last executing test programs: 30m57.984612592s ago: executing program 3 (id=80): r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 30m57.3212732s ago: executing program 3 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000004020900010073797a3000000000090002007379"], 0x74}}, 0x0) 30m57.167162354s ago: executing program 3 (id=83): syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x2, [{0x0, 0xb, "5e000000ff00000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) 30m57.072201477s ago: executing program 3 (id=84): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@nombcache}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@mblk_io_submit}, {}, {@nojournal_checksum}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf4, 0x572, &(0x7f0000003780)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f0000000240)}], 0x1, 0xfff, 0xc, 0x4) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r7, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/4083, 0xff3}, {&(0x7f0000000080)=""/122, 0x7a}], 0x3}, 0x1081}], 0x1, 0x40000040, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x8144e1, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=']) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020) fchmod(r2, 0x21) 30m54.828518988s ago: executing program 3 (id=88): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 30m54.436791539s ago: executing program 3 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000004020900010073797a3000000000090002007379"], 0x74}}, 0x0) 30m38.771307396s ago: executing program 32 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000004020900010073797a3000000000090002007379"], 0x74}}, 0x0) 21m10.634533842s ago: executing program 1 (id=2668): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x5, 0x5, 0x9206, 0x5}, 0x3, 0x4}, [{0xe, 0x7, 0x3, 0x8, 0x3, 0x4df}, {0x8, 0x8, 0x40, 0x8, 0x5, 0x1}, {0x7e12f9c5, 0xffffff61, 0x0, 0x6b5, 0x80000000, 0x101}, {0x9, 0xb1f, 0x3, 0x1, 0x1, 0x2}, {0xfffffe01, 0x5, 0xb91, 0x8, 0x6, 0x4}, {0x1, 0x0, 0x0, 0xe49, 0x4, 0x15}, {0x1, 0xa, 0xc79, 0x5, 0x401, 0xfffffff4}, {0x7, 0x8c0, 0x5, 0xffffffff, 0x2, 0x10001}, {0xfffffffa, 0x1, 0x7, 0xffffffff, 0x1, 0xffffffff}, {0x1, 0x100, 0x0, 0x80000000, 0x7f6b, 0x1}, {0x154, 0x8, 0xb, 0x2, 0x7fffffff, 0xb3e4}, {0x36, 0x7, 0xffff, 0xfffffff7, 0x10, 0xf7bb}, {0x8, 0x7, 0x401, 0x1, 0x400, 0x8565}, {0x5, 0x4, 0x80000000, 0xc50, 0x7, 0xfffffffd}, {0x4, 0x101, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x800, 0xe, 0x1, 0x7ff, 0xe}, {0x1, 0x9, 0x7, 0x3, 0xfffffff9, 0x4}, {0x1, 0x200, 0x975f, 0x2, 0x400, 0x3dc4}, {0x100, 0x200, 0x98, 0xf9d6, 0xb}, {0x1, 0x83, 0xf9, 0x5, 0x3}, {0x8000, 0x7, 0x1, 0x9, 0xc9d, 0x2}, {0x81, 0x7fffffff, 0x2, 0x7fff, 0x7, 0x5}, {0x80, 0x4, 0x2, 0x1, 0xf403, 0xfffffff1}, {0xffff, 0xedf, 0xc, 0x8, 0x5, 0x1}, {0x0, 0x4, 0x8000, 0xfa8, 0x6, 0x1}, {0xa7d, 0x6, 0x6, 0x80, 0x3f9, 0x9}, {0x2f, 0xdfb, 0x8, 0x4b, 0x7, 0x1}, {0x9, 0x7ff, 0xa, 0x280000, 0x2, 0x1}, {0x138, 0x51d, 0xf, 0x6, 0x4, 0x7}, {0x10001, 0x6, 0x8, 0x8, 0x4, 0xb}, {0x4, 0x2be2, 0x79f29323, 0x3ff, 0x2, 0x4}, {0xd4, 0x5, 0x5, 0x7, 0xea4c, 0xa4b1}, {0x993, 0x4, 0xfff, 0x23b06916, 0x6, 0xfffffffc}, {0x6, 0x4a6, 0x3, 0x80, 0x7ff, 0xa}, {0x7, 0xfffffffb, 0x0, 0xffffffff, 0x1, 0xfb3}, {0x5, 0xe6, 0xfff, 0x0, 0x1, 0x400}, {0xfffff1a2, 0xa, 0x7, 0xa1, 0xfffff800, 0x4}, {0xbe, 0x2000, 0xffffffff, 0xfffffc00, 0xe06, 0x6}, {0x100, 0x2, 0x8, 0x4, 0x4, 0x9497}, {0xd, 0x8001, 0xf2b, 0xffffffff, 0x3, 0xfffffff3}, {0x2, 0x80000000, 0x5a, 0x1, 0x5, 0x6}, {0x4, 0xc378, 0x8, 0xf, 0x7, 0x8144}, {0x6, 0x81, 0x5, 0x5, 0x3}, {0x9, 0x8001, 0xe10, 0x783, 0x7, 0x3}, {0x7fff, 0x1, 0xe05, 0xffffad2a, 0x4, 0x99c}, {0x99eb, 0x6, 0x5, 0x2, 0x2, 0x1fe0000}, {0x800, 0x9, 0x2a3b, 0x4, 0x7, 0x9}, {0x2, 0x6, 0x0, 0x9, 0xe, 0xe}, {0x65d, 0x8000, 0x6, 0xfffffffe, 0x400, 0x1}, {0xfffffff8, 0x7, 0x6, 0xd4, 0x1000, 0x4}, {0x0, 0xc, 0x5, 0x3, 0xb9, 0x3}, {0x5, 0xfffffffd, 0x9, 0x4, 0x4, 0x6}, {0x1, 0x0, 0x4, 0x100, 0x9, 0xa}, {0x3, 0x2, 0x10, 0x2, 0x5, 0x3}, {0xfffffff8, 0xe, 0xfd0, 0x9, 0x0, 0x7fff}, {0xb, 0x7ff, 0x7, 0xffffff81, 0x9, 0x3}, {0x4, 0xff, 0x10001, 0x0, 0x3, 0x4}, {0x8, 0x8, 0x3ff, 0xbf, 0x7, 0x10}, {0x2f, 0xfffffe00, 0xc6000000, 0x81, 0x6, 0xffffff01}, {0x5, 0x44bd, 0x3, 0x8, 0x0, 0xffffffff}, {0x800000, 0xd, 0x4737, 0xf0000, 0x8405, 0x3}, {0xa4, 0x7, 0x7, 0x7, 0x6, 0xda73}, {0x9, 0x0, 0x7, 0x8971, 0x8, 0x8}, {0x8, 0x1, 0x6, 0x68, 0x7fff, 0x4}, {0x1, 0xf9c3, 0x5, 0x9, 0x0, 0x6c}, {0x5, 0x6, 0x5, 0x1, 0xf, 0x9}, {0x1, 0xf580, 0x3ff, 0x6, 0x6e, 0x6}, {0xad, 0x9, 0x7fff, 0x6, 0x8}, {0x862, 0x0, 0x2800000, 0x2, 0x8, 0x8}, {0x4, 0x90000, 0x2, 0x8d1, 0x1, 0x4}, {0x200, 0xb, 0x40, 0x9, 0xfffffff9, 0x2}, {0x8, 0xdbb, 0x4, 0x3, 0x7, 0xfff}, {0x7, 0x4, 0xce, 0x9, 0x6, 0x4}, {0x5ae2, 0x8, 0x8, 0x8, 0xfffffff0, 0x3ff}, {0x1, 0x5, 0x8, 0x7ff, 0x101, 0xffffffff}, {0x12, 0xa7, 0x6, 0x0, 0xc6, 0x4}, {0x4, 0x9, 0x9, 0xa, 0x9}, {0x84d5, 0xfffffffe, 0x7fffffff, 0x5, 0xf}, {0x5, 0x40, 0x8, 0xa, 0x6, 0x2}, {0x4, 0x100, 0x4d90, 0xf, 0xffffffd7, 0xffffffff}, {0x3, 0x10001, 0x2, 0x8, 0x82dc, 0xffff}, {0x6, 0x1, 0x2, 0xfffff402, 0x2}, {0x4, 0x6, 0xca6, 0x6, 0xb, 0xa}, {0xa, 0x4, 0x9, 0x8ec1, 0x1, 0x10000}, {0x2, 0x2, 0x1ff, 0x171a9022, 0xf4, 0x9000000}, {0x313, 0xfffffff8, 0x1, 0x0, 0x2, 0x1}, {0x5841, 0xfffffffb, 0x3, 0x4, 0x3ff, 0x9f}, {0x10f, 0xca1c, 0x5, 0x8001, 0xa, 0x4}, {0x766, 0x7, 0x7, 0x7, 0x1, 0x5}, {0x7, 0xba, 0xfffffffd, 0x8001, 0x7ffd}, {0x1, 0x23, 0x3, 0x335, 0x4, 0x5}, {0x2, 0xc, 0x9, 0x0, 0x4, 0x8000}, {0x1, 0x8, 0xb7, 0x3, 0x9, 0x4}, {0x3c, 0x4, 0x1000, 0x2, 0xfff, 0x80000001}, {0x24, 0xffff, 0xd513, 0x748, 0x6eea, 0x4}, {0x57, 0x3, 0x40, 0xb, 0x3080d7c0}, {0x5, 0x7, 0x7, 0x48, 0x9, 0x5}, {0x5, 0xf01, 0x2, 0x80001d, 0x2, 0x7}, {0x7fff, 0x66019165, 0x8, 0x6, 0x4}, {0x22, 0x0, 0x0, 0x168b, 0x9, 0x5}, {0x4, 0x9, 0x3, 0x3, 0x7fffffff, 0x3}, {0x6, 0x7, 0xfffffff5, 0x4, 0x9, 0x9}, {0x4, 0x8, 0x4, 0x8000, 0x8, 0x4}, {0x16, 0x6, 0x7, 0xc00, 0xede, 0x5}, {0x9, 0x4, 0x7fffffff, 0x5, 0x7, 0x6125d06a}, {0xfff, 0x9, 0xda1, 0x521, 0x101, 0xd}, {0xdb2b, 0x1, 0x1, 0x9, 0x5, 0x800}, {0x3, 0x200, 0xfffffffe, 0xff, 0xff, 0x2}, {0x2, 0x5, 0x7, 0x62d, 0x5, 0x3ff}, {0x600, 0x4, 0x3, 0xb42f, 0x5, 0x3}, {0x401, 0x9, 0xc44, 0x3, 0x2, 0x6ea9894}, {0x624, 0xecdb, 0x8000, 0x6, 0x1b, 0x7}, {0x9, 0x2, 0x8, 0xf71, 0xfb0, 0x5}, {0x3, 0x4, 0x5908c254, 0x45c8, 0x2, 0x4}, {0x6, 0xff, 0x20000, 0x2, 0x221, 0x30000}, {0x8, 0x59bc, 0x7, 0x4, 0x0, 0x6}, {0xfffff001, 0x80000000, 0x8, 0x4, 0x644, 0x2}, {0x7, 0x2, 0x6, 0x9, 0xe, 0x3}, {0x2, 0x5, 0x101, 0x9199, 0x694, 0x66c}, {0x4, 0x2, 0x7, 0xc2, 0x69, 0xe5}, {0x8, 0x205a52ca, 0xdc, 0x3, 0x5, 0x4}, {0x2, 0x7, 0x7, 0xf47e, 0x8, 0x8}, {0x787, 0x2, 0x9, 0x3ff, 0x7, 0x5}, {0x0, 0x80000000, 0x5, 0x100, 0x6, 0x400}, {0x7, 0x3f8, 0x4, 0x0, 0x7, 0xfffffff9}, {0x7bce, 0xfffffffc, 0xfffffff8, 0x8001, 0x5, 0xf16}, {0xe, 0x3, 0x34b1, 0xb9a, 0x81, 0x800}, {0x101, 0x7, 0x4, 0x10000, 0x68063168, 0x81}], [{0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x86f1faf2efed1208}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0xa22732b51f90c34a}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0xa77fa159ed31b0c3}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0xa845cf6605cfc9f5}, {0x1, 0x222ada2ec63376b7}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 21m10.170458065s ago: executing program 1 (id=2669): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 21m10.073290807s ago: executing program 1 (id=2670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)={@fallback=r0, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000002420000004000000", @ANYRES32=r2], 0x20) 21m9.905285122s ago: executing program 1 (id=2671): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 21m8.517681099s ago: executing program 1 (id=2672): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002140004ff000006"], 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 21m8.261220206s ago: executing program 1 (id=2673): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 20m53.014998762s ago: executing program 33 (id=2673): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 19m56.858344331s ago: executing program 4 (id=2786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) 19m55.840950189s ago: executing program 4 (id=2788): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x7, 0x9, 0x19, 0x6, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x5, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x7, 0x5, 0x4, 0x8, 0x9, 0xfc, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0xad, 0x1, 0x3ff, 0x6, 0x3ff, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0xb, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x4, 0x10001, 0x8, 0x3ff, 0x1, 0x4, 0x8f, 0x1, 0x5, 0x1ff, 0x1fd, 0x6f8, 0x7, 0x1, 0x7, 0x4788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x88, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ef, 0x6, 0x10001, 0x9e, 0x1, 0x40000005, 0x101, 0x800, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6, 0x1], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xeb, 0xffffffff, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe87, 0x1, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0xc7b8, 0x45a6c325, 0x8, 0x10000, 0xffe, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x6, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0xa22f, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x1, 0x8, 0x3, 0x9, 0x5, 0xe, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0x9, 0x40, 0x3ff, 0x6, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 19m54.586433383s ago: executing program 4 (id=2790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 19m54.263026342s ago: executing program 4 (id=2791): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0xf800) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x0, 0x1) 19m54.168327655s ago: executing program 5 (id=2794): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x67, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x181}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) 19m52.86035332s ago: executing program 5 (id=2795): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x9, 0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 19m49.390840845s ago: executing program 4 (id=2802): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) 19m47.031924259s ago: executing program 4 (id=2806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x7) brk(0x5d555ede6000) 19m45.89197427s ago: executing program 34 (id=2806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x7) brk(0x5d555ede6000) 19m41.674628035s ago: executing program 5 (id=2817): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) pread64(r1, 0x0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf251400000008001d00", @ANYRES32=r0, @ANYBLOB="080001000300000008001d00", @ANYBLOB='\b\x00', @ANYRES32=r0, @ANYBLOB="0ca24300020000000200000008001c00", @ANYRES32=0x0, @ANYBLOB="0c0006000300"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001400)={0x0, 0x2, 0x1, [0x8, 0xa, 0x8, 0xfc, 0xe], [0x9, 0x9, 0x2, 0x6d3f, 0xa596, 0x7, 0x1, 0x25eb, 0x2, 0xa, 0x5, 0xb2e, 0xfffffffffffffff8, 0x3, 0xddae, 0x7, 0x9, 0x9, 0x5d, 0xaa0, 0x6, 0x400, 0x7ff, 0xf, 0x4, 0x101, 0x8, 0x9, 0x101, 0x6, 0x3, 0x7fff, 0x1a2, 0x3, 0x4, 0x80000001, 0x401, 0x7, 0x1, 0x800, 0x20000000, 0xbbcf, 0x0, 0x40000000, 0x5, 0x8001, 0x5, 0xf2, 0x9, 0x0, 0x482, 0x7, 0x8, 0xe, 0x6, 0x3a4, 0x0, 0x2, 0x69, 0x80000000, 0x7, 0x10001, 0x5, 0x5, 0xe7, 0x3, 0x7fffffff, 0xe, 0x2, 0xd, 0x100000000, 0x5, 0x1000, 0xc7ae09b, 0xf6, 0x5, 0x0, 0x2, 0x3, 0x81, 0x3, 0x8, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x8, 0x94, 0x5, 0xf, 0x13d, 0x2000000000000000, 0x6000000, 0x7, 0x4, 0x8, 0x8, 0x749, 0x4000000000000000, 0x7ff, 0x0, 0x0, 0x3, 0x69, 0x5, 0xc3, 0x100, 0xfffffffffffffffc, 0x800000000, 0x1000, 0x209, 0xfffffffffffffffc, 0x4, 0x4, 0xd952, 0x7, 0x991, 0x8001, 0x4, 0x7e6]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) r7 = socket(0x1e, 0x1, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r8, 0x0, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@private2, @empty, 0x13, 0x1}}) 19m38.374571885s ago: executing program 5 (id=2820): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) creat(&(0x7f0000000380)='./bus\x00', 0x0) socket$packet(0x11, 0x3, 0x300) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) socket$inet6(0xa, 0x2, 0x3a) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8e18, 0x2, 0x0, 0x0, 0xa, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 19m36.080338228s ago: executing program 5 (id=2824): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x9, 0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 19m30.086122841s ago: executing program 5 (id=2833): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19m28.712803048s ago: executing program 35 (id=2833): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 5.605189932s ago: executing program 7 (id=6707): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r1, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, &(0x7f0000000300)=""/131, 0x83) syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000640)={@null, 0x7, 'geneve1\x00'}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000801, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000043401"], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb000009"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x9, {{0x2, 0x4e22, @local}}, 0x0, 0x38}, 0x90) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000000)={0xf, 0x2d, 0x0, 0x3a, 0x2, 0x2c}, 0x48) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f00000003c0)) 5.485734035s ago: executing program 6 (id=6709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000b00)=""/225, 0xe1}, {0x0}], 0x3}, 0x2123) 5.28430559s ago: executing program 6 (id=6712): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYBLOB="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"], 0x14) 3.278046827s ago: executing program 6 (id=6714): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) unshare(0x400) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) 3.118649852s ago: executing program 7 (id=6715): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e7", 0x2b, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 2.749612042s ago: executing program 2 (id=6716): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet6(0xa, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.504792529s ago: executing program 7 (id=6717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}]}) 2.406680802s ago: executing program 2 (id=6718): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\n'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2.355245533s ago: executing program 0 (id=6719): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x1, 0xe, 0x0, &(0x7f0000000600)) 2.298068295s ago: executing program 6 (id=6720): syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x0, [{@multicast2, 0x7ffe}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) 2.247138706s ago: executing program 2 (id=6721): socket$inet(0x2b, 0x801, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e25, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x111201, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40c4) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) 2.186587698s ago: executing program 0 (id=6722): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYBLOB="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"], 0x14) 2.177100658s ago: executing program 7 (id=6723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) 2.160376929s ago: executing program 6 (id=6724): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.834152498s ago: executing program 0 (id=6725): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088030000c800c"], 0x5c}, 0x1, 0x0, 0x0, 0x40000044}, 0x404c884) 1.088179379s ago: executing program 7 (id=6726): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) getpid() sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 892.951754ms ago: executing program 2 (id=6727): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet6(0xa, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 864.882965ms ago: executing program 6 (id=6728): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) unshare(0x400) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) 843.139786ms ago: executing program 0 (id=6729): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nM'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 215.241184ms ago: executing program 0 (id=6730): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x1, 0xe, 0x0, &(0x7f0000000600)) 170.681865ms ago: executing program 2 (id=6731): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 117.390007ms ago: executing program 0 (id=6732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x47a0}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) 85.369147ms ago: executing program 2 (id=6733): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYBLOB="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"], 0x14) 0s ago: executing program 7 (id=6734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x2000000}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 1268.497065][T20886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1268.507759][T20886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1268.519502][T20886] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1268.527188][T20886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1268.644549][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.694630][T14288] usb 8-1: USB disconnect, device number 83 [ 1268.847893][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.027335][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.198549][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.479980][T20883] lo speed is unknown, defaulting to 1000 [ 1270.209093][T20883] chnl_net:caif_netlink_parms(): no params data found [ 1270.599586][T13077] Bluetooth: hci2: command tx timeout [ 1270.742339][T20883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.752205][T20883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.765800][T20883] bridge_slave_0: entered allmulticast mode [ 1270.783060][T20883] bridge_slave_0: entered promiscuous mode [ 1270.828559][T20883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.843301][T20883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.860737][T20883] bridge_slave_1: entered allmulticast mode [ 1270.875894][T20883] bridge_slave_1: entered promiscuous mode [ 1271.008479][T20883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.035554][T20883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.051180][ T12] IPVS: stopping backup sync thread 16789 ... [ 1271.072234][ T12] IPVS: stopping backup sync thread 16788 ... [ 1271.089074][ T12] IPVS: stopping backup sync thread 16787 ... [ 1271.099843][ T12] IPVS: stopping backup sync thread 16786 ... [ 1271.155995][T20883] team0: Port device team_slave_0 added [ 1271.180988][T20883] team0: Port device team_slave_1 added [ 1271.396326][T20883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.422581][T20883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.486235][T20883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.621822][T20883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.628858][T20883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.761254][T20883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.161379][T20883] hsr_slave_0: entered promiscuous mode [ 1272.279883][T20883] hsr_slave_1: entered promiscuous mode [ 1272.450322][T20883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1272.460341][T20883] Cannot create hsr debugfs directory [ 1272.679464][T13077] Bluetooth: hci2: command tx timeout [ 1272.923876][ T12] hsr_slave_0: left promiscuous mode [ 1272.942381][ T12] hsr_slave_1: left promiscuous mode [ 1272.969588][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.995336][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.040527][ T12] bridge_slave_1: left allmulticast mode [ 1273.046295][ T12] bridge_slave_1: left promiscuous mode [ 1273.076842][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.112275][ T12] bridge_slave_0: left allmulticast mode [ 1273.118014][ T12] bridge_slave_0: left promiscuous mode [ 1273.159706][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.350547][ T12] veth1_macvtap: left promiscuous mode [ 1273.356209][ T12] veth0_macvtap: left promiscuous mode [ 1273.391682][ T12] veth1_vlan: left promiscuous mode [ 1273.397124][ T12] veth0_vlan: left promiscuous mode [ 1274.074009][ T12] infiniband syz0: set down [ 1274.759345][T13077] Bluetooth: hci2: command tx timeout [ 1276.839705][T13077] Bluetooth: hci2: command tx timeout [ 1277.568157][T21037] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4539'. [ 1277.577371][T21037] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4539'. [ 1277.621399][T14854] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1277.689783][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1277.787871][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1277.819501][T14854] usb 8-1: Using ep0 maxpacket: 32 [ 1277.843641][T14854] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1277.852139][T14854] usb 8-1: config 0 has no interface number 0 [ 1277.858845][T14854] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1277.874079][T14854] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1277.883940][T14854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.918701][T14854] usb 8-1: Product: syz [ 1277.923329][T14854] usb 8-1: Manufacturer: syz [ 1277.928020][T14854] usb 8-1: SerialNumber: syz [ 1277.976060][T14854] usb 8-1: config 0 descriptor?? [ 1278.001738][T14854] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1278.013438][T14854] em28xx 8-1:0.132: Video interface 132 found: [ 1278.029805][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.133031][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.223295][ T2113] smc: removing ib device syz0 [ 1278.431334][T14854] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 1278.874549][T14854] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1278.893124][ T12] bond0 (unregistering): Released all slaves [ 1278.903175][T14854] em28xx 8-1:0.132: board has no eeprom [ 1278.989060][T16387] infiniband syz0: ib_query_port failed (-19) [ 1279.012431][T14854] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1279.043460][T14854] em28xx 8-1:0.132: analog set to bulk mode. [ 1279.070527][T13213] em28xx 8-1:0.132: Registering V4L2 extension [ 1279.154856][T16387] usb 8-1: USB disconnect, device number 84 [ 1279.183166][T16387] em28xx 8-1:0.132: Disconnecting em28xx [ 1279.743269][T13213] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 1279.770217][T13213] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 1279.789460][T13213] em28xx 8-1:0.132: No AC97 audio processor [ 1279.885147][T13213] usb 8-1: Decoder not found [ 1279.909369][T13213] em28xx 8-1:0.132: failed to create media graph [ 1279.915840][T13213] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 1279.976743][T13213] em28xx 8-1:0.132: Remote control support is not available for this card. [ 1280.085649][T16387] em28xx 8-1:0.132: Closing input extension [ 1280.354128][T16387] em28xx 8-1:0.132: Freeing device [ 1282.339034][T20883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1282.403649][T20883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1282.484859][T20883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1282.531440][T20883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1282.655299][ T12] IPVS: stop unused estimator thread 0... [ 1282.874070][T20883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.947594][T20883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.972837][T13627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.980115][T13627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.008129][T13627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.015444][T13627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.584152][T20883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.724708][T20883] veth0_vlan: entered promiscuous mode [ 1283.757942][T20883] veth1_vlan: entered promiscuous mode [ 1283.873166][T20883] veth0_macvtap: entered promiscuous mode [ 1283.894794][T20883] veth1_macvtap: entered promiscuous mode [ 1283.931764][T20883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.956413][T20883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.989767][T20883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.029317][T20883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.050315][T20883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.079238][T20883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.111218][T20883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.155101][T20883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.190068][T20883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.223533][T20883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.251694][T20883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.277186][T20883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.296619][T20883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.308464][T20883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.348838][T20883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.373674][T20883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.389973][T20883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.409627][T20883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.642338][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.675031][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.789727][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.810855][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.940281][T13213] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1291.149896][T13213] usb 3-1: Using ep0 maxpacket: 32 [ 1291.329526][T13213] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1291.467011][T13213] usb 3-1: config 0 has no interface number 0 [ 1291.724534][T13213] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1291.819205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1291.858685][T13213] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1291.870147][T13213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.878193][T13213] usb 3-1: Product: syz [ 1291.894405][T13213] usb 3-1: Manufacturer: syz [ 1291.894407][T14288] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1291.913632][T13213] usb 3-1: SerialNumber: syz [ 1291.946595][T13213] usb 3-1: config 0 descriptor?? [ 1291.973978][T13213] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1291.987936][T13213] em28xx 3-1:0.132: Video interface 132 found: [ 1292.093723][T14288] usb 8-1: Using ep0 maxpacket: 16 [ 1292.102719][T14288] usb 8-1: config 15 has an invalid interface number: 138 but max is 1 [ 1292.114134][T14288] usb 8-1: config 15 has an invalid interface number: 104 but max is 1 [ 1292.309240][T14288] usb 8-1: config 15 has no interface number 0 [ 1292.320155][T14288] usb 8-1: config 15 has no interface number 1 [ 1292.401944][T14288] usb 8-1: config 15 interface 138 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 32 [ 1292.403278][T13213] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1292.412796][T14288] usb 8-1: config 15 interface 138 altsetting 9 has an invalid endpoint with address 0xA3, skipping [ 1292.430011][T14288] usb 8-1: config 15 interface 138 has no altsetting 0 [ 1292.437374][T14288] usb 8-1: config 15 interface 104 has no altsetting 0 [ 1292.448072][T14288] usb 8-1: New USB device found, idVendor=04b8, idProduct=0601, bcdDevice= 1.00 [ 1292.458631][T14288] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.475607][T14288] usb 8-1: Product: syz [ 1292.482132][T14288] usb 8-1: Manufacturer: syz [ 1292.486799][T14288] usb 