last executing test programs: 15.434255242s ago: executing program 0 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, 0x0, &(0x7f0000000f00)=0x22) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) inotify_init() r5 = semget$private(0x0, 0x7, 0x180) semtimedop(r5, &(0x7f0000000100)=[{0x4, 0xfff8, 0x1000}], 0x1, 0x0) semtimedop(r5, &(0x7f0000000100)=[{0x4, 0x7ff}], 0x1f4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r6 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x28}}, 0x24000005) sendto(r6, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 11.767730744s ago: executing program 1 (id=227): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005480)=@delchain={0x250, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x204, 0x2, [@TCA_BASIC_EMATCHES={0x84, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_META={0x54, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR=')']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0x178, 0x3, [@m_sample={0x90, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x51, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d8db6ee7a95acb45665d419103d3630ef3c99f3729bf251659b35ee457bb1f0377974ae753b08d9ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xe4, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xc0000000, 0xffffffffffffffff, 0x2, 0xe}, 0x7}}]}, {0x95, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b78c605fb9edbb86dd5ae3f174ba8489176ed907a788dd2e877be404d047e0ef287164365312e1579e8084839"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_ACT={0x4}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 11.616148769s ago: executing program 4 (id=228): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x12f4c4729364eada, 0x1}) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 11.464672388s ago: executing program 1 (id=229): socket(0x25, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8040) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 11.463879194s ago: executing program 0 (id=230): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 11.21629546s ago: executing program 4 (id=231): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 10.330674645s ago: executing program 0 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) 8.984494893s ago: executing program 0 (id=236): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000080)=@secondary) keyctl$get_persistent(0x16, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000340)=0xf, 0x4) listen(r1, 0x2) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = epoll_create1(0x80000) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') lseek(r6, 0x8001, 0x1) setsockopt$sock_attach_bpf(r2, 0x88, 0x66, &(0x7f00000002c0), 0x4) 8.80137331s ago: executing program 2 (id=237): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x10000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 7.526635088s ago: executing program 4 (id=241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000001000)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4d", 0x2c}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.297024965s ago: executing program 4 (id=243): connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0xfffc, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4, 0x4) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x4, 0x80, 0x1000, 0x2fe, 0x7]}, &(0x7f0000000040)=0x78) fchdir(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, 0x1, 0x4, 0x101, 0x0, 0x1000000, {0x3, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x17b}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r4, 0x80000000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) unshare(0x22020600) unshare(0x2a020400) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) shmctl$IPC_INFO(0x0, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 7.09832757s ago: executing program 1 (id=245): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffdc9}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.078943468s ago: executing program 2 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) 5.824128424s ago: executing program 2 (id=248): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800000000003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x2) 5.25194047s ago: executing program 2 (id=250): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) cachestat(r2, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 5.248224942s ago: executing program 4 (id=251): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x1e, 0x4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x2, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x1c, 0x38, 0x825, 0x70bd25, 0x25dfdbf9, {0xf}, [@nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x101d0) 5.141930141s ago: executing program 1 (id=252): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="f000000000000000010000005eb7000075177ff3309da1d8c85f82edfed4bb53954223bd9d5e"], 0x438}, 0x0, 0x12f4c4729364eada, 0x1}) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 4.443073303s ago: executing program 0 (id=255): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) cachestat(r2, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 4.44264614s ago: executing program 1 (id=256): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x10000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 4.409086549s ago: executing program 4 (id=257): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$get_persistent(0x16, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000340)=0xf, 0x4) listen(r1, 0x2) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = epoll_create1(0x80000) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0x8001, 0x1) setsockopt$sock_attach_bpf(r2, 0x88, 0x66, &(0x7f00000002c0), 0x4) 3.599340646s ago: executing program 3 (id=259): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) getdents(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r3 = syz_open_dev$vim2m(0x0, 0x782, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r4, 0x0, 0x0) close(r4) 3.128937124s ago: executing program 3 (id=260): socket(0x25, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8040) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 2.896012026s ago: executing program 3 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) 2.791806595s ago: executing program 1 (id=262): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r4, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14, 0x19, {0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) epoll_create(0x9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f00000004c0)=0x4) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req={0x80, 0x1, 0x80, 0x3}, 0x10) r8 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000240)="cc", 0x1}], 0x1) 2.383297987s ago: executing program 3 (id=263): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) 2.285763792s ago: executing program 2 (id=264): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, &(0x7f00000001c0)='source', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) 1.045112754s ago: executing program 3 (id=265): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x438}, 0x0, 0x12f4c4729364eada, 0x1}) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 1.0423097s ago: executing program 2 (id=266): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) creat(&(0x7f0000000000)='./file0\x00', 0x1) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x14) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000004280), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 332.309709ms ago: executing program 3 (id=267): ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000280)=[{0x1, 0x9001, 0x0, 0x0}], 0x1}) 0s ago: executing program 0 (id=268): r0 = socket$inet(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x3, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004fc0)=ANY=[@ANYBLOB], 0x30}, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x4203, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 112.636242][ T5789] cgroup: Unknown subsys name 'net' [ 112.877119][ T5789] cgroup: Unknown subsys name 'cpuset' [ 112.930923][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 115.248552][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 119.508055][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.522005][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.559131][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.572850][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.573840][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.575767][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.576650][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.593157][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.598075][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.600955][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.601068][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.609467][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.622412][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.624759][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.650900][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.651535][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.658989][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.660677][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.675666][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.688549][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.705541][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.708051][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.715920][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.719207][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.732907][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.988770][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 