbe484026701f369126f4f294950a5759b1e9f6af45eecf333c8e2c64f81eb9c7216e98621afda4f82cbb4d329066feacb467a8bcd7d4b590e305469adad663f37a6c8a07140587f188be7cd72102fbfcbc72a44adf99f1b63c3a10f8fadbb8419a36736ce5bc072bc347743057d6e2d475b13fc3c8f5d3646f970f0b5c3f90adaff9d88837eb78f44afce0afa3f000092ba7cfdfa8522e911f2994b68de86d95cb19e2b86d838fc2cef4db086f59c5778fb7d427a6589f9b8d7037f8", 0xf7}, {&(0x7f0000001200)="fae4a0391ddc0f7571aa40bca2e24a5bfff6639616fa7071108d5851cb4658cd2f077af9db47554f405100058e23d61d480bf1b10ac98e9a73b88b088e2068af89ca1e535d748c17ed84792d82d731e1ca712344982deeb1d19433a24625f3e65a13555bc39be3cbb007434ced548203bedd020ff66e2754afbcd58d600dd748bd9f2807c68d3ef7f9c9c6e50e1a1a296c1235b11baa760cee7866404eab043368cf4b13eee9e56df8dbfda5b32614efe094386a25a565b401d486c39a357755f220775e74d5618629ac5399bdb10840acdbad059ecc3f8b4db97b978536671d56cdcb3bfaebc0b2", 0xe8}, {&(0x7f0000001300)="3c12225ddc667115742b33abcbbc0a6583efadabb68941cd3f574c0cfc103730607dee44c82e0b81bbf77a9647b4ae4551a10f18e91a00f6054612cb68e43c25a35cf3cea387e001e837fd400a0b2c62efa30f35f4a5ad8dab755b15dac46133aa1b704905d2f1ce64a50afa2e24a2ab6b45ab3e19838f673d3cdda7f36a3167dc6a3116", 0x84}, {&(0x7f00000013c0)="8a2861e0c11b896191d72fc552ad44e654b83e5505362f3b682ac792488bc88e770369cc886b267edfcafb173bc8e8b4525c213be10833e36bfad559035ee551c5fa58dcb919a98707629dd2e0dc104e2c9b85224a5ee1bd22b9540134240a59c93336488af26a2ff3ee749314fbba1966b519a45430140b3652b9873264d9c971161b93dc76effc277c36eedb9f769ce4825ae73ad78f047e96dac5907f2c3b8090084c20706ba7473cbdbc7ff27827e40af2e3f38b92b08ff4f592102114c2d0d6ad98405c880d", 0xc8}, {&(0x7f00000014c0)="4461636fa1c2ba55ba8d03d800076a5ffcd4ad845c81b552cdfbb06835982ba51e5844e9732beb41b4806cd9655f4d4e", 0x30}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="254eb08bf720ca64696463435f1f28eb08c2083dc5154eb3ea", 0x19}], 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r12, @ANYRES32=r2, @ANYRES32=r2], 0x40, 0x20000000}}, {{&(0x7f0000004700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004780)="924013a85cc6a7cdf5a84f162f4db071ba2f3e641598225381d2fb87cff8ef9125fa971f8facb0f400bfd07b2315137f4b7a2a6be7abae443f92ad", 0x3b}, {&(0x7f00000047c0)="f536008b804d8855744f2473f0dabcfcab8dce15e04f52bf5e27f13ddd1bf327dca0c2d8119881aee02e6028d8f4a31edae0ccf9e2", 0x35}, {&(0x7f0000004800)="bef5f30a410ad05500f8abbeb1571db7a5e9740556955f31d3d651250b532b06e36a62811251e618010c39edad0f419e849908d8737229918f4fa796da98bdf7a6485b0632ceac236ff9e7a6e68652244678fdeff3bdf2ecde15e7f8c04ff8a9e401ea0367609581f36ae490fc5a3749a3120665cae2b18effc1ea990aecbf960e65c70a1139a09e6dda0b218c5ff1f8b2ce57c343c86cbe2fee186ca1d097924c432de2e0ad5a2c3c8008dad0984dca97d5fe9b3caaf68a925d", 0xba}, {&(0x7f00000048c0)="f1c2751f93f1928b7bb672c292e45064d19dea10790fa03aeb2c65fe4a5bd571e2ad396356ee53540c563fd8201332d822a9572cfa8a21445679db7b03ebb799d15d3326ec60b3734e435a75dc44765b0edc46a54b37fc307cdd38bb59bacd1d33ff142900f3076f9b227eff97beef78af03cfb17cae5dd2e48053", 0x7b}, {&(0x7f0000004940)="879d38066268e9036d3cb7d248ba7a576a9f175dd2455a33bb37c47db74eee5f68b3657b4501f54871b6b9ad01e1a48a3a", 0x31}, {&(0x7f0000004980)="57a99415539053dc91f03f280c6f28ee3adcd0861a572474f335c3c08287b165617699229168f6d02b43358e5ed0b7183b379a3fdb7dc220de3b6c240859183e1c0b82a255f36d17afa85f2f6c00eced71b2f5dc5b403565140abadd8f9eefaa2754977bc497c47328e87bdb638d05955b222292f6e3", 0x76}, {&(0x7f0000004a00)="a0908b6f7dcea9550758fe3d69835907b192505296eebaccabaecd85a8144f686da0fd82d6287d0d2726ab302e966457d9c1566fe142ba8a8be4dee4d529b1d26fbce53b1aa58973644d74e3e22c97cd0bcdac9f3ecb6e61f6a3ba8b78c50b5cf3d3f243201fe6e790c811dc61dfd5ac2987", 0x72}, {&(0x7f0000004a80)="67d21cc8396474c6081a7eb0faac11c0d01c202f75fa9f0716eb81d833c9968e81d45ac10b1528a5776bdd9d292cd61bb1c773d4e4a9fa8d81b60342dd599a1a45a90baad29f545f151940242bdb75e422db5eb33589329870affef32365e55752c1221ef58509b6", 0x68}, {&(0x7f0000004b00)="1a8def2cc637369083b9", 0xa}, {&(0x7f0000004b40)="f1c464d6f453e87c5e86b98d1ba28dfe3762e003f39d67c37ffe48297ae6d5be4f205e61b8fc2d3f1560f698343bdeebc4b09688ba6c21eae3b952a1a9", 0x3d}], 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r13, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r14, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r17, @ANYRES32=r2, @ANYRES32=r13, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r17, @ANYRES32=r12, @ANYBLOB="c864c37a0c55b3000000", @ANYRES32=r16, @ANYRES32=r1, @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x440c1}}], 0x4, 0x4000440) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r18, 0x0, r1, 0x0, 0x4, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 328.905749ms ago: executing program 5 (id=4089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x2, 0x0, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xf000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000008, 0x0, 0x10000, 0xfffffffffffdffff]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\a$'], 0x38}, 0xc804) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xd, 0x7, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 270.935669ms ago: executing program 2 (id=4090): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mknod(&(0x7f0000000040)='./file0\x00', 0x100, 0x5) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x31) 215.131723ms ago: executing program 5 (id=4091): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000404407000001000600000022c88f35abff5355d44f61cb5bdd", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000e03f020000ce6012e198d4a275f30c7a76ced776bcb73cf581648acaac9095323d45aaeab306611856f61d95a65039b79566cc2195c364a614b8e4c12138a77d4bd62ca783"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000240)="94", 0x1) close(r6) tee(r4, r7, 0x8f5, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x401, 0x6, 0x2}, 0x14) 153.099276ms ago: executing program 2 (id=4092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000060000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) 124.057954ms ago: executing program 2 (id=4093): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000030000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 0s ago: executing program 5 (id=4094): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) r1 = socket$kcm(0x21, 0x2, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000340)=@nfc_llcp={0x27, r2, 0xffffffffffffffff, 0x1, 0x6, 0x8, "68fc9803ea0498088e7c90770deacffa65a3c6746de9000000000000000100f8e78b9f1451a084ce07fb0ca935c0b0fec4c8e5a80d7c233d75e2ca28de76fb", 0x7}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0xfc4b}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) kernel console output (not intermixed with test programs): r" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee4d9c799 code=0x7fc00000 [ 531.267966][ T30] audit: type=1326 audit(1773881642.442:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27816 comm="syz.1.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee4d9c799 code=0x7fc00000 [ 531.427011][T27848] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3160'. [ 531.675439][ T24] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 531.687355][T27873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3165'. [ 531.748541][T27878] netlink: 'syz.5.3166': attribute type 10 has an invalid length. [ 531.774363][T27878] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 531.783023][ T5905] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 531.825302][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 531.947636][ T5905] usb 2-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 531.956851][ T5905] usb 2-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 531.965401][ T24] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 531.973813][ T5905] usb 2-1: Product: syz [ 531.978784][ T5905] usb 2-1: Manufacturer: syz [ 531.985140][ T5905] usb 2-1: SerialNumber: syz [ 532.001762][ T5905] usb 2-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 532.013966][ T5905] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 532.024793][ T5905] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 532.032038][ T5905] usb 2-1: media controller created [ 532.046856][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 532.068637][ T5905] usb 2-1: selecting invalid altsetting 1 [ 532.076101][ T5905] set interface failed [ 532.076698][ T5905] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 532.089424][ T5905] error writing reg: 0xff, val: 0x00 [ 532.121080][ T5905] dvb_usb_mxl111sf 2-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 532.142977][ T29] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 532.150679][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 532.158884][ T24] usb usb5-port1: attempt power cycle [ 532.241113][ T5905] usb 2-1: USB disconnect, device number 112 [ 532.301446][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 532.308624][ T29] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 532.317301][ T29] usb 6-1: config 179 has no interface number 0 [ 532.323721][ T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 532.335199][ T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 532.347488][ T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 532.358740][ T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 532.370392][ T29] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 532.385370][ T29] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 532.394797][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.407057][T27884] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 532.499992][ T24] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 532.520520][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 532.632319][ T5905] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input39 [ 532.650739][ T24] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 532.696313][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 532.709831][ T24] usb usb5-port1: unable to enumerate USB device [ 532.829196][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 532.837574][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 532.856173][ T24] usb 6-1: USB disconnect, device number 29 [ 533.298420][T27942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'. [ 533.563839][ T1119] Bluetooth: (null): Invalid header checksum [ 533.642714][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 533.652738][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 533.672730][ T1123] Bluetooth: (null): Too short H5 packet [ 533.689869][ T1123] Bluetooth: (null): Invalid header checksum [ 533.782415][ T1123] Bluetooth: (null): Invalid header checksum [ 533.946256][ T1123] Bluetooth: (null): Invalid header checksum [ 534.001244][ T247] Bluetooth: (null): Invalid header checksum [ 534.109993][ T3567] Bluetooth: (null): Invalid header checksum [ 534.196905][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'. [ 534.219739][ T1123] Bluetooth: (null): Invalid header checksum [ 534.533001][T27998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 534.891085][ T5950] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 535.016268][ T247] Bluetooth: (null): Invalid header checksum [ 535.047010][T28030] sctp: [Deprecated]: syz.4.3193 (pid 28030) Use of int in maxseg socket option. [ 535.047010][T28030] Use struct sctp_assoc_value instead [ 535.084028][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 535.093843][ T5950] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 535.111496][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0 [ 535.120959][ T5950] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 535.135159][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.148940][ T5950] usb 3-1: Product: syz [ 535.153473][ T5950] usb 3-1: Manufacturer: syz [ 535.158323][ T5950] usb 3-1: SerialNumber: syz [ 535.170076][ T5950] usb 3-1: config 0 descriptor?? [ 535.180345][T28033] netlink: 'syz.1.3196': attribute type 4 has an invalid length. [ 535.391289][ T5950] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 535.399450][ T5950] imon 3-1:0.0: unable to initialize intf0, err -19 [ 535.406473][ T5950] imon:imon_probe: failed to initialize context! [ 535.413601][ T5950] imon 3-1:0.0: unable to register, err -19 [ 535.426094][ T5950] usb 3-1: USB disconnect, device number 6 [ 535.540817][ T5905] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 535.694822][ T5905] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 535.705028][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.714925][ T5905] usb 2-1: Product: syz [ 535.719215][ T5905] usb 2-1: Manufacturer: syz [ 535.724287][ T5905] usb 2-1: SerialNumber: syz [ 535.972797][T28066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 536.050332][ T5950] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 536.226668][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 536.243503][ T5950] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 536.259916][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.278170][ T5950] usb 5-1: Product: syz [ 536.282593][ T5950] usb 5-1: Manufacturer: syz [ 536.287644][ T5950] usb 5-1: SerialNumber: syz [ 536.298511][ T5950] usb 5-1: config 0 descriptor?? [ 536.306193][T22798] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 536.319217][ T5950] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 536.413248][ T5905] rtl8150 2-1:1.0: eth9: rtl8150 is detected [ 536.464664][T28089] netlink: 'syz.5.3206': attribute type 9 has an invalid length. [ 536.477100][T28089] netlink: 'syz.5.3206': attribute type 11 has an invalid length. [ 536.485503][T22798] usb 3-1: Using ep0 maxpacket: 32 [ 536.491770][T28089] netlink: 'syz.5.3206': attribute type 12 has an invalid length. [ 536.511762][T28089] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.3206'. [ 536.522179][T28089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3206'. [ 536.533496][T22798] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 536.547378][ T5950] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 536.557201][T22798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.566711][ T5950] visor 5-1:0.0: probe with driver visor failed with error -5 [ 536.582193][T22798] usb 3-1: Product: syz [ 536.601738][ T5950] usb 2-1: USB disconnect, device number 113 [ 536.608480][T22798] usb 3-1: Manufacturer: syz [ 536.617616][T22798] usb 3-1: SerialNumber: syz [ 536.639740][T22798] usb 3-1: config 0 descriptor?? [ 536.661256][T22798] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 536.815587][ T24] usb 5-1: USB disconnect, device number 104 [ 536.863213][ T247] Bluetooth: (null): Invalid header checksum [ 537.067651][T28071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.093120][T28071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.319090][T28142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3211'. [ 537.609030][T28150] overlayfs: unescaped trailing colons in lowerdir mount option. [ 537.700295][T28150] overlayfs: unescaped trailing colons in lowerdir mount option. [ 537.913499][T28071] netlink: 592 bytes leftover after parsing attributes in process `syz.2.3203'. [ 537.963026][T28071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.975145][T28071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.057910][ T3549] Bluetooth: (null): Invalid header checksum [ 538.153645][T28179] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=9 (18 ns) > initial count (4 ns). Using initial