8-1: SerialNumber: syz [ 1292.509404][T21262] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1292.516796][T21262] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1292.766794][T14288] usb-storage 8-1:15.138: USB Mass Storage device detected [ 1292.816124][T14288] usb-storage 8-1:15.138: Quirks match for vid 04b8 pid 0601: 8 [ 1292.877274][T13213] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1292.896916][T13213] em28xx 3-1:0.132: board has no eeprom [ 1292.979465][T14288] usb-storage 8-1:15.104: USB Mass Storage device detected [ 1293.016689][T14288] usb-storage 8-1:15.104: Quirks match for vid 04b8 pid 0601: 8 [ 1293.019905][T13213] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1293.066269][T13213] em28xx 3-1:0.132: analog set to bulk mode. [ 1293.074096][T14854] em28xx 3-1:0.132: Registering V4L2 extension [ 1293.145927][T14288] usb 8-1: USB disconnect, device number 85 [ 1293.160238][T21292] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 1293.178362][T13213] usb 3-1: USB disconnect, device number 87 [ 1293.189780][T21293] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 1 [ 1293.210816][T21294] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 2 [ 1293.226157][T21295] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 3 [ 1293.248322][T13213] em28xx 3-1:0.132: Disconnecting em28xx [ 1293.648469][T14854] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1293.667873][T14854] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1293.695846][T14854] em28xx 3-1:0.132: No AC97 audio processor [ 1293.750094][T14854] usb 3-1: Decoder not found [ 1293.771490][T14854] em28xx 3-1:0.132: failed to create media graph [ 1293.858102][T14854] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1293.888132][T14854] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1293.942161][T13213] em28xx 3-1:0.132: Closing input extension [ 1293.953765][T21309] tmpfs: Bad value for 'nr_blocks' [ 1294.265721][T13213] em28xx 3-1:0.132: Freeing device [ 1295.520745][T14288] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1295.751938][T14288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1295.773378][T14288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.824280][T14288] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1295.834817][T14288] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1295.858142][T14288] usb 1-1: Manufacturer: syz [ 1295.874331][T14288] usb 1-1: config 0 descriptor?? [ 1296.711410][T14288] uclogic 0003:256C:006D.0015: failed retrieving string descriptor #100: -71 [ 1296.739567][T14288] uclogic 0003:256C:006D.0015: failed retrieving pen parameters: -71 [ 1296.758084][T14288] uclogic 0003:256C:006D.0015: failed probing pen v1 parameters: -71 [ 1296.783974][T14288] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 1296.807886][T14288] uclogic: probe of 0003:256C:006D.0015 failed with error -71 [ 1296.834490][T14288] usb 1-1: USB disconnect, device number 99 [ 1298.309351][T14288] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1298.339682][T16387] usb 8-1: new full-speed USB device number 86 using dummy_hcd [ 1298.520002][T14288] usb 3-1: Using ep0 maxpacket: 32 [ 1298.545762][T16387] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1298.557552][T14288] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1298.567514][T14288] usb 3-1: config 0 has no interface number 0 [ 1298.576360][T16387] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.589287][T14288] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1298.601759][T16387] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1298.602300][T14288] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1298.629207][T16387] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1298.637491][T16387] usb 8-1: Manufacturer: syz [ 1298.642410][T14288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.652210][T14288] usb 3-1: Product: syz [ 1298.659248][T14288] usb 3-1: Manufacturer: syz [ 1298.667568][T16387] usb 8-1: config 0 descriptor?? [ 1298.678060][T14288] usb 3-1: SerialNumber: syz [ 1298.711399][T14288] usb 3-1: config 0 descriptor?? [ 1299.368188][T14288] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1299.389803][T14288] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1299.402418][T14288] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1299.429266][T14288] f81534: probe of 3-1:0.12 failed with error -71 [ 1299.446364][T14288] usb 3-1: USB disconnect, device number 88 [ 1299.517388][T16387] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #100: -71 [ 1299.529492][T16387] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 1299.544337][T16387] uclogic 0003:256C:006D.0016: failed probing pen v1 parameters: -71 [ 1299.564116][T16387] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 1299.579534][T16387] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 1299.613842][T16387] usb 8-1: USB disconnect, device number 86 [ 1299.979390][T19692] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1299.981267][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4659'. [ 1300.220148][T19692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.232720][T19692] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=dc.df [ 1300.257645][T19692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.278830][T19692] usb 1-1: config 0 descriptor?? [ 1300.282822][T19692] pwc: Askey VC010 type 2 USB webcam detected. [ 1300.449179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1302.086056][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.288231][T19692] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1302.305998][T19692] pwc: recv_control_msg error -32 req 02 val 2700 [ 1302.320777][T19692] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1302.338249][T19692] pwc: recv_control_msg error -32 req 04 val 1000 [ 1302.346348][T19692] pwc: recv_control_msg error -32 req 04 val 1300 [ 1302.354226][T19692] pwc: recv_control_msg error -32 req 04 val 1400 [ 1302.367510][T19692] pwc: recv_control_msg error -32 req 02 val 2000 [ 1302.384044][T19692] pwc: recv_control_msg error -32 req 02 val 2100 [ 1302.403836][T19692] pwc: recv_control_msg error -32 req 04 val 1500 [ 1302.422795][T19692] pwc: recv_control_msg error -32 req 02 val 2500 [ 1302.446800][T19692] pwc: recv_control_msg error -71 req 02 val 2400 [ 1302.459785][T19692] pwc: recv_control_msg error -71 req 02 val 2600 [ 1302.474308][T19692] pwc: recv_control_msg error -71 req 02 val 2900 [ 1302.483016][T19692] pwc: recv_control_msg error -71 req 02 val 2800 [ 1302.490546][T19692] pwc: recv_control_msg error -71 req 04 val 1100 [ 1302.497597][T19692] pwc: recv_control_msg error -71 req 04 val 1200 [ 1302.526607][T19692] pwc: Registered as video103. [ 1302.555244][T19692] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 1302.607775][T19692] usb 1-1: USB disconnect, device number 100 [ 1306.632606][T21495] futex_wake_op: syz.0.4676 tries to shift op by -1; fix this program [ 1307.084971][T20886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1307.141395][T20886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1307.154436][T20886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1307.513470][T20886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1307.534463][ T2113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.565069][T20886] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1307.576589][T20886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1311.189317][T13077] Bluetooth: hci0: command tx timeout [ 1311.385417][ T2113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.601907][ T2113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.679600][T13213] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1311.727620][ T2113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.747678][T21505] lo speed is unknown, defaulting to 1000 [ 1311.881643][T13213] usb 1-1: Using ep0 maxpacket: 32 [ 1311.895896][T13213] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1311.906483][T13213] usb 1-1: config 0 has no interface number 0 [ 1311.927481][T13213] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1311.937195][T13213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.946125][T13213] usb 1-1: Product: syz [ 1311.951028][T13213] usb 1-1: Manufacturer: syz [ 1311.955675][T13213] usb 1-1: SerialNumber: syz [ 1311.970824][T13213] usb 1-1: config 0 descriptor?? [ 1312.009541][T13213] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1312.030653][T13213] usb 1-1: selecting invalid altsetting 1 [ 1312.036508][T13213] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1312.065547][T13213] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1312.107665][T13213] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1312.171408][ T2113] tipc: Left network mode [ 1312.179471][T13213] usb 1-1: media controller created [ 1312.276525][T13213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1312.489268][T21505] chnl_net:caif_netlink_parms(): no params data found [ 1312.633583][T13213] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1312.706585][T13213] usb 1-1: USB disconnect, device number 101 [ 1312.866013][T21505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.873593][T21505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.881529][T21505] bridge_slave_0: entered allmulticast mode [ 1312.889414][T21505] bridge_slave_0: entered promiscuous mode [ 1312.900391][T21505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.907709][T21505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.933522][T21505] bridge_slave_1: entered allmulticast mode [ 1312.956737][T21505] bridge_slave_1: entered promiscuous mode [ 1313.081618][T21505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.114893][T21505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.287948][T13077] Bluetooth: hci0: command tx timeout [ 1314.004412][T21505] team0: Port device team_slave_0 added [ 1314.213704][T21505] team0: Port device team_slave_1 added [ 1314.859235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1315.319952][T13077] Bluetooth: hci0: command tx timeout [ 1316.856992][T21505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.916926][T21505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.993370][T21505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.023937][T21505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.036552][T21505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.099428][T21505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.431220][T13077] Bluetooth: hci0: command tx timeout [ 1319.760996][T21505] hsr_slave_0: entered promiscuous mode [ 1319.784914][T21505] hsr_slave_1: entered promiscuous mode [ 1319.817263][T21505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1319.835218][T21505] Cannot create hsr debugfs directory [ 1321.376661][ T2113] IPVS: stopping backup sync thread 17706 ... [ 1321.403218][ T2113] IPVS: stopping backup sync thread 17705 ... [ 1321.429705][ T2113] IPVS: stopping backup sync thread 17702 ... [ 1321.450933][ T2113] IPVS: stopping backup sync thread 17701 ... [ 1322.812752][ T2113] hsr_slave_0: left promiscuous mode [ 1322.850216][ T2113] hsr_slave_1: left promiscuous mode [ 1322.878858][ T2113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.907099][ T2113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.930665][ T2113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.970351][ T2113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.021722][ T2113] bridge_slave_1: left allmulticast mode [ 1323.027639][ T2113] bridge_slave_1: left promiscuous mode [ 1323.034651][ T2113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.141831][ T2113] bridge_slave_0: left allmulticast mode [ 1323.190784][ T2113] bridge_slave_0: left promiscuous mode [ 1323.229200][ T2113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.928979][ T2113] veth1_macvtap: left promiscuous mode [ 1323.950314][ T2113] veth0_macvtap: left promiscuous mode [ 1323.956058][ T2113] veth1_vlan: left promiscuous mode [ 1323.982292][ T2113] veth0_vlan: left promiscuous mode [ 1333.237395][ T2113] team0 (unregistering): Port device team_slave_1 removed [ 1333.428701][ T2113] team0 (unregistering): Port device team_slave_0 removed [ 1333.577831][ T2113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.757315][ T2113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.431211][ T2113] bond0 (unregistering): Released all slaves [ 1335.557872][T21505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1337.073525][T21505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1337.118988][T21505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1337.170540][T21505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1337.328839][ T2113] IPVS: stop unused estimator thread 0... [ 1337.537631][T21505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.583238][T21505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.599280][T16387] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1337.623658][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.631040][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.665963][ T2113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.673344][ T2113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.809503][T16387] usb 8-1: config 0 has no interfaces? [ 1337.815307][T16387] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1337.845128][T16387] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.878340][T16387] usb 8-1: config 0 descriptor?? [ 1338.311400][T21505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.416962][T21505] veth0_vlan: entered promiscuous mode [ 1338.455757][T21505] veth1_vlan: entered promiscuous mode [ 1338.554338][T21505] veth0_macvtap: entered promiscuous mode [ 1338.599057][T21505] veth1_macvtap: entered promiscuous mode [ 