121.034011][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 121.114220][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 121.137573][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 121.329302][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 121.555683][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.556557][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.556987][ T5808] bridge_slave_0: entered allmulticast mode [ 121.559253][ T5808] bridge_slave_0: entered promiscuous mode [ 121.659933][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.661685][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.662430][ T5808] bridge_slave_1: entered allmulticast mode [ 121.672283][ T5808] bridge_slave_1: entered promiscuous mode [ 121.687440][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.687592][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.687748][ T5810] bridge_slave_0: entered allmulticast mode [ 121.693714][ T5810] bridge_slave_0: entered promiscuous mode [ 121.772035][ T5821] Bluetooth: hci3: command tx timeout [ 121.777659][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.777778][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.777939][ T5810] bridge_slave_1: entered allmulticast mode [ 121.781489][ T5810] bridge_slave_1: entered promiscuous mode [ 121.791455][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.791849][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.793567][ T5811] bridge_slave_0: entered allmulticast mode [ 121.803824][ T5811] bridge_slave_0: entered promiscuous mode [ 121.850378][ T5817] Bluetooth: hci1: command tx timeout [ 121.851572][ T61] Bluetooth: hci2: command tx timeout [ 121.851580][ T5817] Bluetooth: hci4: command tx timeout [ 121.853623][ T5821] Bluetooth: hci0: command tx timeout [ 121.853834][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.853949][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.854132][ T5812] bridge_slave_0: entered allmulticast mode [ 121.856253][ T5812] bridge_slave_0: entered promiscuous mode [ 121.938785][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.938917][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.939070][ T5811] bridge_slave_1: entered allmulticast mode [ 121.949107][ T5811] bridge_slave_1: entered promiscuous mode [ 121.985430][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.985552][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.985707][ T5812] bridge_slave_1: entered allmulticast mode [ 121.987924][ T5812] bridge_slave_1: entered promiscuous mode [ 122.018452][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.100588][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.105453][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.142736][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.142969][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.143180][ T5809] bridge_slave_0: entered allmulticast mode [ 122.145748][ T5809] bridge_slave_0: entered promiscuous mode [ 122.213301][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.217886][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.218168][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.218334][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.218534][ T5809] bridge_slave_1: entered allmulticast mode [ 122.228958][ T5809] bridge_slave_1: entered promiscuous mode [ 122.256682][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.299874][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.350818][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.353594][ T5808] team0: Port device team_slave_0 added [ 122.437455][ T5808] team0: Port device team_slave_1 added [ 122.464532][ T5810] team0: Port device team_slave_0 added [ 122.469677][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.524432][ T5811] team0: Port device team_slave_0 added [ 122.527081][ T5810] team0: Port device team_slave_1 added [ 122.541755][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.552107][ T5812] team0: Port device team_slave_0 added [ 122.579333][ T5811] team0: Port device team_slave_1 added [ 122.626201][ T5812] team0: Port device team_slave_1 added [ 122.627464][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.627478][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.627505][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.746434][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.746450][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.746472][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.810718][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.810738][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.810766][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.814569][ T5809] team0: Port device team_slave_0 added [ 122.885765][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.885783][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.885808][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.888121][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.888142][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.888171][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.483765][ T5809] team0: Port device team_slave_1 added [ 123.484624][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.484637][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.484658][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.486970][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.486983][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.487055][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.610097][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.610118][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.610151][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.717279][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.717297][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.717349][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.809547][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.809570][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.809602][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.860140][ T5821] Bluetooth: hci3: command tx timeout [ 123.928628][ T5808] hsr_slave_0: entered promiscuous mode [ 123.931358][ T5821] Bluetooth: hci0: command tx timeout [ 123.931398][ T5821] Bluetooth: hci2: command tx timeout [ 123.931425][ T5821] Bluetooth: hci4: command tx timeout [ 123.931447][ T5821] Bluetooth: hci1: command tx timeout [ 123.933615][ T5808] hsr_slave_1: entered promiscuous mode [ 124.011063][ T5810] hsr_slave_0: entered promiscuous mode [ 124.012326][ T5810] hsr_slave_1: entered promiscuous mode [ 124.013228][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 124.013330][ T5810] Cannot create hsr debugfs directory [ 124.105882][ T5811] hsr_slave_0: entered promiscuous mode [ 124.107381][ T5811] hsr_slave_1: entered promiscuous mode [ 124.108521][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 124.108550][ T5811] Cannot create hsr debugfs directory [ 124.145123][ T5812] hsr_slave_0: entered promiscuous mode [ 124.146260][ T5812] hsr_slave_1: entered promiscuous mode [ 124.148498][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 124.148522][ T5812] Cannot create hsr debugfs directory [ 124.378204][ T5809] hsr_slave_0: entered promiscuous mode [ 124.379421][ T5809] hsr_slave_1: entered promiscuous mode [ 124.394408][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 124.394433][ T5809] Cannot create hsr debugfs directory [ 125.363817][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.410564][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.442143][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.502602][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.662389][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.714370][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.753046][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.807988][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.930252][ T5813] Bluetooth: hci3: command tx timeout [ 125.974592][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.009752][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.014600][ T5821] Bluetooth: hci4: command tx timeout [ 126.014684][ T5821] Bluetooth: hci2: command tx timeout [ 126.014752][ T5821] Bluetooth: hci0: command tx timeout [ 126.015269][ T5813] Bluetooth: hci1: command tx timeout [ 