count to start timer. [ 538.185984][T28071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.200295][ T3567] Bluetooth: (null): Invalid header checksum [ 538.215824][T28071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.225572][T22798] gspca_topro: reg_w err -110 [ 538.254731][T22798] gspca_topro: Sensor soi763a [ 538.275642][ T247] Bluetooth: (null): Invalid header checksum [ 538.399171][ T3567] Bluetooth: (null): Too short H5 packet [ 538.421473][ T3567] Bluetooth: (null): Invalid header checksum [ 538.507653][ T247] Bluetooth: (null): Invalid header checksum [ 538.625394][ T247] Bluetooth: (null): Invalid header checksum [ 538.636747][T28210] nftables ruleset with unbound chain [ 538.711157][T28213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 538.733036][ T247] Bluetooth: (null): Invalid header checksum [ 538.845279][ T60] Bluetooth: (null): Invalid header checksum [ 539.120333][T28229] netlink: 'syz.5.3228': attribute type 5 has an invalid length. [ 539.146783][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3228'. [ 539.389864][ T5950] usb 3-1: USB disconnect, device number 7 [ 539.514413][T28258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 539.617005][ T1123] Bluetooth: (null): Invalid header checksum [ 539.865151][ T29] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 539.905856][ T5950] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 540.074051][ T5950] usb 6-1: Invalid ep0 maxpacket: 64 [ 540.123764][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 540.136513][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.148595][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 540.163224][ T29] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 540.175087][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.188295][ T29] usb 2-1: config 0 descriptor?? [ 540.216683][ T5950] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 540.386264][ T5950] usb 6-1: Invalid ep0 maxpacket: 64 [ 540.400383][ T5950] usb usb6-port1: attempt power cycle [ 540.427361][T28307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 540.452182][ T1123] Bluetooth: (null): Invalid header checksum [ 540.631410][ T29] hid_parser_main: 32 callbacks suppressed [ 540.631437][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.770877][ T5950] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 540.778751][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.785894][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.794259][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.801498][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.808452][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.817123][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.826363][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.833957][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.842035][ T29] apple 0003:05AC:022B.0011: unknown main item tag 0x0 [ 540.846853][ T5950] usb 6-1: Invalid ep0 maxpacket: 64 [ 540.870617][ T29] apple 0003:05AC:022B.0011: hidraw0: USB HID v0.0a Device [HID 05ac:022b] on usb-dummy_hcd.1-1/input0 [ 540.908620][ T29] usb 2-1: USB disconnect, device number 114 [ 540.997205][T28340] IPv6: syztnl0: Disabled Multicast RS [ 541.009553][ T5950] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 541.049789][ T5950] usb 6-1: Invalid ep0 maxpacket: 64 [ 541.055961][T28333] fido_id[28333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 541.071526][ T5950] usb usb6-port1: unable to enumerate USB device [ 541.200864][T28349] Bluetooth: MGMT ver 1.23 [ 541.272224][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3256'. [ 541.304102][T28357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3258'. [ 541.438593][ T60] Bluetooth: (null): Invalid header checksum [ 541.505014][T28372] cgroup: none used incorrectly [ 541.655099][ T5950] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 541.854141][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 541.861684][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.885388][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.907595][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 541.954299][ T5950] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 541.980946][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.017698][ T5950] usb 2-1: config 0 descriptor?? [ 542.038818][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'. [ 542.246543][T28402] comedi: valid board names for 8255 driver are: [ 542.262003][T28402] 8255 [ 542.265876][T28402] comedi: valid board names for vmk80xx driver are: [ 542.273225][T28402] vmk80xx [ 542.276406][T28402] comedi: valid board names for usbduxsigma driver are: [ 542.284270][T28402] usbduxsigma [ 542.287776][T28402] comedi: valid board names for usbduxfast driver are: [ 542.296375][T28402] usbduxfast [ 542.299866][T28402] comedi: valid board names for usbdux driver are: [ 542.307352][T28403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3271'. [ 542.329317][T28402] usbdux [ 542.332906][T28402] comedi: valid board names for ni6501 driver are: [ 542.339769][T28402] ni6501 [ 542.343303][T28402] comedi: valid board names for dt9812 driver are: [ 542.350842][T28403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3271'. [ 542.364265][T28402] dt9812 [ 542.367284][T28402] comedi: valid board names for ni_labpc_cs driver are: [ 542.374939][T28403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3271'. [ 542.387262][T28402] ni_labpc_cs [ 542.392646][T28402] comedi: valid board names for ni_daq_700 driver are: [ 542.402698][T28402] ni_daq_700 [ 542.406064][T28402] comedi: valid board names for labpc_pci driver are: [ 542.413492][T28402] labpc_pci [ 542.416760][T28402] comedi: valid board names for adl_pci9118 driver are: [ 542.424858][T28402] pci9118dg [ 542.428128][T28402] pci9118hg [ 542.432131][T28402] pci9118hr [ 542.435561][T28402] comedi: valid board names for 8255_pci driver are: [ 542.445938][T28402] 8255_pci [ 542.449359][T28406] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3259'. [ 542.460943][T28402] comedi: valid board names for s526 driver are: [ 542.467849][T28402] s526 [ 542.472779][T28402] comedi: valid board names for multiq3 driver are: [ 542.480157][T28402] multiq3 [ 542.484713][T28402] comedi: valid board names for pcmuio driver are: [ 542.488580][ T5950] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 542.494551][T28402] pcmuio48 [ 542.522140][T28402] pcmuio96 [ 542.526447][T28402] comedi: valid board names for pcmmio driver are: [ 542.533601][T28402] pcmmio [ 542.536712][T28402] comedi: valid board names for pcmda12 driver are: [ 542.545320][T28402] pcmda12 [ 542.558669][T28402] comedi: valid board names for pcmad driver are: [ 542.566511][T28402] pcmad12 [ 542.569740][T28402] pcmad16 [ 542.573693][T28402] comedi: valid board names for ni_labpc driver are: [ 542.580903][T28402] lab-pc-1200 [ 542.584401][T28402] lab-pc-1200ai [ 542.588047][T28402] lab-pc+ [ 542.591905][T28402] comedi: valid board names for atmio16 driver are: [ 542.598671][T28402] atmio16 [ 542.603066][T28402] atmio16d [ 542.606301][T28402] comedi: valid board names for ni_at_ao driver are: [ 542.614975][T28402] at-ao-6 [ 542.626404][T28402] at-ao-10 [ 542.649948][T28402] comedi: valid board names for ni_at_a2150 driver are: [ 542.673791][T28402] ni_at_a2150 [ 542.679159][T28402] comedi: valid board names for adq12b driver are: [ 542.687460][T28402] adq12b [ 542.691189][T28402] comedi: valid board names for mpc624 driver are: [ 542.697896][T28402] mpc624 [ 542.701474][T28402] comedi: valid board names for c6xdigio driver are: [ 542.731416][T28402] c6xdigio [ 542.734771][T28402] comedi: valid board names for aio_iiro_16 driver are: [ 542.750672][T28402] aio_iiro_16 [ 542.756479][ T5950] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 542.769200][T28402] comedi: valid board names for aio_aio12_8 driver are: [ 542.769219][T28402] aio_aio12_8 [ 542.769230][T28402] aio_ai12_8 [ 542.769249][T28402] aio_ao12_4 [ 542.769259][T28402] comedi: valid board names for fl512 driver are: [ 542.769270][T28402] fl512 [ 542.769279][T28402] comedi: valid board names for dmm32at driver are: [ 542.769290][T28402] dmm32at [ 542.769300][T28402] comedi: valid board names for dt282x driver are: [ 542.769310][T28402] dt2821 [ 542.769319][T28402] dt2821-f [ 542.769328][T28402] dt2821-g [ 542.769337][T28402] dt2823 [ 542.769345][T28402] dt2824-pgh [ 542.769353][T28402] dt2824-pgl [ 542.769362][T28402] dt2825 [ 542.769371][T28402] dt2827 [ 542.769380][T28402] dt2828 [ 542.769388][T28402] dt2829 [ 542.769397][T28402] dt21-ez [ 542.769406][T28402] dt23-ez [ 542.769414][T28402] dt24-ez [ 542.769423][T28402] dt24-ez-pgl [ 542.769432][T28402] comedi: valid board names for dt2817 driver are: [ 542.769442][T28402] dt2817 [ 542.769451][T28402] comedi: valid board names for dt2815 driver are: [ 542.769463][T28402] dt2815 [ 542.769472][T28402] comedi: valid board names for dt2814 driver are: [ 542.769483][T28402] dt2814 [ 542.769492][T28402] comedi: valid board names for dt2811 driver are: [ 542.769503][T28402] dt2811-pgh [ 542.769512][T28402] dt2811-pgl [ 542.769521][T28402] comedi: valid board names for dt2801 driver are: [ 542.769531][T28402] dt2801 [ 542.769541][T28402] comedi: valid board names for das6402 driver are: [ 542.769552][T28402] das6402-12 [ 542.769561][T28402] das6402-16 [ 542.769570][T28402] comedi: valid board names for das1800 driver are: [ 542.769581][T28402] das-1701st [ 542.769589][T28402] das-1701st-da [ 542.769599][T28402] das-1702st [ 542.769608][T28402] das-1702st-da [ 542.769616][T28402] das-1702hr [ 542.769624][T28402] das-1702hr-da [ 542.769633][T28402] das-1701ao [ 542.769642][T28402] das-1702ao [ 542.769651][T28402] das-1801st [ 542.769660][T28402] das-1801st-da [ 542.769669][T28402] das-1802st [ 542.769678][T28402] das-1802st-da [ 542.769688][T28402] das-1802hr [ 542.769696][T28402] das-1802hr-da [ 542.769705][T28402] das-1801hc [ 542.769714][T28402] das-1802hc [ 542.769723][T28402] das-1801ao [ 542.769732][T28402] das-1802ao [ 542.769741][T28402] comedi: valid board names for das800 driver are: [ 542.769753][T28402] das-800 [ 542.769761][T28402] cio-das800 [ 542.769771][T28402] das-801 [ 542.769779][T28402] cio-das801 [ 542.769788][T28402] das-802 [ 542.769797][T28402] cio-das802 [ 542.769806][T28402] cio-das802/16 [ 542.769815][T28402] comedi: valid board names for isa-das08 driver are: [ 542.769826][T28402] isa-das08 [ 542.769835][T28402] das08-pgm [ 542.769844][T28402] das08-pgh [ 542.769853][T28402] das08-pgl [ 542.769861][T28402] das08-aoh [ 542.769870][T28402] das08-aol [ 542.769879][T28402] das08-aom [ 542.769888][T28402] das08/jr-ao [ 542.769897][T28402] das08jr-16-ao [ 542.769905][T28402] pc104-das08 [ 542.769915][T28402] das08jr/16 [ 542.769924][T28402] comedi: valid board names for das16m1 driver are: [ 542.769935][T28402] das16m1 [ 542.769944][T28402] comedi: valid board names for dac02 driver are: [ 542.769955][T28402] dac02 [ 542.769964][T28402] comedi: valid board names for rti802 driver are: [ 542.769975][T28402] rti802 [ 542.769984][T28402] comedi: valid board names for rti800 driver are: [ 542.769996][T28402] rti800 [ 542.770004][T28402] rti815 [ 542.770013][T28402] comedi: valid board names for pcm3724 driver are: [ 542.770024][T28402] pcm3724 [ 542.770032][T28402] comedi: valid board names for pcl818 driver are: [ 542.770042][T28402] pcl818l [ 542.770051][T28402] pcl818h [ 542.833852][ T5950] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 542.987459][T28402] pcl818hd [ 543.145193][ T5844] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 543.186189][ T5950] usb 2-1: USB disconnect, device number 115 [ 543.192871][ T30] audit: type=1400 audit(1773881654.584:4773): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=28427 comm="syz.5.3273" [ 543.229766][ T5844] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 543.267694][ T60] Bluetooth: (null): Invalid header checksum [ 543.274623][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 543.339224][T28402] pcl818hg [ 543.342415][ T5844] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 543.342681][ T5844] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 543.381641][ T1119] Bluetooth: (null): Too short H5 packet [ 543.403810][ T1119] Bluetooth: (null): Invalid header checksum [ 543.421229][T28402] pcl818 [ 543.424647][T28402] pcl718 [ 543.432818][T28402] pcm3718 [ 543.439957][T28402] comedi: valid board names for pcl816 driver are: [ 543.448012][T28402] pcl816 [ 543.451216][T28402] pcl814b [ 543.454314][T28402] comedi: valid board names for pcl812 driver are: [ 543.469475][T28402] pcl812 [ 543.488849][ T3567] Bluetooth: (null): Invalid header checksum [ 543.497252][T28402] pcl812pg [ 543.507940][T28402] acl8112pg [ 543.515269][T28402] acl8112dg [ 543.520123][T28402] acl8112hg [ 543.530231][T28402] a821pgl [ 543.533456][T28402] a821pglnda [ 543.541198][T28402] a821pgh [ 543.547565][T28402] a822pgl [ 543.550700][T28402] a822pgh [ 543.553833][T28402] a823pgl [ 543.557833][T28402] a823pgh [ 543.560975][T28402] pcl813 [ 543.564054][T28402] pcl813b [ 543.568028][T28402] acl8113 [ 543.571128][T28402] iso813 [ 543.576013][T28402] acl8216 [ 543.579122][T28402] a826pg [ 543.582127][T28402] comedi: valid board names for pcl730 driver are: [ 543.599458][T28402] pcl730 [ 543.602570][T28402] iso730 [ 543.610083][T28402] acl7130 [ 543.615844][T28402] pcm3730 [ 543.624346][T28402] pcl725 [ 543.627713][T28402] p8r8dio [ 543.632356][T28402] acl7225b [ 543.639254][T28402] p16r16dio [ 543.645102][T28402] pcl733 [ 543.651070][T28402] pcl734 [ 543.661159][T28402] opmm-1616-xt [ 543.671122][T28402] pearl-mm-p [ 543.681057][T28402] ir104-pbf [ 543.693432][T28402] comedi: valid board names for pcl726 driver are: [ 543.719518][T28402] pcl726 [ 543.727182][T28402] pcl727 [ 543.735572][T28402] pcl728 [ 543.743304][T28402] acl6126 [ 543.751701][T28402] acl6128 [ 543.759198][T28402] comedi: valid board names for pcl724 driver are: [ 543.774852][T28402] pcl724 [ 543.782002][T28402] pcl722 [ 543.793934][T28402] pcl731 [ 543.807538][T28402] acl7122 [ 543.818871][T28402] acl7124 [ 543.832786][T28402] pet48dio [ 543.844677][T28402] pcmio48 [ 543.868053][T28402] onyx-mm-dio [ 543.875529][T28402] comedi: valid board names for pcl711 driver are: [ 543.913266][T28402] pcl711 [ 543.926977][T28402] pcl711b [ 543.941791][T28402] acl8112hg [ 543.957941][T28402] acl8112dg [ 543.975636][T28402] comedi: valid board names for amplc_pc263 driver are: [ 544.011443][T28402] pc263 [ 544.023043][T28467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 544.032360][T28402] comedi: valid board names for amplc_pc236 driver are: [ 544.039471][T28402] pc36at [ 544.043855][T28402] comedi: valid board names for amplc_dio200 driver are: [ 544.051584][T28402] pc212e [ 544.054626][T28402] pc214e [ 544.057597][T28402] pc215e [ 544.060569][T28402] pc218e [ 544.063592][T28402] pc272e [ 544.066556][T28402] comedi: valid board names for comedi_parport driver are: [ 544.073854][T28402] comedi_parport [ 544.077518][T28402] comedi: valid board names for comedi_test driver are: [ 544.085792][T28402] comedi_test [ 544.089224][T28402] comedi: valid board names for comedi_bond driver are: [ 544.096998][T28402] comedi_bond [ 544.197169][T28464] can0: slcan on ttyS3. [ 544.479914][ T5950] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 544.573217][T28463] can0 (unregistered): slcan