1338.665953][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.694134][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.694161][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.694179][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.694197][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.694212][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.696173][T21505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.705130][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.705157][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.705171][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.705186][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.705199][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.705213][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.707706][T21505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.722083][T21505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.722124][T21505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.722154][T21505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.722182][T21505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.032112][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.032133][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.162897][ T2113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.182135][ T2113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.373385][ T9] usb 8-1: USB disconnect, device number 87 [ 1341.818170][T21828] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4757'. [ 1342.463009][T21848] netlink: 'syz.2.4758': attribute type 7 has an invalid length. [ 1342.471186][T21848] netlink: 'syz.2.4758': attribute type 8 has an invalid length. [ 1343.322963][T21859] netlink: 'syz.0.4766': attribute type 1 has an invalid length. [ 1343.368708][T21859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1343.419469][T21859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4766'. [ 1343.451995][T21859] bond1: entered promiscuous mode [ 1343.457173][T21859] bond1: entered allmulticast mode [ 1344.537030][ T5812] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1344.819453][ T9] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1344.861045][ T5812] usb 8-1: Using ep0 maxpacket: 16 [ 1345.065632][ T5812] usb 8-1: config 15 has an invalid interface number: 138 but max is 0 [ 1345.197827][ T5812] usb 8-1: config 15 has no interface number 0 [ 1345.208189][ T5812] usb 8-1: config 15 interface 138 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 32 [ 1345.218642][ T5812] usb 8-1: config 15 interface 138 altsetting 9 has an invalid endpoint with address 0xA3, skipping [ 1345.239172][ T5812] usb 8-1: config 15 interface 138 has no altsetting 0 [ 1345.250294][ T5812] usb 8-1: New USB device found, idVendor=04b8, idProduct=0601, bcdDevice= 1.00 [ 1345.259697][ T9] usb 1-1: device descriptor read/64, error -71 [ 1345.266316][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.275652][ T5812] usb 8-1: Product: syz [ 1345.280824][ T5812] usb 8-1: Manufacturer: syz [ 1345.285481][ T5812] usb 8-1: SerialNumber: syz [ 1345.295239][T21872] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1345.303192][T21872] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1345.532670][ T5812] usb-storage 8-1:15.138: USB Mass Storage device detected [ 1345.549517][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1345.575406][ T5812] usb-storage 8-1:15.138: Quirks match for vid 04b8 pid 0601: 8 [ 1345.674299][ T5812] usb 8-1: USB disconnect, device number 88 [ 1345.699241][ T9] usb 1-1: device descriptor read/64, error -71 [ 1345.832901][ T9] usb usb1-port1: attempt power cycle [ 1346.259334][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1346.290572][ T9] usb 1-1: device descriptor read/8, error -71 [ 1346.813346][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1347.819822][ T9] usb 1-1: device not accepting address 105, error -71 [ 1347.850408][ T9] usb usb1-port1: unable to enumerate USB device [ 1349.595522][T21942] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1350.997802][T21943] input: syz0 as /devices/virtual/input/input35 [ 1352.097021][T21965] netlink: 'syz.2.4806': attribute type 10 has an invalid length. [ 1352.105418][T21965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4806'. [ 1352.115325][T21965] dummy0: entered promiscuous mode [ 1352.121953][T21965] bridge0: port 3(dummy0) entered blocking state [ 1352.128452][T21965] bridge0: port 3(dummy0) entered disabled state [ 1352.136022][T21965] dummy0: entered allmulticast mode [ 1352.143784][T21965] bridge0: port 3(dummy0) entered blocking state [ 1352.150366][T21965] bridge0: port 3(dummy0) entered forwarding state [ 1355.819422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1356.949923][T22013] netlink: 'syz.6.4824': attribute type 39 has an invalid length. [ 1362.044344][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.912092][T19692] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1363.119357][T19692] usb 3-1: Using ep0 maxpacket: 8 [ 1363.370203][T22082] netlink: 284 bytes leftover after parsing attributes in process `syz.7.4844'. [ 1363.679536][T19692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1363.708010][T19692] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1363.722129][T19692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.791680][T19692] usb 3-1: config 0 descriptor?? [ 1364.775417][T19692] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1364.788765][T19692] usb 3-1: USB disconnect, device number 89 [ 1367.439888][T22141] tmpfs: Bad value for 'nr_blocks' [ 1380.786460][T22309] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4925'. [ 1380.836859][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4925'. [ 1381.149823][T22315] ptrace attach of "./syz-executor exec"[15370] was attempted by "./syz-executor exec"[22315] [ 1381.938805][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4930'. [ 1384.400203][T22351] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4939'. [ 1384.427154][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4939'. [ 1385.947025][T22380] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4950'. [ 1385.966564][T22380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4950'. [ 1387.808724][T22410] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4961'. [ 1389.429378][T22436] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4970'. [ 1393.921252][T22478] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1394.863192][T13077] Bluetooth: hci2: command 0x0406 tx timeout [ 1398.461311][T22552] block device autoloading is deprecated and will be removed. [ 1398.474543][T22552] syz.6.5010: attempt to access beyond end of device [ 1398.474543][T22552] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1402.241332][T20886] Bluetooth: hci0: link tx timeout [ 1402.247355][T20886] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1402.900402][T20886] Bluetooth: hci0: link tx timeout [ 1402.907632][T20886] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1402.918744][T20886] Bluetooth: hci0: link tx timeout [ 1402.925279][T20886] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1403.253561][T20886] Bluetooth: hci0: link tx timeout [ 1403.258746][T20886] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1403.412986][T20886] Bluetooth: hci0: link tx timeout [ 1403.418215][T20886] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1404.459346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1404.496967][T20886] Bluetooth: hci0: command 0x0406 tx timeout [ 1404.540529][T20886] Bluetooth: hci0: link tx timeout [ 1409.870826][T22684] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5047'. [ 1409.899776][T22684] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5047'. [ 1412.139335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1414.949394][T20415] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1415.155368][T20415] usb 1-1: not running at top speed; connect to a high speed hub [ 1415.181493][T20415] usb 1-1: config 1 interface 0 altsetting 250 endpoint 0x81 has invalid maxpacket 26214, setting to 64 [ 1415.203438][T20415] usb 1-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1416.008625][T20415] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1416.018772][T20415] usb 1-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40 [ 1416.068831][T20415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.104926][T20415] usb 1-1: Product: 䀊 [ 1416.111112][T20415] usb 1-1: Manufacturer: 胃㵡샸绌鑃몿况넮컳ක媞뤄äžå·‡è…¢â±æ®˜ï«™ï‡•䬼ޅ蜫乚頟輒é”☕ëªïœ¥éŸ²á‹Œâ——æ­æ¢¤âŽ‘é¡Šî¥¾á”‚âƒªè—¦à¤äŒìœâº¦æ¼œïŠ¸ãœŽå«µê °ì‘謆ä¹åŽ î¼¶ì¬€î å­¢å£’Ϊﺅ⡭뤭ìŒè¦¾æŠ˜è–¿ë“›é«ê»°ç’¤ë‹ìžŠãšêޤ [ 1416.138802][T20415] usb 1-1: SerialNumber: 䬤┑ﺖ뉪﷮뒖ä€èŸ“㛑ⴘ帗ï§éˆì‰ˆäˆ¦ì„ƒâ²Œåƒƒí‘½é²ì…¦ã¹¨ï‘¡ë§ á˜Žá®˜å¸Šî§›é¬¿éŒ¾îŒ…⨿ኻ置頋ҕäŒë·¤á¼©à¨–紋î¿ë„§ë°›ç¹˜èž”㋛纒㻤è•떃ꪎ찵鯲å寊룦コ嬹퉀係ì°â•á»æœ¨âŒ§ì¦‡ì˜Ÿï¡—마岟䩧á™ë™ƒê•›é¹‘æ‘翴魘ﯚ暧㔂꬟ï갖èˆà¸“å·›å´åœå—å³¶í“¢ [ 1416.276696][T22751] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1417.013260][T20415] usbhid 1-1:1.0: can't add hid device: -71 [ 1417.032673][T20415] usbhid: probe of 1-1:1.0 failed with error -71 [ 1417.055958][T20415] usb 1-1: USB disconnect, device number 106 [ 1417.445124][T22791] loop2: detected capacity change from 0 to 7 [ 1417.461408][T22791] Dev loop2: unable to read RDB block 7 [ 1417.474856][T22791] loop2: unable to read partition table [ 1417.481792][T22791] loop2: partition table beyond EOD, truncated [ 1417.491533][T22791] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 1419.065742][T22820] siw: device registration error -23 [ 1419.311354][T22827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.319547][T22827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.793680][T22835] netlink: 'syz.6.5097': attribute type 7 has an invalid length. [ 1419.801596][T22835] netlink: 'syz.6.5097': attribute type 8 has an invalid length. [ 1423.486808][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.786606][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1425.795599][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1425.803625][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1425.811623][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1425.819641][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1425.827615][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1425.835657][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1425.843655][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1425.851708][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1425.859703][T22925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1430.806454][T22982] netlink: 'syz.7.5144': attribute type 10 has an invalid length. [ 1430.814491][T22982] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5144'. [ 1430.823682][T22982] dummy0: entered promiscuous mode [ 1430.831589][T22982] bridge0: port 3(dummy0) entered blocking state [ 1430.838558][T22982] bridge0: port 3(dummy0) entered disabled state [ 1430.846294][T22982] dummy0: entered allmulticast mode [ 1430.861896][T22982] bridge0: port 3(dummy0) entered blocking state [ 1430.868429][T22982] bridge0: port 3(dummy0) entered forwarding state [ 1432.859227][ T28] audit: type=1326 audit(53439362.173:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1432.919271][T20415] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1432.959374][ T28] audit: type=1326 audit(53439362.173:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1432.999357][ T28] audit: type=1326 audit(53439362.173:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1433.073979][ T28] audit: type=1326 audit(53439362.183:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1433.137052][ T28] audit: type=1326 audit(53439362.183:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1433.268404][ T28] audit: type=1326 audit(53439362.183:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1433.313119][ T28] audit: type=1326 audit(53439362.183:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1433.344772][ T28] audit: type=1326 audit(53439362.183:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1433.397926][ T28] audit: type=1326 audit(53439362.183:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1433.441804][ T28] audit: type=1326 audit(53439362.183:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.7.