126.077585][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.156459][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.352030][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.405643][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.455481][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.534913][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.724131][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.724538][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.778189][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.832488][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.874493][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.981076][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.018226][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.054168][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.054336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.117459][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.118455][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.196239][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.255667][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.255839][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.286663][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.317140][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.317264][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.429553][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.448299][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.508924][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.509181][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.579624][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.579796][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.688861][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.708273][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.771337][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.772221][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.854777][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.854933][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.902387][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.973235][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.973441][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.011471][ T61] Bluetooth: hci3: command tx timeout [ 128.039438][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.039567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.092444][ T61] Bluetooth: hci1: command tx timeout [ 128.092486][ T61] Bluetooth: hci2: command tx timeout [ 128.092498][ T5821] Bluetooth: hci4: command tx timeout [ 128.092549][ T5813] Bluetooth: hci0: command tx timeout [ 128.308982][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.507885][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.708777][ T5808] veth0_vlan: entered promiscuous mode [ 128.800720][ T5808] veth1_vlan: entered promiscuous mode [ 128.870357][ T5811] veth0_vlan: entered promiscuous mode [ 128.896111][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.967411][ T5811] veth1_vlan: entered promiscuous mode [ 129.076274][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.081306][ T5808] veth0_macvtap: entered promiscuous mode [ 129.119312][ T5808] veth1_macvtap: entered promiscuous mode [ 129.226799][ T5811] veth0_macvtap: entered promiscuous mode [ 129.265288][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.288418][ T5811] veth1_macvtap: entered promiscuous mode [ 129.329904][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.369365][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.397780][ T3510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.418193][ T3510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.436724][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.436861][ T3510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.486579][ T3510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.517834][ T5812] veth0_vlan: entered promiscuous mode [ 129.527407][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.663971][ T24] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.685709][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.706027][ T5812] veth1_vlan: entered promiscuous mode [ 129.711094][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.738933][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.068165][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.068193][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.156812][ T5810] veth0_vlan: entered promiscuous mode [ 130.188346][ T5809] veth0_vlan: entered promiscuous mode [ 130.264129][ T5812] veth0_macvtap: entered promiscuous mode [ 130.304889][ T5810] veth1_vlan: entered promiscuous mode [ 130.305209][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.305229][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.366164][ T5812] veth1_macvtap: entered promiscuous mode [ 130.384832][ T5809] veth1_vlan: entered promiscuous mode [ 130.412575][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.412600][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.509364][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.582793][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.600855][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.600878][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.657495][ T24] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.696217][ T24] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.727563][ T5810] veth0_macvtap: entered promiscuous mode [ 130.745706][ T24] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.766378][ T24] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.767471][ T5809] veth0_macvtap: entered promiscuous mode [ 130.799208][ T5810] veth1_macvtap: entered promiscuous mode [ 130.870618][ T5809] veth1_macvtap: entered promiscuous mode [ 131.062648][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.109792][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.176911][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.223309][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.293926][ T24] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.294027][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.294045][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.336032][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.363992][ T24] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.391018][ T24] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.423537][ T24] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.445288][ T24] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.445802][ T24] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.446204][ T24] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.510143][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 131.531892][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.531963][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.531995][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.532020][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 131.532046][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.540176][ T24] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.560252][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.560284][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.560306][ T9] usb 2-1: Manufacturer: syz [ 131.719378][ T9] usb 2-1: config 0 descriptor?? [ 131.949552][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.949734][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.011609][ T5929] netlink: 'syz.2.6': attribute type 2 has an invalid length. [ 132.102934][ T5930] netlink: 'syz.2.6': attribute type 2 has an invalid length. [ 132.142375][ T5929] !: entered promiscuous mode [ 132.160170][ T9] rc_core: IR keymap rc-hauppauge not found [ 132.160196][ T9] Registered IR keymap rc-empty [ 132.160800][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.182034][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.225528][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 132.246964][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 132.274847][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.292132][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.310376][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.332232][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.350311][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.370303][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.390266][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.413222][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.444111][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.460515][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.557861][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 132.557890][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 132.676771][ T9] usb 2-1: USB disconnect, device number 2 [ 132.819778][ T5930] !: left promiscuous mode [ 133.000867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.001024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.040084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.570076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.654969][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.654996][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.790114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.980141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.980978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.040102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.302766][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.302794][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.883317][ T3634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.883344][ T3634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.010122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.140106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.697904][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.697930][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.242004][ T5820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.399529][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.399598][ T5820] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 137.399617][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.572061][ T5820] usb 1-1: config 0 descriptor?? [ 137.649677][ T5820] pwc: Askey VC010 type 2 USB webcam detected. [ 138.206578][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.411086][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 