off ttyS3. [ 544.649124][T28505] tmpfs: Bad value for 'mpol' [ 544.666780][ T5950] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 544.699368][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.709045][ T1119] Bluetooth: (null): Invalid header checksum [ 544.734468][ T5950] usb 5-1: Product: syz [ 544.750269][ T5950] usb 5-1: Manufacturer: syz [ 544.760745][ T5950] usb 5-1: SerialNumber: syz [ 544.819778][ T1123] Bluetooth: (null): Too short H5 packet [ 544.832563][ T1123] Bluetooth: (null): Invalid header checksum [ 545.073979][T28527] vivid-005: disconnect [ 545.077221][T28527] QAT: failed to copy from user. [ 545.153114][T28527] veth0_to_team: entered promiscuous mode [ 545.165474][T28524] i2c i2c-0: dtv_property_process_set: SET cmd 0xf79e0348 undefined [ 545.194759][T28480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.195398][T28480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.223289][T28526] vivid-005: reconnect [ 545.333392][T28537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3293'. [ 545.443281][ T5950] rtl8150 5-1:1.0: eth9: rtl8150 is detected [ 545.621320][ T5950] usb 5-1: USB disconnect, device number 105 [ 545.778795][ T5905] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 545.941994][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 545.953560][ T5905] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 546.040396][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.051512][ T5905] usb 3-1: config 0 has no interface number 0 [ 546.060830][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 546.078685][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.116805][ T5905] usb 3-1: Product: syz [ 546.154297][ T5905] usb 3-1: Manufacturer: syz [ 546.185667][ T5905] usb 3-1: SerialNumber: syz [ 546.221088][ T5905] usb 3-1: config 0 descriptor?? [ 546.265697][ T5905] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 546.289870][ T5905] uvcvideo 3-1:0.105: No valid video chain found. [ 546.302598][T28600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 546.474650][ T29] usb 3-1: USB disconnect, device number 8 [ 546.548889][ T5905] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 546.648408][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 546.708154][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 546.721650][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.735748][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.746774][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 546.755942][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.773341][ T5905] usb 2-1: config 0 descriptor?? [ 546.783542][ T5905] hub 2-1:0.0: USB hub found [ 546.807805][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 546.818472][ T24] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 546.839625][ T24] usb 5-1: config 0 has no interface number 0 [ 546.858050][ T24] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 546.871700][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 546.881100][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.889720][ T24] usb 5-1: Product: syz [ 546.894107][ T24] usb 5-1: Manufacturer: syz [ 546.901608][ T24] usb 5-1: SerialNumber: syz [ 546.913879][ T24] usb 5-1: config 0 descriptor?? [ 546.926705][T28608] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 546.981753][ T5905] hub 2-1:0.0: 1 port detected [ 547.064145][T28647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.137424][T28608] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 547.353800][ T5905] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 547.360749][ T5905] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 547.384607][ T5905] usbhid 2-1:0.0: can't add hid device: -71 [ 547.390709][ T5905] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 547.427543][ T5905] usb 2-1: USB disconnect, device number 116 [ 547.555601][T28669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 548.186514][ T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 548.206732][ T24] asix 5-1:0.188: probe with driver asix failed with error -71 [ 548.227308][ T24] usb 5-1: USB disconnect, device number 106 [ 548.469577][ T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 548.632716][ T29] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 548.642026][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.650295][ T29] usb 3-1: Product: syz [ 548.654512][ T29] usb 3-1: Manufacturer: syz [ 548.659191][ T29] usb 3-1: SerialNumber: syz [ 548.666223][ T29] usb 3-1: config 0 descriptor?? [ 548.682060][ T29] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 548.807862][T22798] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 548.989371][T22798] usb 6-1: Using ep0 maxpacket: 16 [ 549.003842][T22798] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 549.014859][T22798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.024657][T22798] usb 6-1: Product: syz [ 549.029411][T22798] usb 6-1: Manufacturer: syz [ 549.034076][T22798] usb 6-1: SerialNumber: syz [ 549.078274][T22798] usb 6-1: config 0 descriptor?? [ 549.609624][T22798] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 549.627291][T22798] usb 6-1: USB disconnect, device number 34 [ 549.685067][ T5905] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 549.846507][ T5905] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 549.856561][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.864738][ T5905] usb 5-1: Product: syz [ 549.868969][ T5905] usb 5-1: Manufacturer: syz [ 549.873731][ T5905] usb 5-1: SerialNumber: syz [ 549.952032][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 549.966106][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 550.026634][ T29] gspca_sunplus: reg_w_riv err -110 [ 550.033573][ T29] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 550.209492][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3337'. [ 550.286100][ T9] usb 3-1: USB disconnect, device number 9 [ 550.383331][T28778] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 550.397519][T28778] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 550.495449][ C1] sd 0:0:1:0: [sda] tag#8350 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 550.506008][ C1] sd 0:0:1:0: [sda] tag#8350 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 550.517752][ T5905] (unnamed net_device) (uninitialized): Assigned a random MAC address: 06:88:a1:47:bf:4a [ 550.562503][ T5905] rtl8150 5-1:1.0: eth9: rtl8150 is detected [ 550.734317][ T5905] usb 5-1: USB disconnect, device number 107 [ 550.976855][ T24] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 551.149523][ T3567] Bluetooth: Invalid byte 5e after esc byte [ 551.156124][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 551.170530][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 551.208864][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 551.249486][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.268234][ T3549] Bluetooth: (null): Invalid header checksum [ 551.284001][ T24] usb 2-1: Product: syz [ 551.299688][ T24] usb 2-1: Manufacturer: syz [ 551.324388][ T24] usb 2-1: SerialNumber: syz [ 551.375832][ T3549] Bluetooth: (null): Too short H5 packet [ 551.392835][ T3549] Bluetooth: (null): Invalid header checksum [ 551.583181][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 551.605565][ T24] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 551.621762][T28849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 551.652884][ T24] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 551.774792][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 551.827932][ T24] usb 2-1: USB disconnect, device number 117 [ 551.880363][ T9073] udevd[9073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.898059][T22798] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 552.898285][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 552.916843][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 552.988642][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 553.016146][T28923] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3360'. [ 553.064162][T22798] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 553.074804][T22798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.083016][T22798] usb 5-1: Product: syz [ 553.091448][T22798] usb 5-1: Manufacturer: syz [ 553.096173][T22798] usb 5-1: SerialNumber: syz [ 553.154107][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 553.166285][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 553.181611][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 553.191186][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.209554][T28916] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 553.227922][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 553.261754][T28933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 553.430455][ T24] usb 6-1: USB disconnect, device number 35 [ 553.636314][T28957] netlink: 'syz.1.3367': attribute type 29 has an invalid length. [ 553.696800][ T60] Bluetooth: (null): Invalid header checksum [ 553.721663][T28910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.747270][T28910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.805026][ T1119] Bluetooth: (null): Too short H5 packet [ 553.811058][ T1119] Bluetooth: (null): Invalid header checksum [ 553.914581][ T1119] Bluetooth: (null): Invalid header checksum [ 553.953000][ T5950] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 554.023782][ T1119] Bluetooth: (null): Invalid header checksum [ 554.104283][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 554.115380][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 554.126721][ T5950] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 554.136043][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.145424][ T1123] Bluetooth: (null): Invalid header checksum [ 554.153848][ T5950] usb 2-1: config 0 descriptor?? [ 554.162720][T28910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.176207][T28962] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 554.186285][T28910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.211534][ T5950] gspca_main: spca561-2.14.0 probing abcd:cdee [ 554.232510][T22798] rtl8150 5-1:1.0: eth9: rtl8150 is detected [ 554.244643][ T3549] Bluetooth: (null): Invalid header checksum [ 554.352203][ T1119] Bluetooth: (null): Invalid header checksum [ 554.396292][ T5950] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 554.416264][ T5950] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 554.423547][ T5950] usb 2-1: MIDIStreaming interface descriptor not found [ 554.485568][ T60] Bluetooth: (null): Invalid header checksum [ 554.570453][ T3549] Bluetooth: (null): Invalid header checksum [ 554.606652][ T24] usb 5-1: USB disconnect, device number 108 [ 554.616643][ T5950] usb 2-1: USB disconnect, device number 118 [ 554.705660][ T3549] Bluetooth: (null): Invalid header checksum [ 554.791589][ T60] Bluetooth: (null): Invalid header checksum [ 554.900878][ T60] Bluetooth: (null): Invalid header checksum [ 555.009273][ T60] Bluetooth: (null): Invalid header checksum [ 555.110023][ T24] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 555.118484][ T1119] Bluetooth: (null): Invalid header checksum [ 555.227499][ T3549] Bluetooth: (null): Invalid header checksum [ 555.281860][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 555.293695][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 78, changing to 4 [ 555.305333][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 555.319130][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 555.328943][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.337495][ T24] usb 5-1: Product:   [ 555.337682][ T3549] Bluetooth: (null): Invalid header checksum [ 555.342151][ T24] usb 5-1: Manufacturer: ᜼꒳㥱㫌ꖱ脦剗௒뷴ﵮ혉뤦掝ᔾꘌ奜 [ 555.357900][ T24] usb 5-1: SerialNumber: syz [ 555.447078][ T60] Bluetooth: (null): Invalid header checksum [ 555.556528][ T60] Bluetooth: (null): Invalid header checksum [ 555.574411][ T24] gspca_main: ov519-2.14.0 probing 041e:4064 [ 555.673336][ T3567] Bluetooth: (null): Invalid header checksum [ 555.983163][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'. [ 556.093773][ T24] ov519 5-1:1.0: reg_w 5a failed -110 [ 556.212779][ T29] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 556.378832][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 556.386800][ T29] usb 2-1: config 0 has an invalid interface number: 114 but max is 0 [ 556.397101][ T29] usb 2-1: config 0 has no interface number 0 [ 556.416938][ T29] usb 2-1: too many endpoints for config 0 interface 114 altsetting 111: 97, using maximum allowed: 30 [ 556.440050][ T29] usb 2-1: config 0 interface 114 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 556.471655][ T29] usb 2-1: config 0 interface 114 has no altsetting 0 [ 556.478599][ T29] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 556.494811][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.510395][ T29] usb 2-1: config 0 descriptor?? [ 556.535481][T29100] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 556.547149][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 556.560764][T29100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.696041][T29105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.726550][ T3567] Bluetooth: (null): Invalid header checksum [ 556.734194][ T29] usb 2-1: string descriptor 0 read error: -71 [ 556.754408][ T29] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 556.770926][ T29] gspca_sonixj: reg_w1 err -71 [ 556.777308][ T29] sonixj 2-1:0.114: probe with driver sonixj failed with error -71 [ 556.797803][ T29] usb 2-1: USB disconnect, device number 119 [ 557.281216][T29139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'. [ 557.407727][ T5905] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 557.547153][ T5905] usb 3-1: device descriptor read/64, error -71 [ 557.686354][ T29] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 557.785929][ T5905] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 557.842714][ T29] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 557.852062][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.860197][ T29] usb 2-1: Product: syz [ 557.864870][ T29] usb 2-1: Manufacturer: syz [ 557.869589][ T29] usb 2-1: SerialNumber: syz [ 557.915692][ T5905] usb 3-1: device descriptor read/64, error -71 [ 557.917990][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 557.927430][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 558.046885][ T5905] usb usb3-port1: attempt power cycle [ 558.263824][T22798] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 558.383307][ T5905] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 558.404695][ T5905] usb 3-1: device descriptor read/8, error -71 [ 558.416989][T22798] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 558.426268][T22798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.435124][T22798] usb 6-1: Product: syz [ 558.439357][T22798] usb 6-1: Manufacturer: syz [ 558.444110][T22798] usb 6-1: SerialNumber: syz [ 558.460143][T22798] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 558.479332][ T5950] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 558.608738][ T29] rtl8150 2-1:1.0: couldn't reset the device [ 558.616383][ T29] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 558.633767][ T29] usb 2-1: USB disconnect, device number 120 [ 558.653804][ T5905] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 558.682705][ T5905] usb 3-1: device descriptor read/8, error -71 [ 558.792504][ T5905] usb usb3-port1: unable to enumerate USB device [ 558.861448][ T3549] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 558.889685][ T29] usb 6-1: USB disconnect, device number 36 [ 559.339805][ T3549] Bluetooth: (null): Invalid header checksum [ 559.508943][ T5950] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 559.539501][ T5950] ath9k_htc: Failed to initialize the device [ 559.563787][ T29] usb 6-1: ath9k_htc: USB layer deinitialized [ 559.747240][T29214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 560.416493][T29237] comedi comedi3: comedi_config --init_data is deprecated [ 560.754334][ T3567] Bluetooth: (null): Invalid header checksum [ 561.077763][T29268] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3415'. [ 561.450539][ T29] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 561.602783][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.619629][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 561.628852][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 561.637055][ T29] usb 3-1: Product: syz [ 561.641295][ T29] usb 3-1: Manufacturer: syz [ 561.645914][ T29] usb 3-1: SerialNumber: syz [ 561.819133][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 561.828383][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 561.880094][ T29] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 561.901285][ T5846] Bluetooth: hci5: command 0x1003 tx timeout [ 561.901590][ T5852] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 562.070669][ T9] usb 3-1: USB disconnect, device number 14 [ 562.108260][ T9] usblp0: removed [ 562.412979][T29315] can0: slcan on pty30. [ 562.432274][T29320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 562.518403][T29314] can0 (unregistered): slcan off pty30. [ 562.701930][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.934663][ T808] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 563.085959][ T808] usb 3-1: device descriptor read/64, error -71 [ 563.333266][ T808] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 563.422981][T22798] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 563.483360][ T808] usb 3-1: device descriptor read/64, error -71 [ 563.602149][T22798] usb 2-1: Using ep0 maxpacket: 32 [ 563.621861][T22798] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 563.641237][T22798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.672646][T22798] usb 2-1: config 0 descriptor?? [ 563.689804][T22798] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 563.741731][ T808] usb usb3-port1: attempt power cycle [ 563.887236][T22798] gspca_vc032x: reg_r err -71 [ 563.894414][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.899793][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.905682][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.911695][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.917196][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.923724][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.929155][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.934591][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.939952][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.946411][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.951811][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.957155][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.963103][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.968434][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.975985][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.983661][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.989000][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.994670][T22798] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.999990][T22798] gspca_vc032x: Unknown sensor... [ 564.005169][T22798] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 564.015245][T22798] usb 2-1: USB disconnect, device number 121 [ 564.090046][ T808] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 564.110865][ T808] usb 3-1: device descriptor read/8, error -71 [ 564.169807][ T24] ov519 5-1:1.0: Can't determine sensor slave IDs [ 564.177155][ T24] ov519 5-1:1.0: OV519 Config failed [ 564.182801][ T24] ov519 5-1:1.0: probe with driver ov519 failed with error -22 [ 564.191622][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 564.198723][ T24] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 564.243277][ T24] usb 5-1: USB disconnect, device number 109 [ 564.359040][ T808] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 564.379668][ T808] usb 3-1: device descriptor read/8, error -71 [ 564.475428][T29423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'. [ 564.489156][ T808] usb usb3-port1: unable to enumerate USB device [ 564.617958][ T24] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 564.688026][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 564.689454][ T5846] Bluetooth: hci4: command 0x1003 tx timeout [ 564.807209][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 564.814146][ T24] usb 5-1: too many configurations: 14, using maximum allowed: 8 [ 564.845922][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 564.867075][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.876698][ T24] usb 5-1: Product: syz [ 564.884606][ T24] usb 5-1: Manufacturer: syz [ 564.889407][ T24] usb 5-1: SerialNumber: syz [ 564.912293][ T24] usb 5-1: config 0 descriptor?? [ 565.067423][T29456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 565.151375][ T5905] usb 5-1: USB disconnect, device number 110 [ 565.674774][ T5905] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 565.856578][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.881006][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.909300][ T5905] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 565.926725][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.947498][ T5905] usb 6-1: config 0 descriptor?? [ 566.261731][T22798] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 566.371756][ T5905] hid-led 0003:27B8:01ED.0013: item fetching failed at offset 2/5 [ 566.383077][ T5905] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -22 [ 566.434132][T22798] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 566.449206][T22798] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 566.460387][T22798] usb 5-1: config 0 interface 0 has no altsetting 0 [ 566.473529][T22798] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 566.484800][T22798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.494254][T22798] usb 5-1: Product: syz [ 566.498752][T22798] usb 5-1: Manufacturer: syz [ 566.504180][T22798] usb 5-1: SerialNumber: syz [ 566.516066][T22798] usb 5-1: config 0 descriptor?? [ 566.570724][ T5950] usb 6-1: USB disconnect, device number 37 [ 566.747969][T22798] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 566.770201][T22798] imon 5-1:0.0: unable to initialize intf0, err -90 [ 566.782122][T22798] imon:imon_probe: failed to initialize context! [ 566.791780][T22798] imon 5-1:0.0: unable to register, err -19 [ 566.806933][T22798] usb 5-1: USB disconnect, device number 111 [ 567.108540][ T5905] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 567.278021][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 567.284195][ T5905] usb 3-1: too many configurations: 14, using maximum allowed: 8 [ 567.319925][ T5905] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 567.336316][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.346034][ T5905] usb 3-1: Product: syz [ 567.351445][ T5905] usb 3-1: Manufacturer: syz [ 567.356119][ T5905] usb 3-1: SerialNumber: syz [ 567.374125][ T5905] usb 3-1: config 0 descriptor?? [ 567.397993][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 567.400553][ T5846] Bluetooth: hci4: command 0x1003 tx timeout [ 567.629256][ T5905] usb 3-1: USB disconnect, device number 19 [ 567.634034][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3464'. [ 568.088051][T29592] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3463'. [ 568.435755][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 568.595036][ T24] usb 6-1: device descriptor read/64, error -71 [ 568.732651][ T5905] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 568.862275][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 568.893979][ T5905] usb 3-1: device descriptor read/64, error -71 [ 569.001865][ T24] usb 6-1: device descriptor read/64, error -71 [ 569.111680][ T24] usb usb6-port1: attempt power cycle [ 569.161085][ T5905] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 569.181037][ T808] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 569.300622][ T5905] usb 3-1: device descriptor read/64, error -71 [ 569.340344][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 569.346300][ T808] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 569.364503][ T808] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 569.375058][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.384347][ T808] usb 2-1: Product: syz [ 569.388606][ T808] usb 2-1: Manufacturer: syz [ 569.393921][ T808] usb 2-1: SerialNumber: syz [ 569.401121][ T808] usb 2-1: config 0 descriptor?? [ 569.410462][ T5905] usb usb3-port1: attempt power cycle [ 569.450044][ T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 569.474860][ T24] usb 6-1: device descriptor read/8, error -71 [ 569.623285][T12610] usb 2-1: USB disconnect, device number 122 [ 569.719198][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 569.740142][ T24] usb 6-1: device descriptor read/8, error -71 [ 569.759017][ T5905] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 569.779456][ T5905] usb 3-1: device descriptor read/8, error -71 [ 569.848922][ T24] usb usb6-port1: unable to enumerate USB device [ 570.027977][ T5905] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 570.048841][ T5905] usb 3-1: device descriptor read/8, error -71 [ 570.169221][ T5905] usb usb3-port1: unable to enumerate USB device [ 570.507087][ T5846] Bluetooth: hci4: command 0x1003 tx timeout [ 570.507671][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 570.642044][T29671] 8021q: VLANs not supported on wg0 [ 570.934777][T22798] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 571.163929][T22798] usb 2-1: Using ep0 maxpacket: 32 [ 571.171742][T22798] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 571.180595][T22798] usb 2-1: config 0 has no interface number 0 [ 571.190743][T22798] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 571.200355][T22798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.209246][T22798] usb 2-1: Product: syz [ 571.214052][T22798] usb 2-1: Manufacturer: syz [ 571.218787][T22798] usb 2-1: SerialNumber: syz [ 571.227917][T22798] usb 2-1: config 0 descriptor?? [ 571.625541][T12610] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 571.639830][T22798] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 571.664068][T22798] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 571.811670][T12610] usb 6-1: Using ep0 maxpacket: 16 [ 571.826903][T12610] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 571.855727][T12610] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 571.865726][T12610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.879144][T12610] usb 6-1: Product: syz [ 571.893702][T12610] usb 6-1: Manufacturer: syz [ 571.898412][T12610] usb 6-1: SerialNumber: syz [ 571.928290][T12610] usb 6-1: config 0 descriptor?? [ 572.154937][ T5950] usb 6-1: USB disconnect, device number 42 [ 572.230240][T12610] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 572.379683][T12610] usb 3-1: Using ep0 maxpacket: 8 [ 572.387238][T12610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 572.399153][T12610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 572.408909][T12610] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 572.418722][T12610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 572.431525][T12610] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 572.441682][T12610] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 572.450787][T12610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.461720][T12610] usb 3-1: config 0 descriptor?? [ 572.467874][T29723] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 572.493363][T22798] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 572.508803][T22798] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 572.679230][T29723] netlink: 'syz.2.3492': attribute type 63 has an invalid length. [ 572.687353][T29723] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3492'. [ 572.704301][T29723] gretap0: entered allmulticast mode [ 572.713730][T29723] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 572.746046][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 572.756368][ T51] Bluetooth: hci5: unexpected event 0x10 length: 71 > 1 [ 573.077325][ T808] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 573.239110][ T808] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 573.250820][ T808] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 573.260060][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.278011][ T808] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 573.376487][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 573.377527][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 573.518267][T12610] usb 3-1: USB disconnect, device number 24 [ 573.524441][ T5846] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 573.533084][ T5846] Bluetooth: hci5: hardware error 0x51 [ 573.543615][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3496'. [ 573.778008][T22798] usb 2-1: USB disconnect, device number 123 [ 574.004213][T12610] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 574.155886][T12610] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 574.176507][T12610] usb 3-1: config 0 interface 0 has no altsetting 0 [ 574.187300][T12610] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 574.197938][T12610] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 574.210505][T12610] usb 3-1: Product: syz [ 574.215285][T12610] usb 3-1: Manufacturer: syz [ 574.220156][T12610] usb 3-1: SerialNumber: syz [ 574.232249][T12610] usb 3-1: config 0 descriptor?? [ 574.250415][T12610] usb 3-1: selecting invalid altsetting 0 [ 574.336133][ T808] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 574.460843][T22798] usb 3-1: USB disconnect, device number 25 [ 574.543520][ T808] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 574.563321][ T808] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 574.595247][ T808] usb 6-1: USB disconnect, device number 43 [ 574.890733][T29863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3508'. [ 575.723911][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. [ 575.896482][ T5852] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 575.922023][ T5852] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 576.406897][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 576.427456][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 576.516787][T12610] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 576.601758][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3527'. [ 576.636577][T29960] serio: Serial port ptm0 [ 