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34c619cdd9 code=0x7ffc0000 [ 1433.466352][T20415] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1433.475026][T20415] usb 3-1: not running at top speed; connect to a high speed hub [ 1433.485083][T20415] usb 3-1: config 249 has an invalid interface number: 203 but max is 0 [ 1433.493732][T20415] usb 3-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.504269][T20415] usb 3-1: config 249 has no interface number 0 [ 1433.511681][T20415] usb 3-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.522147][T20415] usb 3-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1433.544176][T20415] usb 3-1: config 249 interface 203 has no altsetting 0 [ 1433.555042][T20415] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1433.572897][T20415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.598283][T20415] usb 3-1: Product: syz [ 1433.603758][T20415] usb 3-1: Manufacturer: syz [ 1433.608420][T20415] usb 3-1: SerialNumber: syz [ 1433.851471][T20415] rtl8150 3-1:249.203: couldn't find required endpoints [ 1433.858676][T20415] rtl8150: probe of 3-1:249.203 failed with error -5 [ 1433.891651][T20415] usb 3-1: USB disconnect, device number 90 [ 1435.999050][T23044] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5168'. [ 1438.207047][T23060] tmpfs: Bad value for 'nr_blocks' [ 1440.460316][T23097] tmpfs: Bad value for 'nr_blocks' [ 1442.778866][T20886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1442.791838][T20886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1442.809583][T20886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1442.822408][T20886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1442.835308][T20886] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1442.850821][T20886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1443.036591][T13633] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.014127][T13633] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.922917][T20886] Bluetooth: hci3: command tx timeout [ 1445.290870][T13633] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.350147][T13633] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.559192][T23121] lo speed is unknown, defaulting to 1000 [ 1447.172523][T20886] Bluetooth: hci3: command tx timeout [ 1449.095852][T23121] chnl_net:caif_netlink_parms(): no params data found [ 1449.249180][T20886] Bluetooth: hci3: command tx timeout [ 1451.319350][T20886] Bluetooth: hci3: command tx timeout [ 1452.559467][T23121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.566691][T23121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.638632][T23121] bridge_slave_0: entered allmulticast mode [ 1452.647433][T23121] bridge_slave_0: entered promiscuous mode [ 1452.885248][T23121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.899552][T23121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.906951][T23121] bridge_slave_1: entered allmulticast mode [ 1453.342681][T20886] Bluetooth: hci0: command 0x0406 tx timeout [ 1453.810791][T23121] bridge_slave_1: entered promiscuous mode [ 1454.285660][T23121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.450703][T23121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.581769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.874056][T23121] team0: Port device team_slave_0 added [ 1456.920990][T23121] team0: Port device team_slave_1 added [ 1456.969341][T23242] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5226'. [ 1457.162375][T13633] IPVS: stopping backup sync thread 17430 ... [ 1457.179461][T13633] IPVS: stopping backup sync thread 17429 ... [ 1457.219411][T23121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.239506][T13633] IPVS: stopping backup sync thread 17428 ... [ 1457.257387][T23121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.294302][T13633] IPVS: stopping backup sync thread 17427 ... [ 1457.333605][T23121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.348987][T23121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.356982][T23121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.396666][T23121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.251531][T23121] hsr_slave_0: entered promiscuous mode [ 1459.294880][T23121] hsr_slave_1: entered promiscuous mode [ 1459.312308][T23121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1459.325532][T23121] Cannot create hsr debugfs directory [ 1460.404547][T13633] hsr_slave_0: left promiscuous mode [ 1460.413966][T13633] hsr_slave_1: left promiscuous mode [ 1460.604373][T13633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.636827][T13633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.673484][T13633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.723352][T13633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.792760][T13633] dummy0: left allmulticast mode [ 1460.799150][T13633] bridge0: port 3(dummy0) entered disabled state [ 1460.918936][T13633] bridge_slave_1: left allmulticast mode [ 1460.925661][T13633] bridge_slave_1: left promiscuous mode [ 1460.932522][T13633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.008457][T13633] bridge_slave_0: left allmulticast mode [ 1461.014732][T13633] bridge_slave_0: left promiscuous mode [ 1461.022044][T13633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.270785][T13633] veth1_macvtap: left promiscuous mode [ 1461.276736][T13633] veth0_macvtap: left promiscuous mode [ 1461.282969][T13633] veth1_vlan: left promiscuous mode [ 1461.288615][T13633] veth0_vlan: left promiscuous mode [ 1468.447280][T13633] team0 (unregistering): Port device team_slave_1 removed [ 1468.660782][T13633] team0 (unregistering): Port device team_slave_0 removed [ 1468.818316][T13633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.141171][T13633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.419577][T13633] bond0 (unregistering): Released all slaves [ 1470.742928][T23289] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5235'. [ 1470.755704][T20415] lo speed is unknown, defaulting to 1000 [ 1471.941898][T20886] Bluetooth: hci0: link tx timeout [ 1471.947178][T20886] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1473.959237][T13077] Bluetooth: hci0: command 0x0406 tx timeout [ 1474.799726][T23389] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5259'. [ 1474.849236][ T27] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1475.071589][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1475.100155][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 1475.120807][ T27] usb 1-1: config 249 has an invalid interface number: 203 but max is 0 [ 1475.156907][ T27] usb 1-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.199410][ T27] usb 1-1: config 249 has no interface number 0 [ 1475.206496][ T27] usb 1-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.235213][T23121] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1475.248648][ T27] usb 1-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1475.273079][T23121] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1475.288267][ T27] usb 1-1: config 249 interface 203 has no altsetting 0 [ 1475.308384][ T27] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1475.317626][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.340577][T23121] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1475.351748][ T27] usb 1-1: Product: syz [ 1475.355991][ T27] usb 1-1: Manufacturer: syz [ 1475.371647][T23121] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1475.398258][ T27] usb 1-1: SerialNumber: syz [ 1475.520274][T23401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1475.682915][ T27] rtl8150 1-1:249.203: couldn't find required endpoints [ 1475.706235][ T27] rtl8150: probe of 1-1:249.203 failed with error -5 [ 1475.732934][T23121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.751623][ T27] usb 1-1: USB disconnect, device number 107 [ 1475.813606][T23121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.964577][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.971880][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.017499][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.024762][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1477.206762][T23121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1477.760689][T23427] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5267'. [ 1477.776859][T23121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1478.959684][T23121] veth0_vlan: entered promiscuous mode [ 1479.016549][T23121] veth1_vlan: entered promiscuous mode [ 1479.682005][T23121] veth0_macvtap: entered promiscuous mode [ 1479.703533][T23121] veth1_macvtap: entered promiscuous mode [ 1479.838924][T23121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.895336][T23121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.939695][T23121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.971831][T23121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.015284][T23121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.066168][T23121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.143883][T23121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1480.179506][T23467] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5275'. [ 1480.227556][T23121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.259242][T23121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.289370][T23121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.319366][T23121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.348996][T23121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.381421][T23121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.437535][T23121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.490076][T23121] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.498913][T23121] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.564609][T23121] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.590320][T23121] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.526518][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.568847][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.088438][T11077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.127971][T11077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.926853][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1487.657524][T23518] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5283'. [ 1489.219269][T14288] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 1489.429864][T14288] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1489.453166][T14288] usb 1-1: not running at top speed; connect to a high speed hub [ 1489.522333][T14288] usb 1-1: config 249 has an invalid interface number: 203 but max is 0 [ 1489.561054][T14288] usb 1-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.623040][T14288] usb 1-1: config 249 has no interface number 0 [ 1489.709213][T14288] usb 1-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.759453][T14288] usb 1-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1489.803935][T14288] usb 1-1: config 249 interface 203 has no altsetting 0 [ 1489.980673][T14288] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1489.990366][T14288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.998447][T14288] usb 1-1: Product: syz [ 1490.003664][T14288] usb 1-1: Manufacturer: syz [ 1490.008330][T14288] usb 1-1: SerialNumber: syz [ 1490.179120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1490.279115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1490.309107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1492.382278][T14288] rtl8150 1-1:249.203: couldn't find required endpoints [ 1492.425262][T14288] rtl8150: probe of 1-1:249.203 failed with error -5 [ 1492.447731][T14288] usb 1-1: USB disconnect, device number 108 [ 1492.485229][T23573] netlink: 'syz.7.5294': attribute type 7 has an invalid length. [ 1492.493294][T23573] netlink: 'syz.7.5294': attribute type 8 has an invalid length. [ 1493.783638][T23587] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5300'. [ 1496.262689][T23612] netlink: 'syz.7.5306': attribute type 7 has an invalid length. [ 1496.270685][T23612] netlink: 'syz.7.5306': attribute type 8 has an invalid length. [ 1497.191147][T23607] netlink: 149 bytes leftover after parsing attributes in process `syz.0.5304'. [ 1499.168952][T23649] netlink: 'syz.7.5316': attribute type 7 has an invalid length. [ 1499.177043][T23649] netlink: 'syz.7.5316': attribute type 8 has an invalid length. [ 1503.780283][T23692] netlink: 'syz.7.5325': attribute type 7 has an invalid length. [ 1503.789084][T23692] netlink: 'syz.7.5325': attribute type 8 has an invalid length. [ 1508.522867][T23741] netlink: 'syz.2.5338': attribute type 7 has an invalid length. [ 1508.531208][T23741] netlink: 'syz.2.5338': attribute type 8 has an invalid length. [ 1512.149123][T23788] netlink: 'syz.2.5348': attribute type 7 has an invalid length. [ 1512.157082][T23788] netlink: 'syz.2.5348': attribute type 8 has an invalid length. [ 1516.729396][T23811] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5354'. [ 1518.510792][T23850] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5365'. [ 1530.491550][T23983] ptrace attach of "./syz-executor exec"[15227] was attempted by "./syz-executor exec"[23983] [ 1534.349209][ T5811] usb 8-1: new full-speed USB device number 89 using dummy_hcd [ 1534.389422][T22854] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1534.630124][T22854] usb 1-1: Using ep0 maxpacket: 8 [ 1534.692871][ T5811] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1534.702595][T22854] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1534.722524][T22854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.763844][ T5811] usb 8-1: not running at top speed; connect to a high speed hub [ 1534.792856][T22854] usb 1-1: Product: syz [ 1534.807410][T22854] usb 1-1: Manufacturer: syz [ 1534.823026][ T5811] usb 8-1: config 249 has an invalid interface number: 203 but max is 0 [ 1534.827824][T22854] usb 1-1: SerialNumber: syz [ 1534.852193][ T5811] usb 8-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.864803][T22854] usb 1-1: config 0 descriptor?? [ 1534.909166][ T5811] usb 8-1: config 249 has no interface number 0 [ 1534.942035][ T5811] usb 8-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.999260][ T5811] usb 8-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1535.059204][ T5811] usb 8-1: config 249 interface 203 has no altsetting 0 [ 1535.096482][ T5811] usb 8-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1535.148093][T22854] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1535.157105][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.208545][ T5811] usb 8-1: Product: syz [ 1535.214537][ T5811] usb 8-1: Manufacturer: syz [ 1535.237637][ T5811] usb 8-1: SerialNumber: syz [ 1535.476845][ T5811] rtl8150 8-1:249.203: couldn't find required endpoints [ 1535.519830][ T5811] rtl8150: probe of 8-1:249.203 failed with error -5 [ 1535.637681][ T5811] usb 8-1: USB disconnect, device number 89 [ 1535.970465][T22854] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1535.995285][T22854] usb 1-1: USB disconnect, device number 109 [ 1540.052049][T14288] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1540.251709][T14288] usb 1-1: config 0 has no interfaces? [ 1540.290914][T14288] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1540.316087][T14288] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1540.334918][T14288] usb 1-1: Product: syz [ 1540.345852][T14288] usb 1-1: Manufacturer: syz [ 1540.382608][T14288] usb 1-1: config 0 descriptor?? [ 1540.700397][T22854] usb 1-1: USB disconnect, device number 