138.462747][ T5820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 138.463643][ T9] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 138.463674][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.463695][ T9] usb 3-1: Product: syz [ 138.463710][ T9] usb 3-1: Manufacturer: syz [ 138.463725][ T9] usb 3-1: SerialNumber: syz [ 138.480585][ T5820] pwc: recv_control_msg error -32 req 02 val 2700 [ 138.523181][ T5820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 138.577590][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.702425][ T9] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 138.739434][ T5820] pwc: recv_control_msg error -32 req 04 val 1000 [ 138.751080][ T5820] pwc: recv_control_msg error -32 req 04 val 1300 [ 138.769478][ T5820] pwc: recv_control_msg error -32 req 04 val 1400 [ 138.811584][ T5820] pwc: recv_control_msg error -32 req 02 val 2000 [ 138.813237][ T5820] pwc: recv_control_msg error -32 req 02 val 2100 [ 138.880462][ T5960] mmap: syz.4.10 (5960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.066146][ T5820] pwc: recv_control_msg error -71 req 02 val 2500 [ 139.066715][ T5820] pwc: recv_control_msg error -71 req 02 val 2400 [ 139.067244][ T5820] pwc: recv_control_msg error -71 req 02 val 2600 [ 139.069090][ T5820] pwc: recv_control_msg error -71 req 02 val 2900 [ 139.072043][ T5820] pwc: recv_control_msg error -71 req 02 val 2800 [ 139.073397][ T5820] pwc: recv_control_msg error -71 req 04 val 1100 [ 139.100367][ T5820] pwc: recv_control_msg error -71 req 04 val 1200 [ 139.205073][ T5820] pwc: Registered as video103. [ 139.208859][ T5820] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 139.254041][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.259438][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.540575][ T5820] usb 1-1: USB disconnect, device number 2 [ 140.043919][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.044664][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 140.044756][ T9] usb 3-1: media controller created [ 140.697717][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.814745][ T5980] gfs2: error -5 reading superblock [ 143.215475][ T5986] netlink: 'syz.3.14': attribute type 2 has an invalid length. [ 143.788900][ T5986] !: entered promiscuous mode [ 145.014760][ T6000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.329038][ T9] usb 3-1: USB disconnect, device number 2 [ 145.795977][ T6004] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 146.050261][ T5895] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 146.257133][ T5895] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.257160][ T5895] usb 5-1: config 0 has no interface number 0 [ 146.257202][ T5895] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 146.257225][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.315246][ T5895] usb 5-1: config 0 descriptor?? [ 146.363333][ T5895] usb 5-1: selecting invalid altsetting 1 [ 146.364373][ T5895] dvb_ttusb_budget: ttusb_init_controller: error [ 146.364387][ T5895] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 146.471603][ T6008] Zero length message leads to an empty skb [ 146.743397][ T5895] DVB: Unable to find symbol cx22700_attach() [ 146.838367][ T5895] DVB: Unable to find symbol tda10046_attach() [ 146.838384][ T5895] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 146.873124][ T5895] usb 5-1: USB disconnect, device number 2 [ 147.650154][ T5820] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.830226][ T5820] usb 5-1: Using ep0 maxpacket: 32 [ 147.851373][ T5820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.851402][ T5820] usb 5-1: config 0 has no interfaces? [ 147.857386][ T5820] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 147.857422][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.857443][ T5820] usb 5-1: Product: syz [ 147.857459][ T5820] usb 5-1: Manufacturer: syz [ 147.857475][ T5820] usb 5-1: SerialNumber: syz [ 147.923909][ T5820] usb 5-1: config 0 descriptor?? [ 149.390193][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.545883][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.545949][ T5895] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.545976][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.594373][ T5895] usb 4-1: config 0 descriptor?? [ 149.614075][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 149.775390][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 149.901626][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 149.905866][ T6051] erspan1: entered allmulticast mode [ 150.048236][ T5895] pwc: recv_control_msg error -32 req 02 val 2b00 [ 150.062896][ T5895] pwc: recv_control_msg error -32 req 02 val 2700 [ 150.082682][ T5895] pwc: recv_control_msg error -32 req 02 val 2c00 [ 150.085030][ T5895] pwc: recv_control_msg error -32 req 04 val 1000 [ 150.122079][ T5895] pwc: recv_control_msg error -32 req 04 val 1300 [ 150.129519][ T5895] pwc: recv_control_msg error -32 req 04 val 1400 [ 150.160409][ T5895] pwc: recv_control_msg error -32 req 02 val 2000 [ 150.161465][ T5895] pwc: recv_control_msg error -32 req 02 val 2100 [ 150.366660][ T5895] pwc: recv_control_msg error -71 req 02 val 2500 [ 150.367948][ T5895] pwc: recv_control_msg error -71 req 02 val 2400 [ 150.368524][ T5895] pwc: recv_control_msg error -71 req 02 val 2600 [ 150.369531][ T5895] pwc: recv_control_msg error -71 req 02 val 2900 [ 150.373340][ T5895] pwc: recv_control_msg error -71 req 02 val 2800 [ 150.417579][ T5895] pwc: recv_control_msg error -71 req 04 val 1100 [ 150.418119][ T5895] pwc: recv_control_msg error -71 req 04 val 1200 [ 150.442486][ T5895] pwc: Registered as video103. [ 150.457548][ T5895] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 150.477268][ T5895] usb 4-1: USB disconnect, device number 2 [ 150.605254][ T994] usb 5-1: USB disconnect, device number 3 [ 151.217098][ T6057] loop2: detected capacity change from 0 to 7 [ 151.259198][ T6057] Dev loop2: unable to read RDB block 7 [ 151.259248][ T6057] loop2: unable to read partition table [ 151.259480][ T6057] loop2: partition table beyond EOD, truncated [ 151.259533][ T6057] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.865815][ T6075] fuse: Bad value for 'fd' [ 152.274670][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 152.356018][ T6083] erspan1: entered allmulticast mode [ 152.790190][ T5895] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.980108][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 152.982957][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.983002][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.983024][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.983042][ T5895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 152.983060][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.985295][ T5895] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.985327][ T5895] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.985350][ T5895] usb 3-1: Manufacturer: syz [ 153.058890][ T5895] usb 3-1: config 0 descriptor?? [ 153.810201][ T5895] rc_core: IR keymap rc-hauppauge not found [ 153.810226][ T5895] Registered IR keymap rc-empty [ 153.810391][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.840265][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.871505][ T5895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 153.873730][ T5895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 153.929018][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.940314][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.960717][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.980927][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.000177][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.020289][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.050514][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.070256][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.090251][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.110803][ T5895] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.156525][ T5895] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 154.156554][ T5895] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.215562][ T5895] usb 3-1: USB disconnect, device number 3 [ 154.920401][ T5895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.119931][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 155.122702][ T5895] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.122722][ T5895] usb 1-1: config 0 has no interface number 0 [ 155.132402][ T5895] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 155.132434][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.132455][ T5895] usb 1-1: Product: syz [ 155.132470][ T5895] usb 1-1: Manufacturer: syz [ 155.132484][ T5895] usb 1-1: SerialNumber: syz [ 155.226843][ T5895] usb 1-1: config 0 descriptor?? [ 155.245729][ T5895] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 155.245763][ T5895] usb 1-1: selecting invalid altsetting 1 [ 155.245775][ T5895] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 155.292476][ T5895] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.292957][ T5895] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 155.293009][ T5895] usb 1-1: media controller created [ 155.354080][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.486921][ T5895] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 155.486980][ T5895] zl10353_read_register: readreg error (reg=127, ret==-71) [ 155.515201][ T5895] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 155.655199][ T5895] usb 1-1: USB