576.680372][T12610] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 576.698692][T12610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 576.710238][T12610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 576.724301][T12610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 576.760038][T12610] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 576.778308][T12610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.794597][T12610] usb 6-1: Product: syz [ 576.799388][T12610] usb 6-1: Manufacturer: syz [ 576.804119][T12610] usb 6-1: SerialNumber: syz [ 576.821397][T12610] usb 6-1: config 0 descriptor?? [ 576.952025][T29980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3530'. [ 577.046667][ T808] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 577.141770][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.168743][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.180733][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.190718][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.197505][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.206573][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.213111][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.220667][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.233792][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 577.240192][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.255160][ T808] usb 2-1: config 2 has an invalid interface number: 152 but max is 0 [ 577.264628][ T808] usb 2-1: config 2 has no interface number 0 [ 577.270931][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.278237][ T808] usb 2-1: config 2 interface 152 has no altsetting 0 [ 577.288708][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.300113][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.307581][ T808] usb 2-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d [ 577.317145][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.323705][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.334175][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.340459][ T808] usb 2-1: Product: syz [ 577.345047][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.351136][ T808] usb 2-1: Manufacturer: syz [ 577.357138][ T808] usb 2-1: SerialNumber: syz [ 577.361929][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.374113][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.384295][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.390793][ T808] r8152-cfgselector 2-1: Unknown version 0x0000 [ 577.399599][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.413252][T12610] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 577.419527][T12610] input input41: Timeout waiting for response from device. [ 577.442865][T12610] usb 6-1: USB disconnect, device number 44 [ 577.473267][ T9073] udevd[9073]: setting mode of /dev/bus/usb/006/044 to 020664 failed: No such file or directory [ 577.500982][ T9073] udevd[9073]: setting owner of /dev/bus/usb/006/044 to uid=0, gid=0 failed: No such file or directory [ 577.636387][ T808] r8152 2-1:2.152: Expected endpoints are not found [ 577.649601][ T808] r8152-cfgselector 2-1: USB disconnect, device number 124 [ 577.772326][ T24] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 577.933938][ T24] usb 5-1: config 127 has an invalid interface number: 48 but max is 0 [ 577.949260][ T24] usb 5-1: config 127 has no interface number 0 [ 577.955681][ T24] usb 5-1: too many endpoints for config 127 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 577.970893][ T24] usb 5-1: config 127 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 577.984734][ T24] usb 5-1: config 127 interface 48 has no altsetting 0 [ 577.991778][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 578.000951][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.237432][ T24] usb 5-1: string descriptor 0 read error: -71 [ 578.250659][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 578.279891][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'. [ 578.310548][ T24] usb 5-1: USB disconnect, device number 112 [ 578.937093][T30065] netlink: 'syz.1.3548': attribute type 39 has an invalid length. [ 578.968588][T30068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3549'. [ 579.307681][ T808] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 579.456790][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 579.470221][ T808] usb 5-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 579.496973][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.506580][ T808] usb 5-1: Product: syz [ 579.516693][ T808] usb 5-1: Manufacturer: syz [ 579.524542][ T808] usb 5-1: SerialNumber: syz [ 579.567709][T30099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3559'. [ 579.734828][T30115] dlm: non-version read from control device 2 [ 579.764834][ T808] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 579.774752][ T808] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 579.837299][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 579.837599][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 579.843896][T30122] input: syz0 as /devices/virtual/input/input43 [ 579.912060][ T808] usb 5-1: USB disconnect, device number 113 [ 580.638953][ T5950] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 580.657670][T30191] dlm: non-version read from control device 2 [ 580.674157][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3570'. [ 580.832376][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.851786][ T5950] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 580.883696][ T5852] Bluetooth: hci4: sending frame failed (-49) [ 580.893762][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 580.893779][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.915605][ T5950] usb 3-1: config 0 descriptor?? [ 580.965004][ T5950] smsusb:smsusb_probe: board id=8, interface number 0 [ 580.981258][ T5950] smsusb:smsusb_probe: Device initialized with return code -19 [ 581.211087][ T5950] usb 3-1: USB disconnect, device number 26 [ 581.599313][T30239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3580'. [ 581.618390][T30242] dlm: non-version read from control device 2 [ 581.720481][ T808] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 581.764950][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3582'. [ 581.889482][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 581.901254][ T808] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 581.912697][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.926399][ T808] usb 2-1: Product: syz [ 581.930952][ T808] usb 2-1: Manufacturer: syz [ 581.935968][ T808] usb 2-1: SerialNumber: syz [ 581.939542][T30253] tmpfs: Bad value for 'nr_inodes' [ 581.952817][ T808] usb 2-1: config 0 descriptor?? [ 581.965905][ T808] gspca_main: se401-2.14.0 probing 047d:5003 [ 582.086204][T30260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3585'. [ 582.407773][ T808] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 582.451282][ T808] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 582.465814][ T808] usb 2-1: USB disconnect, device number 125 [ 583.299153][ T808] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 583.353576][T30293] dlm: non-version read from control device 2 [ 583.464853][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 583.479226][ T808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 583.501311][ T808] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 583.520278][ T808] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 583.536655][T30295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3593'. [ 583.541526][ T808] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 583.574547][ T808] usb 3-1: config 128 has no interface number 0 [ 583.581100][ T808] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 583.596841][ T808] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 583.607660][ T808] usb 3-1: config 128 interface 127 has no altsetting 0 [ 583.617555][ T808] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 583.630670][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.638986][ T808] usb 3-1: Product: syz [ 583.643413][ T808] usb 3-1: Manufacturer: syz [ 583.649571][ T808] usb 3-1: SerialNumber: syz [ 583.829370][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 583.836278][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 584.078960][T30314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'. [ 584.110448][ T808] usb 3-1: USB disconnect, device number 27 [ 584.150539][ T9073] udevd[9073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.551591][T30349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3604'. [ 584.562933][ T808] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 584.701516][ T808] usb 5-1: device descriptor read/64, error -71 [ 584.710508][T30358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 584.757565][T30360] netlink: 'syz.2.3607': attribute type 6 has an invalid length. [ 584.941136][ T808] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 585.081228][ T808] usb 5-1: device descriptor read/64, error -71 [ 585.203442][ T808] usb usb5-port1: attempt power cycle [ 585.393150][T30367] PKCS7: Unknown OID: [5] (bad) [ 585.400062][T30367] PKCS7: Only support pkcs7_signedData type [ 585.568982][ T808] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 585.590417][ T808] usb 5-1: device descriptor read/8, error -71 [ 585.838214][ T808] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 585.858952][ T808] usb 5-1: device descriptor read/8, error -71 [ 585.969055][ T808] usb usb5-port1: unable to enumerate USB device [ 586.506428][T12610] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 586.658259][T12610] usb 3-1: unable to get BOS descriptor or descriptor too short [ 586.667254][T12610] usb 3-1: config 1 has an invalid interface number: 48 but max is 1 [ 586.675532][T12610] usb 3-1: config 1 has no interface number 1 [ 586.681762][T12610] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 586.695968][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 586.697117][T12610] usb 3-1: config 1 interface 0 has no altsetting 0 [ 586.713112][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 586.740444][T12610] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 586.750927][T12610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.778114][T12610] usb 3-1: Product: syz [ 586.782433][T12610] usb 3-1: Manufacturer: syz [ 586.788752][T12610] usb 3-1: SerialNumber: syz [ 586.980144][T30394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3617'. [ 587.015559][T12610] smsusb:smsusb_probe: board id=8, interface number 0 [ 587.039212][T12610] smsusb:smsusb_probe: board id=8, interface number 48 [ 587.063981][T12610] usb 3-1: USB disconnect, device number 28 [ 587.393984][T12610] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 587.554533][T12610] usb 6-1: Using ep0 maxpacket: 16 [ 587.576241][T12610] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.606954][T12610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 587.621105][T12610] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 587.645198][T12610] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 587.654554][T30426] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 587.681836][T12610] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=13.42 [ 587.691618][T12610] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 587.700017][T12610] usb 6-1: Manufacturer: syz [ 587.713177][T12610] usb 6-1: config 0 descriptor?? [ 587.720255][T30428] dlm: non-version read from control device 2 [ 587.888950][T30440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3627'. [ 587.942761][ T9] usb 6-1: USB disconnect, device number 45 [ 588.427649][T30472] dlm: non-version read from control device 2 [ 588.514311][T12610] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 588.705288][T12610] usb 3-1: no configurations [ 588.719785][T12610] usb 3-1: can't read configurations, error -22 [ 588.768398][T30500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 588.860404][T12610] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 588.980820][T30513] dlm: non-version read from control device 2 [ 589.031586][T12610] usb 3-1: no configurations [ 589.038343][T12610] usb 3-1: can't read configurations, error -22 [ 589.059816][T12610] usb usb3-port1: attempt power cycle [ 589.438948][T12610] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 589.452237][T30536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 589.480883][T12610] usb 3-1: no configurations [ 589.485819][T12610] usb 3-1: can't read configurations, error -22 [ 589.524051][ T5846] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 589.534819][T30539] tipc: Started in network mode [ 589.540606][T30539] tipc: Node identity , cluster identity 4711 [ 589.547623][T30539] tipc: Failed to obtain node identity [ 589.553909][T30539] tipc: Enabling of bearer rejected, failed to enable media [ 589.628430][T12610] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 589.669536][T12610] usb 3-1: no configurations [ 589.678217][T12610] usb 3-1: can't read configurations, error -22 [ 589.683438][ T1123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 589.695541][T12610] usb usb3-port1: unable to enumerate USB device [ 589.749695][T30553] dlm: non-version read from control device 2 [ 589.869468][T30562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3657'. [ 589.878897][T30562] netlink: 'syz.4.3657': attribute type 2 has an invalid length. [ 589.887071][T30562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3657'. [ 590.250818][T30579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 590.263370][ T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 590.416033][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 590.423557][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 590.446019][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.473676][ T9] usb 2-1: config 0 descriptor?? [ 590.532192][T30593] dlm: non-version read from control device 2 [ 590.698173][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 590.732925][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 590.762096][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 590.778600][ T9] usb 2-1: media controller created [ 590.805940][T30612] dlm: no local IP address has been set [ 590.819152][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.845141][T30612] dlm: cannot start dlm midcomms -107 [ 590.881114][T30613] dlm: no local IP address has been set [ 590.908063][T30613] dlm: cannot start dlm midcomms -107 [ 590.924663][ T9] az6027: usb out operation failed. (-71) [ 590.936917][ T9] az6027: usb out operation failed. (-71) [ 590.952408][ T9] stb0899_attach: Driver disabled by Kconfig [ 590.959182][ T9] az6027: no front-end attached [ 590.959182][ T9] [ 590.968948][ T9] az6027: usb out operation failed. (-71) [ 590.975527][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 590.997414][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 591.048752][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 591.073469][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 591.124378][ T9] usb 2-1: USB disconnect, device number 126 [ 591.144777][ T10] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 591.265841][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 