110 [ 1545.012179][T13077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1545.029387][T13077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1545.056633][T13077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1545.089467][T13077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1545.099938][T13077] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1545.107596][T13077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1546.374468][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.869244][T11079] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.419148][T22854] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1547.429295][T20886] Bluetooth: hci1: command tx timeout [ 1547.640117][T22854] usb 3-1: Using ep0 maxpacket: 32 [ 1547.647766][T22854] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1547.656645][T22854] usb 3-1: config 0 has no interface number 0 [ 1547.666598][T22854] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1547.676191][T22854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.689320][T22854] usb 3-1: Product: syz [ 1547.693563][T22854] usb 3-1: Manufacturer: syz [ 1547.698202][T22854] usb 3-1: SerialNumber: syz [ 1547.714993][T22854] usb 3-1: config 0 descriptor?? [ 1547.732703][T22854] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1547.862289][T11079] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.960042][T22854] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1548.047876][T22854] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1548.742297][T11079] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.801924][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1548.810106][T14288] usb 3-1: USB disconnect, device number 91 [ 1548.830378][T14288] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1548.886110][T14288] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1548.967475][T14288] quatech2 3-1:0.51: device disconnected [ 1549.008342][T11079] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.088472][T24095] chnl_net:caif_netlink_parms(): no params data found [ 1549.330500][T24095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.337811][T24095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.348411][T24095] bridge_slave_0: entered allmulticast mode [ 1549.357348][T24095] bridge_slave_0: entered promiscuous mode [ 1549.366712][T24095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.400736][T24095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.419417][T24095] bridge_slave_1: entered allmulticast mode [ 1549.435511][T24095] bridge_slave_1: entered promiscuous mode [ 1549.492380][T13077] Bluetooth: hci1: command tx timeout [ 1549.725158][T24095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.776109][T24095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.226711][T24095] team0: Port device team_slave_0 added [ 1550.290086][T24095] team0: Port device team_slave_1 added [ 1551.899315][T13077] Bluetooth: hci1: command tx timeout [ 1553.870531][T24095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.877676][T24095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1553.959423][T13077] Bluetooth: hci1: command tx timeout [ 1553.976272][T24095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.217510][T24095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.014999][T24095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.072200][T24095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.805627][T24095] hsr_slave_0: entered promiscuous mode [ 1555.824957][T24095] hsr_slave_1: entered promiscuous mode [ 1555.843234][T24095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1555.858773][T24095] Cannot create hsr debugfs directory [ 1562.861918][T11079] IPVS: stopping backup sync thread 19203 ... [ 1562.878676][T11079] IPVS: stopping backup sync thread 19202 ... [ 1562.900291][T11079] IPVS: stopping backup sync thread 19201 ... [ 1562.922261][T11079] IPVS: stopping backup sync thread 19200 ... [ 1567.044103][T11079] hsr_slave_0: left promiscuous mode [ 1567.068668][T11079] hsr_slave_1: left promiscuous mode [ 1567.108704][T11079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.129326][T11079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.147853][T11079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.168179][T11079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.197731][T11079] bridge_slave_1: left allmulticast mode [ 1567.205023][T11079] bridge_slave_1: left promiscuous mode [ 1568.379678][T11079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.427064][T11079] bridge_slave_0: left allmulticast mode [ 1568.449261][T11079] bridge_slave_0: left promiscuous mode [ 1568.455129][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.561927][T11079] veth1_macvtap: left promiscuous mode [ 1568.580325][T11079] veth0_macvtap: left promiscuous mode [ 1568.586085][T11079] veth1_vlan: left promiscuous mode [ 1568.592982][T11079] veth0_vlan: left promiscuous mode [ 1568.739357][T22854] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1568.929343][T22854] usb 8-1: Using ep0 maxpacket: 32 [ 1568.945080][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 1568.957667][T22854] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1568.969338][T22854] usb 8-1: config 0 has no interface number 0 [ 1568.979644][T22854] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1568.990563][T22854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.998926][T22854] usb 8-1: Product: syz [ 1569.004358][T22854] usb 8-1: Manufacturer: syz [ 1569.009511][T22854] usb 8-1: SerialNumber: syz [ 1569.033206][T22854] usb 8-1: config 0 descriptor?? [ 1569.043801][T22854] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1569.278684][T22854] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1569.328514][T22854] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1569.475412][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1569.476665][ T5811] usb 8-1: USB disconnect, device number 90 [ 1569.494538][ T5811] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1569.530144][ T5811] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1569.564538][ T5811] quatech2 8-1:0.51: device disconnected [ 1570.105761][T11079] team0 (unregistering): Port device team_slave_1 removed [ 1570.223091][T11079] team0 (unregistering): Port device team_slave_0 removed [ 1571.679666][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5477'. [ 1573.722893][T24095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1573.795208][T24095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1575.029811][T24095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1575.118578][T24095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1576.947737][T24300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1576.987471][T24300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.504858][T24300] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.513928][T24300] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.525088][T24300] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.534389][T24300] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.868721][T24095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.918547][T24095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.064675][T11077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.072031][T11077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.161778][T11077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.169099][T11077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.551481][ T5812] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1581.669645][T24356] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5492'. [ 1582.795000][T24095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1585.593754][T24095] veth0_vlan: entered promiscuous mode [ 1585.635754][T24095] veth1_vlan: entered promiscuous mode [ 1585.716032][T24095] veth0_macvtap: entered promiscuous mode [ 1585.736103][T24095] veth1_macvtap: entered promiscuous mode [ 1585.796316][T24095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.823820][T24095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.846448][T24095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.869067][T24095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.890843][T24095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.931493][T24095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.951347][T24095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.986418][T24095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.016966][T24095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.055734][T24095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1586.093019][T24095] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.109094][T24095] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.165838][T24095] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.189559][T24095] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.485590][T24412] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1586.816014][ T2113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.966150][ T2113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.291617][T11079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.350471][T11079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.091479][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5515'. [ 1596.322397][T24504] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5512'. [ 1598.793408][T13077] Bluetooth: Frame is too long (len 16, expected len 4) [ 1598.793939][T24523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5530'. [ 1602.889573][T24550] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5535'. [ 1607.371726][T13349] IPVS: starting estimator thread 0... [ 1607.477846][T24585] IPVS: using max 16 ests per chain, 38400 per kthread [ 1607.757250][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1607.757268][ T28] audit: type=1800 audit(1607.708:352): pid=24577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5541" name="file1" dev="overlay" ino=1346 res=0 errno=0 [ 1607.829889][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.504038][T13077] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1610.157658][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5563'. [ 1610.198976][T24651] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1612.555114][T13077] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1612.566587][T13077] Bluetooth: hci2: Injecting HCI hardware error event [ 1612.577641][ T5784] Bluetooth: hci2: hardware error 0x00 [ 1614.757835][ T5784] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1615.659363][T23304] usb 8-1: new full-speed USB device number 91 using dummy_hcd [ 1615.892755][T23304] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1615.994240][T23304] usb 8-1: not running at top speed; connect to a high speed hub [ 1616.224323][T23304] usb 8-1: config 249 has an invalid interface number: 203 but max is 0 [ 1616.272164][T23304] usb 8-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.351937][T23304] usb 8-1: config 249 has no interface number 0 [ 1616.358390][T23304] usb 8-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.450623][T23304] usb 8-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1616.498604][T23304] usb 8-1: config 249 interface 203 has no altsetting 0 [ 1616.518856][T23304] usb 8-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1616.549597][T23304] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.557735][T23304] usb 8-1: Product: syz [ 1616.592560][T23304] usb 8-1: Manufacturer: syz [ 1616.597274][T23304] usb 8-1: SerialNumber: syz [ 1616.871782][T23304] rtl8150 8-1:249.203: couldn't find required endpoints [ 1616.921383][T23304] rtl8150: probe of 8-1:249.203 failed with error -5 [ 1617.070440][T23304] usb 8-1: USB disconnect, device number 91 [ 1618.642076][T24779] tmpfs: Bad value for 'nr_blocks' [ 1620.257246][T24810] tmpfs: Bad value for 'nr_blocks' [ 1620.908533][T24820] Bluetooth: MGMT ver 1.22 [ 1623.479643][T24312] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1623.759620][T24312] usb 1-1: device descriptor read/64, error -71 [ 1624.139353][T24312] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1624.329211][T24312] usb 1-1: device descriptor read/64, error -71 [ 1624.606884][T24312] usb usb1-port1: attempt power cycle [ 1625.153492][T24312] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1625.720827][T24312] usb 1-1: device descriptor read/8, error -71 [ 1626.039433][T24312] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1626.055051][ T28] audit: type=1800 audit(1626.008:353): pid=24877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5633" name="file1" dev="overlay" ino=1157 res=0 errno=0 [ 1626.099623][T24312] usb 1-1: device descriptor read/8, error -71 [ 1626.239554][T24312] usb usb1-port1: unable to enumerate USB device [ 1627.736841][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.433279][T23304] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1629.609092][T23304] usb 8-1: device descriptor read/64, error -71 [ 1630.725165][T23304] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1633.214807][T24313] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1633.869746][T24313] usb 1-1: device descriptor read/64, error -71 [ 1634.009295][T24979] ubi: mtd0 is already attached to ubi16 [ 1634.159185][T24313] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1635.888378][T24313] usb 1-1: device descriptor read/64, error -71 [ 1636.046710][T24313] usb usb1-port1: attempt power cycle [ 1641.750444][T25061] syz_tun: entered allmulticast mode [ 1641.761328][T25060] syz_tun: left allmulticast mode [ 1643.829163][T23304] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1643.989285][T23304] usb 1-1: device descriptor read/64, error -71 [ 1644.716731][T23304] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1644.899272][T23304] usb 1-1: device