disconnect, device number 3 [ 156.840159][ T6124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.680105][ T5895] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.820538][ T5985] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 157.840326][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 157.845741][ T5895] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 157.849117][ T5895] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 157.849141][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.849157][ T5895] usb 4-1: Product: syz [ 157.849168][ T5895] usb 4-1: Manufacturer: syz [ 157.849180][ T5895] usb 4-1: SerialNumber: syz [ 157.983485][ T5895] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 157.983792][ T5895] imon 4-1:155.0: unable to initialize intf0, err -19 [ 157.983811][ T5895] imon:imon_probe: failed to initialize context! [ 157.983824][ T5895] imon 4-1:155.0: unable to register, err -19 [ 158.027574][ T5985] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.027597][ T5985] usb 1-1: config 0 has no interface number 0 [ 158.027637][ T5985] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 158.027655][ T5985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.068996][ T5985] usb 1-1: config 0 descriptor?? [ 158.082312][ T5985] usb 1-1: selecting invalid altsetting 1 [ 158.082478][ T5985] dvb_ttusb_budget: ttusb_init_controller: error [ 158.082502][ T5985] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 158.414478][ T5879] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 158.458869][ T5985] DVB: Unable to find symbol cx22700_attach() [ 158.568505][ T5879] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 158.568542][ T5879] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 158.568573][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.594913][ T5879] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.595001][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.595076][ T5879] usb 3-1: Product: syz [ 158.595121][ T5879] usb 3-1: Manufacturer: syz [ 158.595165][ T5879] usb 3-1: SerialNumber: syz [ 158.713784][ T5985] DVB: Unable to find symbol tda10046_attach() [ 158.713803][ T5985] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 158.716531][ T5879] usb 3-1: config 0 descriptor?? [ 158.769680][ T5985] usb 1-1: USB disconnect, device number 4 [ 158.949304][ T5879] usb 3-1: selecting invalid altsetting 0 [ 159.540173][ T37] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.750134][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 159.775432][ T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.775500][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.775533][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 159.775568][ T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 159.775601][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.778862][ T37] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 159.778895][ T37] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 159.778917][ T37] usb 1-1: Manufacturer: syz [ 159.934380][ T37] usb 1-1: config 0 descriptor?? [ 160.590235][ T37] rc_core: IR keymap rc-hauppauge not found [ 160.590259][ T37] Registered IR keymap rc-empty [ 160.590434][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.610654][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.690945][ T37] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 160.769580][ T32] usb 4-1: USB disconnect, device number 3 [ 160.822386][ T37] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 160.923704][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.950353][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.973160][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.000217][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.020830][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.040631][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.061762][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.090183][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.121393][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.146761][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.242652][ T37] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 161.242680][ T37] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 161.328751][ T37] usb 1-1: USB disconnect, device number 5 [ 163.019878][ T6173] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 163.623523][ T32] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 163.715835][ T37] usb 3-1: USB disconnect, device number 4 [ 163.794389][ T32] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.794424][ T32] usb 5-1: config 0 has no interface number 0 [ 163.794484][ T32] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 163.794512][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.888139][ T6184] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 163.888171][ T6184] PKCS7: Only support pkcs7_signedData type [ 163.951283][ T32] usb 5-1: config 0 descriptor?? [ 163.981527][ T32] usb 5-1: selecting invalid altsetting 1 [ 163.981642][ T32] dvb_ttusb_budget: ttusb_init_controller: error [ 163.981652][ T32] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 164.657758][ T32] DVB: Unable to find symbol cx22700_attach() [ 164.985706][ T32] DVB: Unable to find symbol tda10046_attach() [ 164.985719][ T32] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 165.006686][ T32] usb 5-1: USB disconnect, device number 4 [ 165.656354][ T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.822781][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 165.850354][ T32] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 165.853505][ T32] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 165.853540][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.853561][ T32] usb 5-1: Product: syz [ 165.853576][ T32] usb 5-1: Manufacturer: syz [ 165.853591][ T32] usb 5-1: SerialNumber: syz [ 165.962677][ T32] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 165.962782][ T32] imon 5-1:155.0: unable to initialize intf0, err -19 [ 165.962799][ T32] imon:imon_probe: failed to initialize context! [ 165.962812][ T32] imon 5-1:155.0: unable to register, err -19 [ 166.091887][ T994] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 166.454310][ T994] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.454344][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.454365][ T994] usb 1-1: Product: syz [ 166.454380][ T994] usb 1-1: Manufacturer: syz [ 166.454395][ T994] usb 1-1: SerialNumber: syz [ 166.552698][ T6215] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.85'. [ 166.764648][ T994] usb 1-1: config 0 descriptor?? [ 166.959530][ T6220] gfs2: error -5 reading superblock [ 167.660200][ T994] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.275236][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.87'. [ 168.397474][ T994] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 168.421347][ T6224] erspan1: entered allmulticast mode [ 168.457125][ T994] usb 1-1: USB disconnect, device number 6 [ 168.984786][ T994] usb 5-1: USB disconnect, device number 5 [ 169.080519][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 169.234918][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.234949][ T9] usb 4-1: config 0 has no interface number 0 [ 169.234998][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 169.235022][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.289785][ T9] usb 4-1: config 0 descriptor?? [ 169.345516][ T9] usb 4-1: selecting invalid altsetting 1 [ 169.345691][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 169.345707][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 169.646563][ T6234] wireguard0: entered promiscuous mode [ 169.646586][ T6234] wireguard0: entered allmulticast mode [ 169.716089][ T6243] netlink: 'syz.0.93': attribute type 2 has an invalid length. [ 169.730279][ T9] DVB: Unable to find symbol cx22700_attach() [ 169.785220][ T6246] netlink: 'syz.0.93': attribute type 2 has an invalid length. [ 169.950366][ T6243] !: entered promiscuous mode [ 170.157203][ T6246] !: left promiscuous mode [ 170.331149][ T9] DVB: Unable to find symbol tda10046_attach() [ 170.331166][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 170.336744][ T9] usb 4-1: USB disconnect, device number 4 [ 171.320144][ T5985] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.490138][ T5985] usb 2-1: Using ep0 maxpacket: 32 [ 171.496288][ T5985] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.496320][ T5985] usb 2-1: config 0 has no interface number 0 [ 171.524714][ T5985] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 171.524746][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.524767][ T5985] usb 2-1: Product: syz [ 171.524783][ T5985] usb 2-1: Manufacturer: syz [ 171.524798][ T5985] usb 2-1: SerialNumber: syz [ 171.597868][ T5985] usb 2-1: config 0 descriptor?? [ 171.674679][ T5985] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 171.674708][ T5985] usb 2-1: selecting invalid altsetting 1 [ 171.674719][ T5985] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 171.752788][ T5985] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.753060][ T5985] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 171.756367][ T5985] usb 2-1: media controller created [ 171.883225][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.293071][ T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 172.450316][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 172.454963][ T32] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 172.455021][ T32] usb 