591.326936][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 591.342705][ T10] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 591.356009][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.366220][ T10] usb 5-1: Product: 睻뵘팧ꛒ䘢־洨〽㪮ᶸ峯Ȏ [ 591.376065][ T10] usb 5-1: Manufacturer: ᥕ晕슝嬼ퟕ粺볇宏脍࿇അ辐ﱇ䛲氭寬䶇ᝠ钖⸳⌱乑峌ࣆ둖梹⟇埊˶ [ 591.405036][ T10] usb 5-1: SerialNumber: ࠝ [ 591.531840][T30662] dlm: non-version read from control device 2 [ 591.649043][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.693939][T22798] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 591.741475][ T10] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 591.752211][T30680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3677'. [ 591.801706][ T6375] udevd[6375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.849421][ T29] usb 5-1: USB disconnect, device number 118 [ 591.862616][T22798] usb 6-1: Using ep0 maxpacket: 16 [ 591.875162][T22798] usb 6-1: config index 0 descriptor too short (expected 1828, got 249) [ 591.904601][T22798] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 591.932396][T22798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.954926][T22798] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 591.965496][T22798] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 591.976304][T22798] usb 6-1: config 0 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 591.986494][T22798] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 591.996663][T22798] usb 6-1: config 0 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 592.009401][T22798] usb 6-1: config 0 interface 0 has no altsetting 0 [ 592.016395][T22798] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 592.031399][T22798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.061626][T22798] usb 6-1: config 0 descriptor?? [ 592.088094][T22798] ums-sddr09 6-1:0.0: USB Mass Storage device detected [ 592.200357][T22798] ums-sddr09 6-1:0.0: probe with driver ums-sddr09 failed with error -22 [ 592.288003][T30650] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3672'. [ 592.310326][ T24] usb 6-1: USB disconnect, device number 46 [ 592.366342][T30732] dlm: non-version read from control device 2 [ 592.403423][T22798] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 592.610407][T22798] usb 3-1: Using ep0 maxpacket: 32 [ 592.697635][T22798] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 592.707200][T22798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.719335][T22798] usb 3-1: config 0 descriptor?? [ 592.868558][T30753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3690'. [ 592.941997][T22798] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 592.973551][T22798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 592.992867][T22798] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 593.013599][T22798] usb 3-1: media controller created [ 593.037844][T22798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.151163][T22798] az6027: usb out operation failed. (-71) [ 593.159241][ T24] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 593.174856][T22798] az6027: usb out operation failed. (-71) [ 593.187064][T22798] stb0899_attach: Driver disabled by Kconfig [ 593.193820][T22798] az6027: no front-end attached [ 593.193820][T22798] [ 593.202252][T22798] az6027: usb out operation failed. (-71) [ 593.208169][T22798] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 593.226999][T22798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 593.260000][T22798] dvb-usb: schedule remote query interval to 400 msecs. [ 593.277616][T22798] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 593.309540][T22798] usb 3-1: USB disconnect, device number 33 [ 593.340309][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 593.354626][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 593.366709][T30787] dlm: non-version read from control device 2 [ 593.375015][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 593.389572][ T24] usb 5-1: string descriptor 0 read error: -22 [ 593.401810][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 593.420407][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.441544][T22798] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 593.888536][ T24] hid_parser_main: 37 callbacks suppressed [ 593.888560][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 593.929845][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 593.967424][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 593.991888][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 594.006023][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 594.019593][T30818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3702'. [ 594.031461][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 594.041175][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 594.054772][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 594.063467][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 594.071351][ T24] hid-picolcd 0003:04D8:C002.0014: unknown main item tag 0x0 [ 594.160350][ T29] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 594.221079][T30831] dlm: non-version read from control device 2 [ 594.240674][ T24] hid-picolcd 0003:04D8:C002.0014: No report with id 0x11 found [ 594.261851][ T24] usb 5-1: USB disconnect, device number 119 [ 594.317910][ T29] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 594.327899][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.341087][ T29] usb 3-1: config 0 descriptor?? [ 594.366145][ T808] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 594.375631][ T29] cp210x 3-1:0.0: cp210x converter detected [ 594.547237][ T808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.558869][ T808] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 594.568015][ T808] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.584016][ T808] usb 6-1: New USB device found, idVendor=0525, idProduct=0007, bcdDevice= 0.00 [ 594.595050][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.603498][ T808] usb 6-1: Product: syz [ 594.615427][ T808] usb 6-1: Manufacturer: syz [ 594.620217][ T808] usb 6-1: SerialNumber: syz [ 594.636416][ T808] cdc_ncm 6-1:1.0: skipping garbage [ 594.658129][ T808] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 594.679246][ T808] cdc_ncm 6-1:1.0: bind() failure [ 594.719816][T30860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3717'. [ 594.797304][ T29] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 594.805853][ T29] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 594.820210][ T29] usb 3-1: cp210x converter now attached to ttyUSB0 [ 594.837253][ T29] usb 3-1: USB disconnect, device number 34 [ 594.844707][T30824] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 594.872246][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 594.888994][ T29] cp210x 3-1:0.0: device disconnected [ 594.903140][ T808] usb 6-1: USB disconnect, device number 47 [ 594.906460][ T10] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 595.074493][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 595.074880][T22798] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 595.090115][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 595.099856][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.111786][ T10] usb 5-1: config 0 descriptor?? [ 595.214144][T22798] usb 2-1: device descriptor read/64, error -71 [ 595.325652][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 595.336120][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 595.350301][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 595.369421][ T10] usb 5-1: media controller created [ 595.387757][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 595.453509][T22798] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 595.542255][ T10] az6027: usb out operation failed. (-71) [ 595.645440][ T10] az6027: usb out operation failed. (-71) [ 595.657539][ T10] stb0899_attach: Driver disabled by Kconfig [ 595.663953][ T10] az6027: no front-end attached [ 595.663953][ T10] [ 595.672599][ T10] az6027: usb out operation failed. (-71) [ 595.682950][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 595.704672][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input46 [ 595.716409][T22798] usb 2-1: device descriptor read/64, error -71 [ 595.725608][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 595.733209][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 595.764731][ T10] usb 5-1: USB disconnect, device number 120 [ 595.826224][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 595.835745][T22798] usb usb2-port1: attempt power cycle [ 595.846099][T30918] dlm: non-version read from control device 2 [ 596.084202][T30936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 596.169828][T30940] netlink: 1042 bytes leftover after parsing attributes in process `syz.4.3719'. [ 596.182058][T22798] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 596.212281][T22798] usb 2-1: device descriptor read/8, error -71 [ 596.250095][T30943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'. [ 596.461185][T22798] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 596.541741][T22798] usb 2-1: device descriptor read/8, error -71 [ 596.553375][T30953] dlm: non-version read from control device 2 [ 596.651060][T22798] usb usb2-port1: unable to enumerate USB device [ 596.871049][T30977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3729'. [ 596.961224][T30981] support for the xor transformation has been removed. [ 597.010353][ T29] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 597.018561][T30983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3732'. [ 597.159564][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 597.237028][ T29] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 597.247961][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.262110][ T29] usb 5-1: config 0 descriptor?? [ 597.483083][ T29] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 597.519443][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 597.533389][ T29] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 597.543712][ T29] usb 5-1: media controller created [ 597.550318][T16564] wlan1: Trigger new scan to find an IBSS to join [ 597.575097][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.683382][ T29] az6027: usb out operation failed. (-71) [ 597.714950][ T29] az6027: usb out operation failed. (-71) [ 597.722682][ T29] stb0899_attach: Driver disabled by Kconfig [ 597.729134][ T29] az6027: no front-end attached [ 597.729134][ T29] [ 597.736598][ T29] az6027: usb out operation failed. (-71) [ 597.742451][ T29] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 597.754403][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input47 [ 597.780581][ T29] dvb-usb: schedule remote query interval to 400 msecs. [ 597.788436][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 597.799385][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 597.814662][ T29] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 597.840247][ T29] usb 5-1: USB disconnect, device number 121 [ 598.016977][ T29] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 598.137757][T31047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3740'. [ 598.380806][T31061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3744'. [ 598.760719][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3749'. [ 598.940169][T31091] Mount JFS Failure: -5 [ 598.946521][T31091] jfs_mount failed w/return code = -5 [ 599.111406][T31105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.127228][T31105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.135296][T22798] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 599.294641][T22798] usb 5-1: Using ep0 maxpacket: 32 [ 599.301792][T22798] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 599.311904][T22798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.328830][T22798] usb 5-1: config 0 descriptor?? [ 599.344593][ T808] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 599.494310][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 599.504717][ T808] usb 3-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice= 0.40 [ 599.513949][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.522075][ T808] usb 3-1: Product: syz [ 599.527353][ T808] usb 3-1: Manufacturer: 撌聹䭩ꑵ蔏ꅬ䴑崬렔ꭋ里넋墝衑趟귽淘㞔줱뎂뙄嬑ঈ蜚ᆶぅ氞柞浨攄츻쀮폓劉惧ⶋ臾笰胰㋼뽁꽅颔疡 [ 599.547487][ T808] usb 3-1: SerialNumber: syz [ 599.556325][T22798] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 599.583665][T22798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 599.598785][T22798] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 599.606706][T22798] usb 5-1: media controller created [ 599.628399][T22798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.764523][T22798] az6027: usb out operation failed. (-71) [ 599.778051][T22798] az6027: usb out operation failed. (-71) [ 599.784705][T22798] stb0899_attach: Driver disabled by Kconfig [ 599.790757][T22798] az6027: no front-end attached [ 599.790757][T22798] [ 599.799006][ T808] usb 3-1: 1:1 : bogus bTerminalLink 0 [ 599.800514][T22798] az6027: usb out operation failed. (-71) [ 599.810671][T22798] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 599.820523][ T808] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 599.835668][T22798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 599.851700][T22798] dvb-usb: schedule remote query interval to 400 msecs. [ 599.858867][T22798] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 599.877617][T22798] usb 5-1: USB disconnect, device number 122 [ 599.930847][ T808] usb 3-1: USB disconnect, device number 35 [ 599.991090][T22798] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 600.062564][ T9073] udevd[9073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.085647][T31161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3758'. [ 600.582175][ T3549] wlan1: Trigger new scan to find an IBSS to join [ 600.728537][T31196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 600.851603][ T10] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 601.002674][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 601.014056][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.025465][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 601.031055][ T808] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 601.034736][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.053331][ T10] usb 6-1: config 0 descriptor?? [ 601.062805][ T10] hub 6-1:0.0: USB hub found [ 601.200425][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 601.207390][ T808] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 601.223491][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.240536][ T808] usb 5-1: config 0 descriptor?? [ 601.454203][ T808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 601.472096][ T10] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 601.500953][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 601.506560][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 601.529520][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 601.541293][ T808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 601.560722][ T808] usb 5-1: media controller created [ 601.595509][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.661318][ T10] usb 6-1: USB disconnect, device number 48 [ 601.776517][ T808] az6027: usb out operation failed. (-71) [ 601.795968][ T808] az6027: usb out operation failed. (-71) [ 601.819374][ T808] stb0899_attach: Driver disabled by Kconfig [ 601.825495][ T808] az6027: no front-end attached [ 601.825495][ T808] [ 601.845755][ T808] az6027: usb out operation failed. (-71) [ 601.853547][ T808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 601.883087][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 601.931823][ T808] dvb-usb: schedule remote query interval to 400 msecs. [ 601.958802][ T808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 601.985599][ T808] usb 5-1: USB disconnect, device number 123 [ 602.121737][ T808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 602.254408][T31256] overlayfs: missing 'workdir' [ 602.667349][ T10] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 602.821129][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 602.831165][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 602.841420][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 602.851595][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 602.864950][ T10] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 602.875196][ T808] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 602.878691][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.893801][ T10] usb 5-1: Product: syz [ 602.898307][ T10] usb 5-1: Manufacturer: syz [ 602.902968][ T10] usb 5-1: SerialNumber: syz [ 602.915337][ T10] usb 5-1: config 0 descriptor?? [ 602.928713][ T10] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 603.041745][ T808] usb 3-1: too many configurations: 125, using maximum allowed: 8 [ 603.058955][T31287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3782'. [ 603.103795][ T808] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 603.128173][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.139375][ T808] usb 3-1: Product: syz [ 603.149336][T31266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.159368][ T808] usb 3-1: Manufacturer: syz [ 603.164901][T31266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.187169][ T808] usb 3-1: SerialNumber: syz [ 603.224816][ T808] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 603.258580][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 603.383786][ T10] scsi host1: usb-storage 5-1:0.0 [ 603.481219][ C1] usb 3-1: ath: unknown panic pattern! [ 603.547283][ T3549] wlan1: Trigger new scan to find an IBSS to join [ 603.684804][ T10] usb 3-1: USB disconnect, device number 36 [ 603.754962][ T29] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 604.066304][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 604.073516][ T29] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 604.083857][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.097124][ T29] usb 6-1: config 0 descriptor?? [ 604.237020][T31333] tipc: Started in network mode [ 604.254037][T31333] tipc: Node identity ac14140f, cluster identity 4711 [ 604.275057][T31333] tipc: New replicast peer: 255.255.255.255 [ 604.303423][T31333] tipc: Enabled bearer , priority 10 [ 604.323501][ T29] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 604.339336][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 604.360214][ T24] ath9k_htc: Failed to initialize the device [ 604.384279][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 604.388858][ T29] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 604.405317][ T29] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 604.484442][ T1119] wlan1: Creating new IBSS network, BSSID be:49:42:f2:e2:54 [ 604.756878][T31360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 605.299291][ T5950] usb 5-1: USB disconnect, device number 124 [ 605.422187][ T24] tipc: Node number set to 2886997007 [ 605.782038][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 605.950682][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 605.969245][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 605.990230][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.019262][ T9] usb 2-1: config 0 descriptor?? [ 606.256562][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 606.279214][T31432] netlink: 'syz.4.3814': attribute type 4 has an invalid length. [ 607.499606][ T5950] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 607.657137][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 607.665472][ T5950] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 607.674611][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.684955][ T5950] usb 3-1: config 0 descriptor?? [ 607.908634][ T5950] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 608.063416][T31504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3832'. [ 608.159049][T31508] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 608.165988][T31508] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 608.206983][T31508] vhci_hcd vhci_hcd.0: Device attached [ 608.221567][T31509] vhci_hcd: connection closed [ 608.228735][ T3549] vhci_hcd vhci_hcd.5: stop threads [ 608.247488][ T3549] vhci_hcd vhci_hcd.5: release socket [ 608.255293][ T3549] vhci_hcd vhci_hcd.5: disconnect device [ 608.573332][T31529] tmpfs: Unknown parameter '' [ 608.597691][T31527] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3838'. [ 608.910970][T31542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3840'. [ 609.155069][T31559] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 609.788205][T31587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.973132][T31601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3856'. [ 610.484996][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 613.236675][ T5905] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 613.396101][T31697] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 613.408200][ T5905] usb 5-1: device descriptor read/64, error -71 [ 613.655954][ T5905] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 613.815822][ T5905] usb 5-1: device descriptor read/64, error -71 [ 613.926812][ T5905] usb usb5-port1: attempt power cycle [ 614.155187][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 614.164330][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 614.275175][ T5905] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 614.317573][ T5905] usb 5-1: device descriptor read/8, error -71 [ 614.744002][ T5905] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 614.764729][ T5905] usb 5-1: device descriptor read/8, error -71 [ 614.800253][T31726] fuse: Bad value for 'user_id' [ 614.805526][T31726] fuse: Bad value for 'user_id' [ 614.884400][ T5905] usb usb5-port1: unable to enumerate USB device [ 614.940555][T31728] netlink: 'syz.2.3886': attribute type 21 has an invalid length. [ 614.948813][T31728] netlink: 'syz.2.3886': attribute type 30 has an invalid length. [ 616.869736][T31791] program syz.2.3898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 617.429545][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 617.438122][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 617.696740][T31813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3902'. [ 617.706390][T31813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3902'. [ 617.721221][T31814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.733470][T31814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.979162][T31766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.444922][ T5852] Bluetooth: hci4: sending frame failed (-49) [ 619.451684][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 619.579037][ T5844] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 619.735604][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 619.742819][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short [ 619.754567][ T5844] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 619.764170][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.772280][ T5844] usb 5-1: Product: syz [ 619.776613][ T5844] usb 5-1: Manufacturer: syz [ 619.781261][ T5844] usb 5-1: SerialNumber: syz [ 620.054592][T31834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.063939][T31834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.149710][ T5844] usb 5-1: USB disconnect, device number 3 [ 620.187777][ T6375] udevd[6375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.646144][T16564] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 622.541261][ T5844] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 622.696308][ T5844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.724696][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.752865][ T5844] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 622.770866][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 622.781257][ T5844] usb 5-1: SerialNumber: syz [ 622.952771][T31936] [U]  [ 622.956368][T31936] [U] K{ [ 622.960739][T31936] [U] t 1ŠFfˊ`GJgo/mC [ 622.968074][T31936] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 622.983895][T31936] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 622.994649][T31936] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 623.038811][T31936] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 623.046301][ T5844] usb 5-1: 0:2 : does not exist [ 623.067318][T31936] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 623.081148][T31936] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 623.094247][T31936] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 623.192642][T31936] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 623.203296][T31936] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 623.217417][ T5852] Bluetooth: hci4: command 0x1003 tx timeout [ 623.223416][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 623.254576][T31936] [U] 22Ʃx?0;3u [ 623.260699][T31936] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 623.307278][ T5844] usb 5-1: USB disconnect, device number 4 [ 623.332167][T31936] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 623.342772][T31936] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 623.351683][T31936] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 623.358151][T31936] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 623.371561][T31936] [U] ec [ 623.374724][T31936] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 623.412115][T31935] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 623.463924][ T9073] udevd[9073]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.113005][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058e80800: rx timeout, send abort [ 625.121714][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058e80800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 626.014473][T32041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.780711][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 626.899224][T32074] input: syz1 as /devices/virtual/input/input50 [ 627.106596][T32089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.123111][T32089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.141947][T32089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.157679][T32089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.643543][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 627.774575][ T24] usb 5-1: device descriptor read/64, error -71 [ 628.012959][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 628.144154][ T24] usb 5-1: device descriptor read/64, error -71 [ 628.254907][ T24] usb usb5-port1: attempt power cycle [ 628.602204][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 628.633193][ T24] usb 5-1: device descriptor read/8, error -71 [ 628.881804][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 628.912338][ T24] usb 5-1: device descriptor read/8, error -71 [ 629.021842][ T24] usb usb5-port1: unable to enumerate USB device [ 629.409321][T32117] netlink: 2120 bytes leftover after parsing attributes in process `syz.5.3959'. [ 629.423904][T32118] netlink: 2120 bytes leftover after parsing attributes in process `syz.5.3959'. [ 630.128030][T32139] FAULT_INJECTION: forcing a failure. [ 630.128030][T32139] name failslab, interval 1, probability 0, space 0, times 0 [ 630.146321][T32139] CPU: 1 UID: 0 PID: 32139 Comm: syz.2.3963 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.146353][T32139] Tainted: [L]=SOFTLOCKUP [ 630.146360][T32139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.146372][T32139] Call Trace: [ 630.146381][T32139] [ 630.146388][T32139] dump_stack_lvl+0xe8/0x150 [ 630.146431][T32139] should_fail_ex+0x412/0x560 [ 630.146470][T32139] should_failslab+0xa8/0x100 [ 630.146489][T32139] __kmalloc_noprof+0xe8/0x760 [ 630.146515][T32139] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 630.146556][T32139] tomoyo_realpath_from_path+0xe3/0x5d0 [ 630.146592][T32139] ? tomoyo_path_number_perm+0x219/0x630 [ 630.146613][T32139] tomoyo_path_number_perm+0x246/0x630 [ 630.146636][T32139] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 630.146662][T32139] ? __lock_acquire+0x6b5/0x2cf0 [ 630.146707][T32139] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 630.146746][T32139] ? __fget_files+0x2a/0x420 [ 630.146773][T32139] ? __fget_files+0x2a/0x420 [ 630.146794][T32139] ? __fget_files+0x3a0/0x420 [ 630.146816][T32139] ? __fget_files+0x2a/0x420 [ 630.146841][T32139] security_file_ioctl+0xc3/0x2a0 [ 630.146865][T32139] __se_sys_ioctl+0x47/0x170 [ 630.146886][T32139] do_syscall_64+0x14d/0xf80 [ 630.146904][T32139] ? trace_irq_disable+0x3b/0x150 [ 630.146926][T32139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.146942][T32139] ? clear_bhb_loop+0x40/0x90 [ 630.146962][T32139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.146979][T32139] RIP: 0033:0x7f7dba79c799 [ 630.146997][T32139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.147011][T32139] RSP: 002b:00007f7dbb600028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.147030][T32139] RAX: ffffffffffffffda RBX: 00007f7dbaa15fa0 RCX: 00007f7dba79c799 [ 630.147043][T32139] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 630.147054][T32139] RBP: 00007f7dbb600090 R08: 0000000000000000 R09: 0000000000000000 [ 630.147065][T32139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.147074][T32139] R13: 00007f7dbaa16038 R14: 00007f7dbaa15fa0 R15: 00007ffd904e8838 [ 630.147099][T32139] [ 630.147108][T32139] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.207431][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 632.207553][T29224] Bluetooth: hci4: command 0x1003 tx timeout [ 632.533310][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 632.611241][ T30] audit: type=1804 audit(1773881744.254:4774): pid=32175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3969" name="/newroot/313/file0/file1" dev="overlay" ino=1603 res=1 errno=0 [ 632.653319][T32175] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3969'. [ 632.848384][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 632.860743][ T5852] Bluetooth: hci6: command 0x1003 tx timeout [ 633.145040][T32201] FAULT_INJECTION: forcing a failure. [ 633.145040][T32201] name failslab, interval 1, probability 0, space 0, times 0 [ 633.158760][T32201] CPU: 0 UID: 0 PID: 32201 Comm: syz.1.3975 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.158794][T32201] Tainted: [L]=SOFTLOCKUP [ 633.158803][T32201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.158816][T32201] Call Trace: [ 633.158824][T32201] [ 633.158835][T32201] dump_stack_lvl+0xe8/0x150 [ 633.158871][T32201] should_fail_ex+0x412/0x560 [ 633.158901][T32201] should_failslab+0xa8/0x100 [ 633.158926][T32201] __kmalloc_noprof+0xe8/0x760 [ 633.158959][T32201] ? tomoyo_encode+0x28b/0x550 [ 633.158996][T32201] tomoyo_encode+0x28b/0x550 [ 633.159033][T32201] tomoyo_realpath_from_path+0x58d/0x5d0 [ 633.159076][T32201] ? tomoyo_path_number_perm+0x219/0x630 [ 633.159103][T32201] tomoyo_path_number_perm+0x246/0x630 [ 633.159133][T32201] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 633.159163][T32201] ? __lock_acquire+0x6b5/0x2cf0 [ 633.159206][T32201] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 633.159251][T32201] ? __fget_files+0x2a/0x420 [ 633.159281][T32201] ? __fget_files+0x2a/0x420 [ 633.159307][T32201] ? __fget_files+0x3a0/0x420 [ 633.159333][T32201] ? __fget_files+0x2a/0x420 [ 633.159364][T32201] security_file_ioctl+0xc3/0x2a0 [ 633.159392][T32201] __se_sys_ioctl+0x47/0x170 [ 633.159417][T32201] do_syscall_64+0x14d/0xf80 [ 633.159444][T32201] ? trace_irq_disable+0x3b/0x150 [ 633.159469][T32201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.159490][T32201] ? clear_bhb_loop+0x40/0x90 [ 633.159516][T32201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.159537][T32201] RIP: 0033:0x7f6ee4d9c799 [ 633.159557][T32201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.159575][T32201] RSP: 002b:00007f6ee5c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.159597][T32201] RAX: ffffffffffffffda RBX: 00007f6ee5015fa0 RCX: 00007f6ee4d9c799 [ 633.159612][T32201] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 633.159625][T32201] RBP: 00007f6ee5c79090 R08: 0000000000000000 R09: 0000000000000000 [ 633.159637][T32201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.159650][T32201] R13: 00007f6ee5016038 R14: 00007f6ee5015fa0 R15: 00007ffde60eb898 [ 633.159682][T32201] [ 633.159705][T32201] ERROR: Out of memory at tomoyo_realpath_from_path. [ 633.439394][T32205] syzkaller1: entered promiscuous mode [ 633.445061][T32205] syzkaller1: entered allmulticast mode [ 633.696482][T32215] syzkaller1: entered promiscuous mode [ 633.702059][T32215] syzkaller1: entered allmulticast mode [ 633.814167][T32222] smc: net device bond0 applied user defined pnetid SYZ2 [ 634.451140][T16564] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 635.167722][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 635.814530][T32265] netlink: 'syz.5.3986': attribute type 1 has an invalid length. [ 635.822337][T32265] netlink: 'syz.5.3986': attribute type 2 has an invalid length. [ 635.831182][T32265] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3986'. [ 636.044545][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 636.045122][ T5846] Bluetooth: hci5: command 0x1003 tx timeout [ 636.191062][T32287] Bluetooth: Can't allocate mem for new packet [ 637.480570][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 637.483985][ T5846] Bluetooth: hci4: command 0x1003 tx timeout [ 638.204078][ T5852] Bluetooth: hci5: command 0x1003 tx timeout [ 638.211279][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 638.350082][T32306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.179970][T32348] FAULT_INJECTION: forcing a failure. [ 639.179970][T32348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.201846][T32348] CPU: 0 UID: 0 PID: 32348 Comm: syz.5.4003 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.201880][T32348] Tainted: [L]=SOFTLOCKUP [ 639.201889][T32348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 639.201905][T32348] Call Trace: [ 639.201911][T32348] [ 639.201918][T32348] dump_stack_lvl+0xe8/0x150 [ 639.201948][T32348] should_fail_ex+0x412/0x560 [ 639.201969][T32348] _copy_from_user+0x2d/0xb0 [ 639.201991][T32348] kstrtouint_from_user+0xd6/0x180 [ 639.202008][T32348] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 639.202035][T32348] proc_fail_nth_write+0x8e/0x210 [ 639.202072][T32348] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 639.202107][T32348] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 639.202136][T32348] vfs_write+0x29a/0xb90 [ 639.202156][T32348] ? __pfx_vfs_write+0x10/0x10 [ 639.202172][T32348] ? __fget_files+0x2a/0x420 [ 639.202198][T32348] ? __fget_files+0x3a0/0x420 [ 639.202217][T32348] ? __fget_files+0x2a/0x420 [ 639.202248][T32348] ksys_write+0x150/0x270 [ 639.202264][T32348] ? __pfx_ksys_write+0x10/0x10 [ 639.202278][T32348] ? __pfx_tty_ioctl+0x10/0x10 [ 639.202305][T32348] do_syscall_64+0x14d/0xf80 [ 639.202320][T32348] ? trace_irq_disable+0x3b/0x150 [ 639.202337][T32348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.202352][T32348] ? clear_bhb_loop+0x40/0x90 [ 639.202371][T32348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.202386][T32348] RIP: 0033:0x7f6033f5cfce [ 639.202401][T32348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 639.202413][T32348] RSP: 002b:00007f6034dcbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 639.202436][T32348] RAX: ffffffffffffffda RBX: 00007f6034dcc6c0 RCX: 00007f6033f5cfce [ 639.202447][T32348] RDX: 0000000000000001 RSI: 00007f6034dcc0a0 RDI: 0000000000000005 [ 639.202456][T32348] RBP: 00007f6034dcc090 R08: 0000000000000000 R09: 0000000000000000 [ 639.202465][T32348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.202474][T32348] R13: 00007f6034216038 R14: 00007f6034215fa0 R15: 00007fffbd8f3088 [ 639.202497][T32348] [ 639.449099][ T3567] Bluetooth: Error in BCSP hdr checksum [ 640.998701][T29224] Bluetooth: hci4: command 0x1003 tx timeout [ 641.008721][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 641.156271][T29224] Bluetooth: hci5: command 0x1003 tx timeout [ 641.165831][ T5852] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 641.236799][T29224] Bluetooth: hci6: command 0x1003 tx timeout [ 641.244660][ T5846] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 641.463603][T32401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4015'. [ 642.894152][ T5934] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 643.043928][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 643.050985][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 643.062253][ T5934] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 643.071685][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.080787][ T5934] usb 5-1: Product: syz [ 643.085135][ T5934] usb 5-1: Manufacturer: syz [ 643.089860][ T5934] usb 5-1: SerialNumber: syz [ 643.310414][ T5934] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 643.362305][ T5934] usb 5-1: USB disconnect, device number 9 [ 643.408505][ T6922] udevd[6922]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 643.424553][ T6922] udevd[6922]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 643.953001][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 643.954322][T29224] Bluetooth: hci4: command 0x1003 tx timeout [ 644.133988][ T5934] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 644.272690][ T5934] usb 5-1: device descriptor read/64, error -71 [ 644.512394][ T5934] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 644.663517][T32511] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4032'. [ 644.782006][ T5934] usb 5-1: device descriptor read/64, error -71 [ 644.903259][ T5934] usb usb5-port1: attempt power cycle [ 645.252342][ T5934] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 645.292586][ T5934] usb 5-1: device descriptor read/8, error -71 [ 645.551277][ T5934] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 645.575746][ T5934] usb 5-1: device descriptor read/8, error -71 [ 645.701676][ T5934] usb usb5-port1: unable to enumerate USB device [ 646.996394][T29224] Bluetooth: hci4: command 0x1003 tx timeout [ 646.996409][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 647.364292][T32577] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 647.364292][T32577] program syz.5.4043 not setting count and/or reply_len properly [ 647.399491][T32577] IPv6: syztnl2: Disabled Multicast RS [ 650.458692][ T30] audit: type=1326 audit(1773881762.145:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.4.4059" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61bb59c799 code=0x0 [ 650.796034][ T1119] Bluetooth: Error in BCSP hdr checksum [ 651.056368][ T1123] Bluetooth: Error in BCSP hdr checksum [ 651.316389][ T60] Bluetooth: Error in BCSP hdr checksum [ 651.531673][ T1123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 651.575506][ T60] Bluetooth: Error in BCSP hdr checksum [ 651.835256][T16564] Bluetooth: Error in BCSP hdr checksum [ 652.094747][ T1123] Bluetooth: Error in BCSP hdr checksum [ 652.356380][ T1123] Bluetooth: Error in BCSP hdr checksum [ 652.587211][T29224] Bluetooth: hci4: command 0x1003 tx timeout [ 652.595013][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 652.621713][ T3549] Bluetooth: Error in BCSP hdr checksum [ 652.873986][ T1123] Bluetooth: Error in BCSP hdr checksum [ 653.134761][ T1123] Bluetooth: Error in BCSP hdr checksum [ 653.393511][ T3549] Bluetooth: Error in BCSP hdr checksum [ 653.459705][T32683] syz.1.4067 (32683): drop_caches: 2 [ 653.874731][T32708] binder: 32707:32708 ioctl c0306201 200000000540 returned -14 [ 654.020231][T32718] netlink: 'syz.4.4076': attribute type 11 has an invalid length. [ 654.030506][T32718] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4076'. [ 654.042067][T32718] netlink: 'syz.4.4076': attribute type 40 has an invalid length. [ 655.132537][ T247] Bluetooth: Error in BCSP hdr checksum [ 655.183058][T32759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 656.446563][ T348] [ 656.448966][ T348] ====================================================== [ 656.456017][ T348] WARNING: possible circular locking dependency detected [ 656.463074][ T348] syzkaller #0 Tainted: G L [ 656.469073][ T348] ------------------------------------------------------ [ 656.476112][ T348] syz.5.4094/348 is trying to acquire lock: [ 656.482119][ T348] ffff88807905f3b8 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 656.491032][ T348] [ 656.491032][ T348] but task is already holding lock: [ 656.498407][ T348] ffff888027fc62f0 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 656.508285][ T348] [ 656.508285][ T348] which lock already depends on the new lock. [ 656.508285][ T348] [ 656.518707][ T348] [ 656.518707][ T348] the existing dependency chain (in reverse order) is: [ 656.527747][ T348] [ 656.527747][ T348] -> #1 (&ctx->map_changing_lock){++++}-{4:4}: [ 656.536112][ T348] down_read+0x47/0x2e0 [ 656.540815][ T348] mwriteprotect_range+0x1af/0x530 [ 656.546477][ T348] userfaultfd_ioctl+0x3aa1/0x4c70 [ 656.552172][ T348] __se_sys_ioctl+0xfc/0x170 [ 656.557304][ T348] do_syscall_64+0x14d/0xf80 [ 656.562435][ T348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.568867][ T348] [ 656.568867][ T348] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 656.576452][ T348] __lock_acquire+0x15a5/0x2cf0 [ 656.581856][ T348] lock_acquire+0xf0/0x2e0 [ 656.586830][ T348] __might_fault+0xcb/0x130 [ 656.591882][ T348] userfaultfd_ioctl+0x2372/0x4c70 [ 656.597548][ T348] __se_sys_ioctl+0xfc/0x170 [ 656.602696][ T348] do_syscall_64+0x14d/0xf80 [ 656.607833][ T348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.614352][ T348] [ 656.614352][ T348] other info that might help us debug this: [ 656.614352][ T348] [ 656.624604][ T348] Possible unsafe locking scenario: [ 656.624604][ T348] [ 656.632073][ T348] CPU0 CPU1 [ 656.637448][ T348] ---- ---- [ 656.642829][ T348] rlock(&ctx->map_changing_lock); [ 656.648047][ T348] lock(&mm->mmap_lock); [ 656.654919][ T348] lock(&ctx->map_changing_lock); [ 656.662579][ T348] rlock(&mm->mmap_lock); [ 656.667020][ T348] [ 656.667020][ T348] *** DEADLOCK *** [ 656.667020][ T348] [ 656.675182][ T348] 2 locks held by syz.5.4094/348: [ 656.680232][ T348] #0: ffff8880603ec1c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 656.689500][ T348] #1: ffff888027fc62f0 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 656.699723][ T348] [ 656.699723][ T348] stack backtrace: [ 656.705633][ T348] CPU: 1 UID: 0 PID: 348 Comm: syz.5.4094 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.705659][ T348] Tainted: [L]=SOFTLOCKUP [ 656.705666][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.705677][ T348] Call Trace: [ 656.705696][ T348] [ 656.705703][ T348] dump_stack_lvl+0xe8/0x150 [ 656.705736][ T348] print_circular_bug+0x2e1/0x300 [ 656.705757][ T348] check_noncircular+0x12e/0x150 [ 656.705778][ T348] __lock_acquire+0x15a5/0x2cf0 [ 656.705805][ T348] ? __kernel_text_address+0xd/0x30 [ 656.705832][ T348] ? unwind_get_return_address+0x4d/0x90 [ 656.705848][ T348] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 656.705874][ T348] lock_acquire+0xf0/0x2e0 [ 656.705902][ T348] ? __might_fault+0xaf/0x130 [ 656.705928][ T348] ? __might_fault+0xaf/0x130 [ 656.705949][ T348] __might_fault+0xcb/0x130 [ 656.705970][ T348] ? __might_fault+0xaf/0x130 [ 656.705993][ T348] userfaultfd_ioctl+0x2372/0x4c70 [ 656.706016][ T348] ? __kasan_slab_free+0x5c/0x80 [ 656.706031][ T348] ? kfree+0x1c5/0x650 [ 656.706058][ T348] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 656.706091][ T348] ? kasan_quarantine_put+0xbb/0x1f0 [ 656.706118][ T348] ? tomoyo_path_number_perm+0x219/0x630 [ 656.706139][ T348] ? tomoyo_path_number_perm+0x219/0x630 [ 656.706161][ T348] ? do_vfs_ioctl+0x1166/0x1530 [ 656.706178][ T348] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 656.706198][ T348] ? do_futex+0x333/0x420 [ 656.706230][ T348] ? __fget_files+0x2a/0x420 [ 656.706253][ T348] ? __fget_files+0x2a/0x420 [ 656.706273][ T348] ? __fget_files+0x3a0/0x420 [ 656.706292][ T348] ? __fget_files+0x2a/0x420 [ 656.706314][ T348] ? bpf_lsm_file_ioctl+0x9/0x20 [ 656.706330][ T348] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 656.706353][ T348] __se_sys_ioctl+0xfc/0x170 [ 656.706369][ T348] do_syscall_64+0x14d/0xf80 [ 656.706386][ T348] ? trace_irq_disable+0x3b/0x150 [ 656.706405][ T348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.706422][ T348] ? clear_bhb_loop+0x40/0x90 [ 656.706441][ T348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.706462][ T348] RIP: 0033:0x7f6033f9c799 [ 656.706479][ T348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.706494][ T348] RSP: 002b:00007f6034dcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.706512][ T348] RAX: ffffffffffffffda RBX: 00007f6034215fa0 RCX: 00007f6033f9c799 [ 656.706525][ T348] RDX: 00002000000002c0 RSI: 00000000c020aa07 RDI: 0000000000000003 [ 656.706537][ T348] RBP: 00007f6034032c99 R08: 0000000000000000 R09: 0000000000000000 [ 656.706547][ T348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.706564][ T348] R13: 00007f6034216038 R14: 00007f6034215fa0 R15: 00007fffbd8f3088 [ 656.706583][ T348] [ 656.988768][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 656.995045][ T5846] Bluetooth: hci2: command tx timeout [ 664.895761][ T5950] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 664.910863][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 664.918744][ T29] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 664.927567][ T5950] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 664.952219][ T9] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 664.963692][ T9] usb 2-1: USB disconnect, device number 5 [ 664.978859][ T5950] usb 3-1: USB disconnect, device number 37 [ 664.979982][ T29] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 665.007171][ T29] usb 6-1: USB disconnect, device number 49 [ 665.445820][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)