descriptor read/64, error -71 [ 1645.029756][T23304] usb usb1-port1: attempt power cycle [ 1645.459502][T23304] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1645.501782][T23304] usb 1-1: device descriptor read/8, error -71 [ 1645.789512][T23304] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1645.838053][T23304] usb 1-1: device descriptor read/8, error -71 [ 1645.971711][T23304] usb usb1-port1: unable to enumerate USB device [ 1648.029089][T23304] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1648.096689][T25160] netlink: 'syz.7.5739': attribute type 27 has an invalid length. [ 1648.120959][T25160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5739'. [ 1648.139058][T25160] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1648.209271][T23304] usb 3-1: device descriptor read/64, error -71 [ 1648.499422][T23304] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1648.659084][T23304] usb 3-1: device descriptor read/64, error -71 [ 1648.779428][T23304] usb usb3-port1: attempt power cycle [ 1649.209218][T23304] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1649.272278][T23304] usb 3-1: device descriptor read/8, error -71 [ 1649.579628][T23304] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1649.627072][T23304] usb 3-1: device descriptor read/8, error -71 [ 1649.751730][T23304] usb usb3-port1: unable to enumerate USB device [ 1653.479156][T24312] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1653.690037][T24312] usb 3-1: Using ep0 maxpacket: 32 [ 1653.757919][T24312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.927617][T24312] usb 3-1: config 0 has no interfaces? [ 1653.960922][T24312] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1653.970949][T24312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.981643][T24312] usb 3-1: Product: syz [ 1653.986002][T24312] usb 3-1: Manufacturer: syz [ 1653.993318][T24312] usb 3-1: SerialNumber: syz [ 1654.024198][T24312] usb 3-1: config 0 descriptor?? [ 1655.689095][T24312] usb 8-1: new full-speed USB device number 94 using dummy_hcd [ 1655.929474][T24312] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1655.946826][T24312] usb 8-1: not running at top speed; connect to a high speed hub [ 1655.964753][T24312] usb 8-1: config 249 has an invalid interface number: 203 but max is 0 [ 1655.974283][T24312] usb 8-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.985279][T24312] usb 8-1: config 249 has no interface number 0 [ 1655.992650][T24312] usb 8-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.029336][T24312] usb 8-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1656.052201][T24312] usb 8-1: config 249 interface 203 has no altsetting 0 [ 1656.076612][T24312] usb 8-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1656.086460][T24312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.112562][T24312] usb 8-1: Product: syz [ 1656.117139][T24312] usb 8-1: Manufacturer: syz [ 1656.136478][T24312] usb 8-1: SerialNumber: syz [ 1656.207414][T24313] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1656.378678][T24314] usb 3-1: USB disconnect, device number 97 [ 1656.389144][T24313] usb 1-1: device descriptor read/64, error -71 [ 1656.452384][T24312] rtl8150 8-1:249.203: couldn't find required endpoints [ 1656.470191][T24312] rtl8150: probe of 8-1:249.203 failed with error -5 [ 1656.486891][T24312] usb 8-1: USB disconnect, device number 94 [ 1657.601210][T24313] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1657.909231][T24313] usb 1-1: device descriptor read/64, error -71 [ 1658.058207][T24313] usb usb1-port1: attempt power cycle [ 1659.233049][T24313] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1659.375830][T24313] usb 1-1: device descriptor read/8, error -71 [ 1660.599125][T13349] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1660.811252][T13349] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1660.830774][T13349] usb 3-1: not running at top speed; connect to a high speed hub [ 1660.979544][T13349] usb 3-1: config 249 has an invalid interface number: 203 but max is 0 [ 1660.987988][T13349] usb 3-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.118459][T13349] usb 3-1: config 249 has no interface number 0 [ 1661.129779][T13349] usb 3-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.140566][T13349] usb 3-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1661.157679][T13349] usb 3-1: config 249 interface 203 has no altsetting 0 [ 1661.182399][T13349] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1661.203059][T13349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.218802][T13349] usb 3-1: Product: syz [ 1661.260896][T13349] usb 3-1: Manufacturer: syz [ 1661.297870][T13349] usb 3-1: SerialNumber: syz [ 1661.660908][T13349] rtl8150 3-1:249.203: couldn't find required endpoints [ 1661.688262][T13349] rtl8150: probe of 3-1:249.203 failed with error -5 [ 1661.742555][T13349] usb 3-1: USB disconnect, device number 98 [ 1664.789191][ T5811] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1665.000071][ T5811] usb 8-1: Using ep0 maxpacket: 32 [ 1665.007681][ T5811] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.039347][ T5811] usb 8-1: config 0 has no interfaces? [ 1665.048319][ T5811] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1665.062646][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.081242][ T5811] usb 8-1: Product: syz [ 1665.099092][ T5811] usb 8-1: Manufacturer: syz [ 1665.103798][ T5811] usb 8-1: SerialNumber: syz [ 1665.200346][ T5811] usb 8-1: config 0 descriptor?? [ 1668.367864][T13349] usb 8-1: USB disconnect, device number 95 [ 1669.245884][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1671.349536][T13349] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1671.559208][T13349] usb 1-1: Using ep0 maxpacket: 32 [ 1671.580751][T13349] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1671.602823][T13349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.629049][T13349] usb 1-1: config 0 has no interface number 0 [ 1671.637571][T13349] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1671.700496][T13349] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1671.729064][T13349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.746613][T13349] usb 1-1: Product: syz [ 1671.758733][T13349] usb 1-1: Manufacturer: syz [ 1671.771276][T13349] usb 1-1: SerialNumber: syz [ 1671.790525][T13349] usb 1-1: config 0 descriptor?? [ 1671.822797][T13349] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1672.026746][T13349] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 1672.042776][T13349] quatech2: probe of 1-1:0.51 failed with error -8 [ 1672.233017][T24313] usb 1-1: USB disconnect, device number 126 [ 1677.346390][ T5784] Bluetooth: hci1: link tx timeout [ 1677.356333][ T5784] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1677.369354][ T5784] Bluetooth: hci1: link tx timeout [ 1677.374600][ T5784] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1680.096183][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 1682.209348][T25485] Bluetooth: hci1: command 0x0406 tx timeout [ 1684.288352][T13077] Bluetooth: hci1: command 0x0406 tx timeout [ 1689.357287][T25558] overlayfs: workdir and upperdir must reside under the same mount [ 1689.528554][T25560] trusted_key: syz.6.5875 sent an empty control message without MSG_MORE. [ 1696.901680][T25638] program syz.7.5903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1699.210174][T25674] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5913'. [ 1700.210913][T25697] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5920'. [ 1700.530457][T25703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5924'. [ 1702.577611][T25738] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5935'. [ 1703.099157][T13349] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1703.339394][T13349] usb 8-1: Using ep0 maxpacket: 32 [ 1703.360169][T13349] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1703.385943][T13349] usb 8-1: config 0 has no interface number 0 [ 1703.405140][T13349] usb 8-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1703.506584][T13349] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1703.526784][T13349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.544809][T13349] usb 8-1: Product: syz [ 1703.559479][T13349] usb 8-1: Manufacturer: syz [ 1703.570202][T13349] usb 8-1: SerialNumber: syz [ 1703.593938][T13349] usb 8-1: config 0 descriptor?? [ 1703.630513][T13349] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1703.849832][T13349] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 1703.860496][T13349] quatech2: probe of 8-1:0.51 failed with error -8 [ 1704.059225][T13349] usb 8-1: USB disconnect, device number 96 [ 1704.340595][T25762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5945'. [ 1704.823983][T25776] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.5949'. [ 1707.217306][T25797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5956'. [ 1707.579949][T25805] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.5961'. [ 1709.335358][T25825] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5968'. [ 1710.302956][T25847] tmpfs: Bad value for 'nr_blocks' [ 1711.395527][T25853] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1711.639120][T13349] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1711.949071][T13349] usb 1-1: Using ep0 maxpacket: 16 [ 1711.956585][T13349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.979500][T13349] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1711.989632][T25869] tmpfs: Bad value for 'nr_blocks' [ 1712.008228][T13349] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1712.017847][T13349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.026527][T13349] usb 1-1: Product: syz [ 1712.178563][T13349] usb 1-1: Manufacturer: syz [ 1712.190883][T13349] usb 1-1: SerialNumber: syz [ 1712.744597][T13349] usb 1-1: 0:2 : does not exist [ 1712.947334][T13349] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1713.076353][T13349] usb 1-1: USB disconnect, device number 127 [ 1713.174338][T24612] udevd[24612]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1714.549354][ T5811] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1714.819072][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 1714.825049][ T5811] usb 1-1: no configurations [ 1714.846322][ T5811] usb 1-1: can't read configurations, error -22 [ 1715.732541][ T5811] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1715.790256][T25904] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5996'. [ 1716.019320][T25907] tmpfs: Bad value for 'nr_blocks' [ 1716.069391][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 1716.075412][ T5811] usb 1-1: no configurations [ 1716.093766][ T5811] usb 1-1: can't read configurations, error -22 [ 1716.120649][ T5811] usb usb1-port1: attempt power cycle [ 1716.660782][ T5811] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1717.054684][ T5811] usb 1-1: device descriptor read/8, error -71 [ 1719.898077][T25946] tmpfs: Bad value for 'nr_blocks' [ 1720.272210][T25950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6010'. [ 1720.444597][T25953] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6011'. [ 1724.578545][T25981] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.6021'. [ 1724.641415][T25985] tmpfs: Bad value for 'nr_blocks' [ 1727.618399][T16387] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1727.859305][T16387] usb 3-1: Using ep0 maxpacket: 8 [ 1727.928776][T16387] usb 3-1: no configurations [ 1727.938270][T16387] usb 3-1: can't read configurations, error -22 [ 1728.129523][T16387] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1728.346020][T16387] usb 3-1: Using ep0 maxpacket: 8 [ 1728.377497][T16387] usb 3-1: no configurations [ 1728.386559][T16387] usb 3-1: can't read configurations, error -22 [ 1728.426033][T16387] usb usb3-port1: attempt power cycle [ 1728.946178][T16387] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1729.875788][T16387] usb 3-1: Using ep0 maxpacket: 8 [ 1729.891460][T16387] usb 3-1: no configurations [ 1729.897334][T16387] usb 3-1: can't read configurations, error -22 [ 1730.049225][T16387] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1730.100204][T16387] usb 3-1: Using ep0 maxpacket: 8 [ 1730.115271][T16387] usb 3-1: no configurations [ 1730.129572][T16387] usb 3-1: can't read configurations, error -22 [ 1730.149348][T16387] usb usb3-port1: unable to enumerate USB device [ 1730.685672][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.996268][T26023] tmpfs: Bad value for 'nr_blocks' [ 1733.185308][T26029] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6033'. [ 1733.979268][T14854] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1734.200842][T14854] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1734.232435][T14854] usb 3-1: not running at top speed; connect to a high speed hub [ 1734.254171][T14854] usb 3-1: config 249 has an invalid descriptor of length 63, skipping remainder of the config [ 1734.285316][T14854] usb 3-1: config 249 has 0 interfaces, different from the descriptor's value: 1 [ 1734.350633][T14854] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1734.373957][T14854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.389348][T14854] usb 3-1: Product: syz [ 1734.394055][T14854] usb 3-1: Manufacturer: syz [ 1734.409219][T14854] usb 3-1: SerialNumber: syz [ 1734.638063][T14854] usb 3-1: USB disconnect, device number 103 [ 1737.029546][T16387] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1737.269274][T16387] usb 8-1: Using ep0 maxpacket: 32 [ 1737.287717][T16387] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 1737.297072][T16387] usb 8-1: config 0 has no interface number 0 [ 1737.304197][T16387] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1737.316164][T16387] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1737.347371][T16387] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1737.388831][T16387] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.398375][T16387] usb 