4-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 172.509481][ T32] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 172.511134][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.511163][ T32] usb 4-1: Product: syz [ 172.511180][ T32] usb 4-1: Manufacturer: syz [ 172.511196][ T32] usb 4-1: SerialNumber: syz [ 172.650344][ T32] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 172.650751][ T32] imon 4-1:155.0: unable to initialize intf0, err -19 [ 172.650835][ T32] imon:imon_probe: failed to initialize context! [ 172.650851][ T32] imon 4-1:155.0: unable to register, err -19 [ 172.660132][ T5895] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 172.814525][ T5895] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.814555][ T5895] usb 1-1: config 0 has no interface number 0 [ 172.814605][ T5895] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 172.814733][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.886170][ T5895] usb 1-1: config 0 descriptor?? [ 172.972777][ T6260] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 173.010603][ T5895] usb 1-1: selecting invalid altsetting 1 [ 173.012436][ T5895] dvb_ttusb_budget: ttusb_init_controller: error [ 173.012455][ T5895] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 173.021245][ T5985] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 173.021382][ T5985] zl10353_read_register: readreg error (reg=127, ret==-71) [ 173.024210][ T5985] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 173.166725][ T6277] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 173.322938][ T9] usb 4-1: USB disconnect, device number 5 [ 173.540855][ T5985] usb 2-1: USB disconnect, device number 3 [ 173.759541][ T5895] DVB: Unable to find symbol cx22700_attach() [ 173.986984][ T5895] DVB: Unable to find symbol tda10046_attach() [ 173.987000][ T5895] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 174.018082][ T5895] usb 1-1: USB disconnect, device number 7 [ 174.114452][ T6294] netlink: 'syz.3.107': attribute type 2 has an invalid length. [ 174.119015][ T6294] netlink: 'syz.3.107': attribute type 2 has an invalid length. [ 174.119114][ T6294] !: left promiscuous mode [ 174.461477][ T6296] gfs2: error -5 reading superblock [ 176.180404][ T32] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.331360][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 176.341833][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.341890][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.341917][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.341938][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 176.341963][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.344681][ T32] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 176.344776][ T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.344829][ T32] usb 4-1: Manufacturer: syz [ 176.483972][ T32] usb 4-1: config 0 descriptor?? [ 176.932574][ T5887] IPVS: starting estimator thread 0... [ 177.063159][ T6317] IPVS: using max 8 ests per chain, 19200 per kthread [ 177.064497][ T32] rc_core: IR keymap rc-hauppauge not found [ 177.064517][ T32] Registered IR keymap rc-empty [ 177.064660][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.080451][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.106668][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 177.165497][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 177.200300][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.224886][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.240258][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.260173][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.290409][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.310250][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.330188][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.360379][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.390418][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.410397][ T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.686250][ T32] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 177.686278][ T32] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 177.747092][ T32] usb 4-1: USB disconnect, device number 6 [ 177.950194][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 178.003505][ T6328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.290888][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 178.294283][ T5879] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 178.294314][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.433576][ T5879] pvrusb2: Hardware description: Terratec Grabster AV400 [ 178.433603][ T5879] pvrusb2: ********** [ 178.433611][ T5879] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 178.433626][ T5879] pvrusb2: Important functionality might not be entirely working. [ 178.433635][ T5879] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 178.433648][ T5879] pvrusb2: ********** [ 178.798896][ T2371] pvrusb2: Invalid write control endpoint [ 179.009468][ T994] usb 2-1: USB disconnect, device number 4 [ 179.044226][ T2371] pvrusb2: Invalid write control endpoint [ 179.044239][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 179.044247][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 179.044253][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 179.044260][ T2371] pvrusb2: Device being rendered inoperable [ 179.052418][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 179.052623][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 179.065460][ T5879] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 179.358006][ T2371] pvrusb2: Attached sub-driver cx25840 [ 179.358044][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 179.358056][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 179.375938][ T5879] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.376055][ T5879] usb 4-1: config 0 has no interface number 0 [ 179.376219][ T5879] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 179.376283][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.409918][ T5879] usb 4-1: config 0 descriptor?? [ 179.513032][ T6337] gfs2: error -5 reading superblock [ 180.304306][ T5879] usb 4-1: selecting invalid altsetting 1 [ 180.304428][ T5879] dvb_ttusb_budget: ttusb_init_controller: error [ 180.304438][ T5879] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 180.760724][ T5879] DVB: Unable to find symbol cx22700_attach() [ 180.787330][ T6343] netlink: 'syz.4.121': attribute type 2 has an invalid length. [ 180.894010][ T6347] netlink: 'syz.4.121': attribute type 2 has an invalid length. [ 180.895571][ T6343] !: entered promiscuous mode [ 180.970662][ T6347] !: left promiscuous mode [ 181.162554][ T5879] DVB: Unable to find symbol tda10046_attach() [ 181.162565][ T5879] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 181.214442][ T5879] usb 4-1: USB disconnect, device number 7 [ 182.586284][ T6361] ip6gre1: entered allmulticast mode [ 183.300140][ T5895] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.454005][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.454030][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.454057][ T5895] usb 1-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 183.454074][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.508877][ T5895] usb 1-1: config 0 descriptor?? [ 183.839141][ T5895] usbhid 1-1:0.0: can't add hid device: -71 [ 183.839242][ T5895] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 183.920271][ T5895] usb 1-1: USB disconnect, device number 8 [ 184.828517][ T6398] netlink: 'syz.0.138': attribute type 2 has an invalid length. [ 185.310575][ T6398] !: entered promiscuous mode [ 187.329286][ T37] IPVS: starting estimator thread 0... [ 187.430417][ T6445] IPVS: using max 11 ests per chain, 26400 per kthread [ 188.744693][ T6457] netlink: 'syz.0.159': attribute type 2 has an invalid length. [ 188.746313][ T6457] netlink: 'syz.0.159': attribute type 2 has an invalid length. [ 188.746382][ T6457] !: left promiscuous mode [ 189.139590][ T6464] loop7: detected capacity change from 0 to 16384 [ 190.100252][ T38] audit: type=1326 audit(1772186790.218:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae27c799 code=0x7ffc0000 [ 190.100298][ T38] audit: type=1326 audit(1772186790.218:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff1ae27c799 code=0x7ffc0000 [ 190.100330][ T38] audit: type=1326 audit(1772186790.218:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae27c799 code=0x7ffc0000 [ 190.100362][ T38] audit: type=1326 audit(1772186790.218:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7ff1ae27c799 code=0x7ffc0000 [ 190.100393][ T38] audit: type=1326 audit(1772186790.218:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae27c799 code=0x7ffc0000 [ 190.100424][ T38] audit: type=1326 audit(1772186790.218:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae27c799 code=0x7ffc0000 [ 190.253694][ T6476] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 190.253714][ T6476] PKCS7: Only support pkcs7_signedData type [ 191.640256][ T5895] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 191.871877][ T5895] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 191.871923][ T5895] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 191.873040][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.920860][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 191.920895][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 191.920917][ T5895] usb 2-1: Product: syz [ 191.920932][ T5895] usb 2-1: Manufacturer: syz [ 191.920948][ T5895] usb 2-1: SerialNumber: syz [ 192.041234][ T5895] usb 2-1: config 0 descriptor?? [ 192.138440][ T5895] usb 2-1: selecting invalid altsetting 0 [ 193.402328][ T6500] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 193.402349][ T6500] PKCS7: Only support pkcs7_signedData type [ 194.098387][ T38] audit: type=1326 audit(1772186794.548:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9e0c799 code=0x7ffc0000 [ 194.098445][ T38] audit: type=1326 audit(1772186794.548:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa5a9e0c799 code=0x7ffc0000 [ 194.098491][ T38] audit: type=1326 audit(1772186794.548:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9e0c799 code=0x7ffc0000 [ 194.098537][ T38] audit: type=1326 audit(1772186794.548:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa5a9e0c799 code=0x7ffc0000 [ 196.109005][ T5887] usb 2-1: USB disconnect, device number 5 [ 196.534372][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 196.623289][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 196.641351][ T6538] erspan1: entered allmulticast mode [ 197.250103][ T37] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.400204][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 197.411812][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.411869][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.411897][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.411919][ T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.411943][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.413244][ T37] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.413271][ T37] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.413291][ T37] usb 2-1: Manufacturer: syz [ 197.517811][ T37] usb 2-1: config 0 descriptor?? [ 197.918105][ T6562] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 197.970133][ T37] rc_core: IR keymap rc-hauppauge not found [ 197.970235][ T37] Registered IR keymap rc-empty [ 197.970396][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.990171][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.012132][ T37] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 198.015820][ T37] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 198.066048][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.080347][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.100783][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.120171][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.140805][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.160153][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.180171][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.200163][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.220364][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.240232][ T37] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.277346][ T37] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 198.277603][ T37] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 198.327211][ T37] usb 2-1: USB disconnect, device number 6 [ 199.364386][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 199.491530][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 199.809934][ T6585] erspan1: entered allmulticast mode [ 199.863077][ T5820] IPVS: starting estimator thread 0... [ 199.950297][ T6593] IPVS: using max 7 ests per chain, 16800 per kthread [ 200.042532][ T5895] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 200.048620][ T6596] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.207'. [ 200.229227][ T5895] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.229256][ T5895] usb 3-1: config 0 has no interface number 0 [ 200.229305][ T5895] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 200.229328][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.298602][ T5895] usb 3-1: config 0 descriptor?? [ 200.308643][ T5895] usb 3-1: selecting invalid altsetting 1 [ 200.308758][ T5895] dvb_ttusb_budget: ttusb_init_controller: error [ 200.308767][ T5895] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 200.582960][ T5895] DVB: Unable to find symbol cx22700_attach() [ 200.662892][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.662968][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.749685][ T5895] DVB: Unable to find symbol tda10046_attach() [ 200.749696][ T5895] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 200.764392][ T5879] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.804263][ T5895] usb 3-1: USB disconnect, device number 5 [ 200.910081][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 200.925513][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.925571][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.925600][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.925623][ T5879] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 200.925647][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.927299][ T5879] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.927326][ T5879] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.927347][ T5879] usb 4-1: Manufacturer: syz [ 201.025642][ T5879] usb 4-1: config 0 descriptor?? [ 201.150155][ T5934] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 201.328851][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 201.350314][ T5934] usb 2-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 201.350375][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.350414][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.350437][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 201.350460][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.351868][ T5934] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.351894][ T5934] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.351914][ T5934] usb 2-1: Manufacturer: syz [ 201.402110][ T5934] usb 2-1: config 0 descriptor?? [ 201.519404][ T6621] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 201.519423][ T6621] PKCS7: Only support pkcs7_signedData type [ 201.610262][ T5879] rc_core: IR keymap rc-hauppauge not found [ 201.610284][ T5879] Registered IR keymap rc-empty [ 201.610679][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.639903][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.664853][ T5879] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 201.668332][ T5879] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 201.696597][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.711991][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.730189][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.750315][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.776472][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.792871][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.810179][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.830288][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.860375][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.916555][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.985969][ T5879] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 201.985990][ T5879] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.081155][ T5879] usb 4-1: USB disconnect, device number 8 [ 202.210192][ T5934] rc_core: IR keymap rc-hauppauge not found [ 202.210212][ T5934] Registered IR keymap rc-empty [ 202.210369][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.230923][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.257383][ T5934] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 202.296083][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input13 [ 202.327105][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.343786][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.360552][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.380407][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.400359][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.420394][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.440219][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.460309][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.480329][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.500262][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.534590][ T5934] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 202.534839][ T5934] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.740268][ T5934] usb 2-1: USB disconnect, device number 7 [ 203.705542][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 203.732166][ T6644] erspan1: entered allmulticast mode [ 203.774202][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 204.961363][ T5887] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 205.115892][ T5887] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.115920][ T5887] usb 4-1: config 0 has no interface number 0 [ 205.115970][ T5887] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 205.115995][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.173209][ T5887] usb 4-1: config 0 descriptor?? [ 205.218325][ T5887] usb 4-1: selecting invalid altsetting 1 [ 205.218504][ T5887] dvb_ttusb_budget: ttusb_init_controller: error [ 205.218518][ T5887] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 205.464428][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 205.542588][ T5887] DVB: Unable to find symbol cx22700_attach() [ 205.572678][ T6671] netlink: 'syz.1.229': attribute type 2 has an invalid length. [ 205.624721][ T6665] bond1: entered promiscuous mode [ 205.624753][ T6665] bond1: entered allmulticast mode [ 205.625564][ T6665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.686324][ T6671] !: entered promiscuous mode [ 205.699854][ T5887] DVB: Unable to find symbol tda10046_attach() [ 205.699870][ T5887] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 205.741062][ T5887] usb 4-1: USB disconnect, device number 9 [ 210.931549][ T6729] fuse: Bad value for 'fd' [ 212.135314][ T6742] netlink: 'syz.4.251': attribute type 2 has an invalid length. [ 212.954285][ T6770] fuse: Bad value for 'fd' [ 214.979314][ T6790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.294059][ T5879] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.804872][ T5879] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 215.809725][ T5879] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 215.809756][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.809776][ T5879] usb 2-1: Product: syz [ 215.809791][ T5879] usb 2-1: Manufacturer: syz [ 215.809805][ T5879] usb 2-1: SerialNumber: syz [ 215.942480][ T5879] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 216.062835][ T6796] kAFS: unable to lookup cell 'ÿ' [ 216.485292][ T5879] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.485617][ T5879] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 216.485686][ T5879] usb 2-1: media controller created [ 216.801692][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.000199][ T5887] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 217.150301][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 217.156262][ T5887] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 217.156284][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.225997][ T5887] pvrusb2: Hardware description: Terratec Grabster AV400 [ 217.226017][ T5887] pvrusb2: ********** [ 217.226024][ T5887] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 217.226078][ T5887] pvrusb2: Important functionality might not be entirely working. [ 217.226087][ T5887] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 217.226099][ T5887] pvrusb2: ********** [ 217.422187][ T6801] ------------[ cut here ]------------ [ 217.422214][ T6801] usb 2-1: BOGUS control dir, pipe 80000880 doesn't match bRequestType c0 [ 217.422234][ T6801] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.3.267/6801 [ 217.422272][ T6801] Modules linked in: [ 217.422308][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.3.267 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.422326][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.422338][ T6801] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 217.422359][ T6801] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 217.422372][ T6801] RSP: 0018:ffffc9000ea378c8 EFLAGS: 00010246 [ 217.422386][ T6801] RAX: 0000000000000000 RBX: ffff888021338900 RCX: 0000000080000880 [ 217.422398][ T6801] RDX: ffff888020ac4ce0 RSI: ffffffff8bedaee0 RDI: ffffffff8f7649a0 [ 217.422410][ T6801] RBP: 1ffff110043502e4 R08: 00000000000000c0 R09: 0000000000000000 [ 217.422420][ T6801] R10: ffffc9000ea379c0 R11: fffff52001d46f44 R12: ffff88806337a100 [ 217.422432][ T6801] R13: ffff888021a81720 R14: 0000000080000880 R15: ffff888020ac4ce0 [ 217.422470][ T6801] FS: 00007f9aab06e6c0(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 217.422489][ T6801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.422504][ T6801] CR2: 0000001b3001fff8 CR3: 00000000320fa000 CR4: 00000000003526f0 [ 217.422524][ T6801] Call Trace: [ 217.422538][ T6801] [ 217.422560][ T6801] ? __init_swait_queue_head+0xa9/0x150 [ 217.422590][ T6801] usb_start_wait_urb+0x12b/0x510 [ 217.422617][ T6801] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 217.422653][ T6801] usb_control_msg+0x232/0x3e0 [ 217.422678][ T6801] gl861_ctrl_msg+0x207/0x420 [ 217.422711][ T6801] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 217.422746][ T6801] gl861_i2c_master_xfer+0x439/0x6a0 [ 217.422777][ T6801] __i2c_transfer+0x79a/0x2020 [ 217.422797][ T6801] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.422821][ T6801] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.422844][ T6801] ? i2c_transfer+0xc8/0x2d0 [ 217.422864][ T6801] i2c_transfer+0x1cc/0x2d0 [ 217.422885][ T6801] i2cdev_ioctl_rdwr+0x460/0x740 [ 217.422912][ T6801] i2cdev_ioctl+0x6a8/0x890 [ 217.422930][ T6801] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 217.422950][ T6801] ? __fget_files+0x3a6/0x420 [ 217.422969][ T6801] ? __fget_files+0x2a/0x420 [ 217.422990][ T6801] ? bpf_lsm_file_ioctl+0x9/0x20 [ 217.423016][ T6801] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 217.423037][ T6801] __se_sys_ioctl+0xff/0x170 [ 217.423065][ T6801] do_syscall_64+0x14d/0xf80 [ 217.423086][ T6801] ? trace_irq_disable+0x3b/0x150 [ 217.423105][ T6801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.423121][ T6801] ? clear_bhb_loop+0x40/0x90 [ 217.423141][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.423157][ T6801] RIP: 0033:0x7f9aace1c799 [ 217.423176][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.423188][ T6801] RSP: 002b:00007f9aab06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.423204][ T6801] RAX: ffffffffffffffda RBX: 00007f9aad095fa0 RCX: 00007f9aace1c799 [ 217.423215][ T6801] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 217.423226][ T6801] RBP: 00007f9aaceb2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 217.423235][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.423245][ T6801] R13: 00007f9aad096038 R14: 00007f9aad095fa0 R15: 00007ffd9d908e88 [ 217.423269][ T6801] [ 217.423281][ T6801] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.423298][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.3.267 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.423316][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.423325][ T6801] Call Trace: [ 217.423331][ T6801] [ 217.423337][ T6801] vpanic+0x56c/0xa60 [ 217.423388][ T6801] ? __pfx__printk+0x10/0x10 [ 217.423412][ T6801] ? __pfx_vpanic+0x10/0x10 [ 217.423443][ T6801] ? is_bpf_text_address+0x292/0x2b0 [ 217.423477][ T6801] ? is_bpf_text_address+0x26/0x2b0 [ 217.423506][ T6801] panic+0xc5/0xd0 [ 217.423529][ T6801] ? __pfx_panic+0x10/0x10 [ 217.423566][ T6801] __warn+0x315/0x4f0 [ 217.423589][ T6801] ? usb_submit_urb+0x1052/0x18b0 [ 217.423609][ T6801] ? usb_submit_urb+0x1052/0x18b0 [ 217.423629][ T6801] __report_bug+0x29a/0x540 [ 217.423649][ T6801] ? unwind_get_return_address+0x4d/0x90 [ 217.423672][ T6801] ? usb_submit_urb+0x1052/0x18b0 [ 217.423691][ T6801] ? __pfx___report_bug+0x10/0x10 [ 217.423715][ T6801] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.423737][ T6801] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.423759][ T6801] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.423780][ T6801] ? stack_depot_save_flags+0x3f3/0x810 [ 217.423813][ T6801] report_bug_entry+0x19a/0x290 [ 217.423834][ T6801] ? usb_submit_urb+0x1114/0x18b0 [ 217.423851][ T6801] ? usb_submit_urb+0x1119/0x18b0 [ 217.423869][ T6801] handle_bug+0xca/0x200 [ 217.423894][ T6801] exc_invalid_op+0x1a/0x50 [ 217.423918][ T6801] asm_exc_invalid_op+0x1a/0x20 [ 217.423933][ T6801] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 217.423952][ T6801] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 217.423964][ T6801] RSP: 0018:ffffc9000ea378c8 EFLAGS: 00010246 [ 217.423978][ T6801] RAX: 0000000000000000 RBX: ffff888021338900 RCX: 0000000080000880 [ 217.423988][ T6801] RDX: ffff888020ac4ce0 RSI: ffffffff8bedaee0 RDI: ffffffff8f7649a0 [ 217.424000][ T6801] RBP: 1ffff110043502e4 R08: 00000000000000c0 R09: 0000000000000000 [ 217.424010][ T6801] R10: ffffc9000ea379c0 R11: fffff52001d46f44 R12: ffff88806337a100 [ 217.424021][ T6801] R13: ffff888021a81720 R14: 0000000080000880 R15: ffff888020ac4ce0 [ 217.424045][ T6801] ? usb_submit_urb+0x10a3/0x18b0 [ 217.424069][ T6801] ? __init_swait_queue_head+0xa9/0x150 [ 217.424095][ T6801] usb_start_wait_urb+0x12b/0x510 [ 217.424120][ T6801] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 217.424155][ T6801] usb_control_msg+0x232/0x3e0 [ 217.424180][ T6801] gl861_ctrl_msg+0x207/0x420 [ 217.424211][ T6801] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 217.424246][ T6801] gl861_i2c_master_xfer+0x439/0x6a0 [ 217.424276][ T6801] __i2c_transfer+0x79a/0x2020 [ 217.424301][ T6801] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.424325][ T6801] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.424348][ T6801] ? i2c_transfer+0xc8/0x2d0 [ 217.424368][ T6801] i2c_transfer+0x1cc/0x2d0 [ 217.424389][ T6801] i2cdev_ioctl_rdwr+0x460/0x740 [ 217.424416][ T6801] i2cdev_ioctl+0x6a8/0x890 [ 217.424434][ T6801] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 217.424456][ T6801] ? __fget_files+0x3a6/0x420 [ 217.424475][ T6801] ? __fget_files+0x2a/0x420 [ 217.424496][ T6801] ? bpf_lsm_file_ioctl+0x9/0x20 [ 217.424521][ T6801] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 217.424539][ T6801] __se_sys_ioctl+0xff/0x170 [ 217.424568][ T6801] do_syscall_64+0x14d/0xf80 [ 217.424589][ T6801] ? trace_irq_disable+0x3b/0x150 [ 217.424607][ T6801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.424623][ T6801] ? clear_bhb_loop+0x40/0x90 [ 217.424643][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.424659][ T6801] RIP: 0033:0x7f9aace1c799 [ 217.424672][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.424685][ T6801] RSP: 002b:00007f9aab06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.424700][ T6801] RAX: ffffffffffffffda RBX: 00007f9aad095fa0 RCX: 00007f9aace1c799 [ 217.424711][ T6801] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 217.424721][ T6801] RBP: 00007f9aaceb2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 217.424731][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.424740][ T6801] R13: 00007f9aad096038 R14: 00007f9aad095fa0 R15: 00007ffd9d908e88 [ 217.424765][ T6801] [ 217.425385][ T6801] Kernel Offset: disabled