8-1: Product: syz [ 1737.406056][T16387] usb 8-1: Manufacturer: syz [ 1737.410960][T16387] usb 8-1: SerialNumber: syz [ 1737.481446][T16387] usb 8-1: config 0 descriptor?? [ 1737.730869][T16387] radio-si470x 8-1:0.35: this is not a si470x device. [ 1737.909476][T16387] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 1737.922168][T16387] usb 8-1: USB disconnect, device number 97 [ 1738.033484][T26071] tmpfs: Bad value for 'nr_blocks' [ 1741.827066][T26085] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6046'. [ 1748.339224][T26144] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1752.532649][T26190] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.6074'. [ 1759.157056][T26239] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6087'. [ 1761.613307][T26254] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1761.648583][T26254] overlayfs: missing 'lowerdir' [ 1763.314960][T26267] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6097'. [ 1765.771877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.289134][T26308] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.6107'. [ 1775.810709][ T28] audit: type=1326 audit(1775.758:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1775.868016][T26370] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1775.896480][T26370] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1775.899213][ T28] audit: type=1326 audit(1775.758:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1775.939026][T26370] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1775.980639][T26370] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 1775.987352][T26370] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1776.008603][ T28] audit: type=1326 audit(1775.768:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1776.030541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1776.037130][ T28] audit: type=1326 audit(1775.768:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1776.061697][ T28] audit: type=1326 audit(1775.768:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1776.064420][T26370] comedi comedi3: 8255: I/O port conflict (0x20000000,4) [ 1776.091095][ T28] audit: type=1326 audit(1775.768:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1776.112962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1776.121157][T26370] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1776.134304][T26370] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1776.145905][ T28] audit: type=1326 audit(1775.768:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1776.175483][ T28] audit: type=1326 audit(1775.768:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1776.197386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1776.213999][ T28] audit: type=1326 audit(1775.768:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1776.242246][ T28] audit: type=1326 audit(1775.768:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26369 comm="syz.2.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc99cdd9 code=0x7ffc0000 [ 1776.264114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1781.531505][T26431] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1781.574042][T26431] overlayfs: failed to look up (tracing) for ino (-66) [ 1784.639377][T24311] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1784.839980][T24311] usb 3-1: Using ep0 maxpacket: 16 [ 1784.882186][T24311] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1784.922169][T24311] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1785.219531][T24311] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1785.259394][T24311] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1785.286065][T24311] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1785.322049][T26478] netlink: 'syz.7.6157': attribute type 7 has an invalid length. [ 1785.330155][T26478] netlink: 'syz.7.6157': attribute type 8 has an invalid length. [ 1785.358998][T24311] usb 3-1: config 0 has no interface number 0 [ 1785.408079][T24311] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1785.459558][T24311] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1785.489163][T24311] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1785.511288][T24311] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1785.532109][T24311] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1785.543309][T24311] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1785.559836][T24311] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1785.589029][T24311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.609141][T24311] usb 3-1: Product: syz [ 1785.613627][T24311] usb 3-1: Manufacturer: syz [ 1785.627971][T24311] usb 3-1: SerialNumber: syz [ 1785.636368][T24311] usb 3-1: config 0 descriptor?? [ 1785.668864][T24311] usb 3-1: selecting invalid altsetting 2 [ 1786.963125][T24311] parport0: fix this legacy no-device port driver! [ 1786.989333][T24311] usb 3-1: USB disconnect, device number 104 [ 1789.167083][T26523] netlink: 'syz.2.6173': attribute type 7 has an invalid length. [ 1789.175450][T26523] netlink: 'syz.2.6173': attribute type 8 has an invalid length. [ 1790.089237][T14854] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1790.199215][T24313] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1790.339632][T14854] usb 1-1: Using ep0 maxpacket: 16 [ 1790.452967][T24313] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.486932][T14854] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1790.621734][T14854] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1790.649638][T24313] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.678579][T14854] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1790.698151][T24313] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1790.717911][T14854] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1790.731174][T24313] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.744809][T14854] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1790.767689][T24313] usb 8-1: config 0 descriptor?? [ 1790.789211][T14854] usb 1-1: config 0 has no interface number 0 [ 1790.811720][T14854] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1790.849757][T14854] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1790.872483][T14854] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1790.887160][T14854] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1790.902616][T14854] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1790.910079][T14854] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1790.921048][T14854] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1790.939052][T14854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.947748][T14854] usb 1-1: Product: syz [ 1790.959932][T14854] usb 1-1: Manufacturer: syz [ 1790.964771][T14854] usb 1-1: SerialNumber: syz [ 1791.027861][T14854] usb 1-1: config 0 descriptor?? [ 1791.042014][T14854] usb 1-1: selecting invalid altsetting 2 [ 1791.241886][T24313] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x2 [ 1791.248878][T24313] pyra 0003:1E7D:2CF6.0017: item fetching failed at offset 6/7 [ 1791.265445][T24313] pyra 0003:1E7D:2CF6.0017: parse failed [ 1791.271651][T24313] pyra: probe of 0003:1E7D:2CF6.0017 failed with error -22 [ 1791.883269][T14854] parport1: fix this legacy no-device port driver! [ 1792.148097][T14854] usb 1-1: USB disconnect, device number 6 [ 1792.179580][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.370628][T26561] netlink: 'syz.6.6189': attribute type 7 has an invalid length. [ 1792.378512][T26561] netlink: 'syz.6.6189': attribute type 8 has an invalid length. [ 1792.676793][T26563] sctp: [Deprecated]: syz.2.6190 (pid 26563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1792.676793][T26563] Use struct sctp_sack_info instead [ 1792.797419][T14854] usb 8-1: USB disconnect, device number 98 [ 1794.221558][T26594] sctp: [Deprecated]: syz.7.6200 (pid 26594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1794.221558][T26594] Use struct sctp_sack_info instead [ 1794.676051][T26602] netlink: 'syz.7.6204': attribute type 7 has an invalid length. [ 1794.684445][T26602] netlink: 'syz.7.6204': attribute type 8 has an invalid length. [ 1795.699825][T26613] binder: BINDER_SET_CONTEXT_MGR already set [ 1795.729086][T26613] binder: 26611:26613 ioctl 4018620d 200000000100 returned -16 [ 1796.790006][T26625] sctp: [Deprecated]: syz.7.6212 (pid 26625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1796.790006][T26625] Use struct sctp_sack_info instead [ 1797.160870][T26633] netlink: 'syz.0.6215': attribute type 7 has an invalid length. [ 1797.168744][T26633] netlink: 'syz.0.6215': attribute type 8 has an invalid length. [ 1798.221469][T26650] sctp: [Deprecated]: syz.2.6222 (pid 26650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1798.221469][T26650] Use struct sctp_sack_info instead [ 1799.567065][T26671] netlink: 'syz.6.6228': attribute type 7 has an invalid length. [ 1799.575036][T26671] netlink: 'syz.6.6228': attribute type 8 has an invalid length. [ 1800.675911][T26694] sctp: [Deprecated]: syz.0.6232 (pid 26694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1800.675911][T26694] Use struct sctp_sack_info instead [ 1800.847905][T26701] fuse: Bad value for 'fd' [ 1801.489403][T26707] netlink: 'syz.7.6239': attribute type 7 has an invalid length. [ 1801.497236][T26707] netlink: 'syz.7.6239': attribute type 8 has an invalid length. [ 1802.545213][T26724] fuse: Bad value for 'fd' [ 1802.597318][T26729] binder: BINDER_SET_CONTEXT_MGR already set [ 1802.614892][T26729] binder: 26728:26729 ioctl 4018620d 200000004a80 returned -16 [ 1804.242220][T26751] netlink: 'syz.7.6254': attribute type 7 has an invalid length. [ 1804.250109][T26751] netlink: 'syz.7.6254': attribute type 8 has an invalid length. [ 1805.391882][T26760] fuse: Bad value for 'fd' [ 1805.659522][T24314] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1807.973497][T26767] binder: BINDER_SET_CONTEXT_MGR already set [ 1807.988794][T26767] binder: 26766:26767 ioctl 4018620d 200000004a80 returned -16 [ 1808.152131][T24314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1808.175704][T24314] usb 1-1: not running at top speed; connect to a high speed hub [ 1808.201593][T24314] usb 1-1: config 249 has an invalid interface number: 203 but max is 0 [ 1808.222312][T24314] usb 1-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.249060][T24314] usb 1-1: config 249 has no interface number 0 [ 1808.265844][T24314] usb 1-1: config 249 interface 203 altsetting 184 has an invalid endpoint with address 0x2C, skipping [ 1808.314112][T24314] usb 1-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1808.344404][T24314] usb 1-1: config 249 interface 203 has no altsetting 0 [ 1808.452535][T24314] usb 1-1: string descriptor 0 read error: -71 [ 1808.479206][T24314] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1808.488367][T24314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.691066][T24314] usb 1-1: can't set config #249, error -71 [ 1808.709731][T24314] usb 1-1: USB disconnect, device number 7 [ 1808.757452][T26790] netlink: 'syz.6.6266': attribute type 7 has an invalid length. [ 1808.766897][T26790] netlink: 'syz.6.6266': attribute type 8 has an invalid length. [ 1811.839682][T26807] syz_tun: entered allmulticast mode [ 1812.021551][T26807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6270'. [ 1812.208208][T26807] syz_tun (unregistering): left allmulticast mode [ 1812.379214][T13349] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1812.604453][T13349] usb 3-1: Using ep0 maxpacket: 16 [ 1812.628799][T13349] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1812.664761][T13349] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1812.719283][T13349] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1812.727553][T13349] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1812.759318][T13349] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1812.779035][T13349] usb 3-1: config 0 has no interface number 0 [ 1812.785262][T13349] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1812.808972][T13349] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1812.818895][T13349] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1812.878993][T13349] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.914666][T13349] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1812.939178][T13349] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1812.968403][T13349] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1813.008412][T13349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.028709][T13349] usb 3-1: Product: syz [ 1813.059399][T13349] usb 3-1: Manufacturer: syz [ 1813.064090][T13349] usb 3-1: SerialNumber: syz [ 1813.110276][T13349] usb 3-1: config 0 descriptor?? [ 1813.155544][T13349] usb 3-1: selecting invalid altsetting 2 [ 1813.959095][T13349] parport2: fix this legacy no-device port driver! [ 1814.186417][T13349] usb 3-1: USB disconnect, device number 105 [ 1814.833844][T26826] netlink: 'syz.7.6278': attribute type 7 has an invalid length. [ 1814.841909][T26826] netlink: 'syz.7.6278': attribute type 8 has an invalid length. [ 1815.834169][T26836] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.6279'. [ 1820.719137][T26869] netlink: 'syz.6.6287': attribute type 7 has an invalid length. [ 1820.727072][T26869] netlink: 'syz.6.6287': attribute type 8 has an invalid length. [ 1821.495929][T13349] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1821.701463][T13349] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1821.710301][T13349] usb 1-1: not running at top speed; connect to a high speed hub [ 1821.730571][T13349] usb 1-1: config 249 has an invalid interface number: 203 but max is 0 [ 1821.747213][T13349] usb 1-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.770701][T13349] usb 1-1: config 249 has no interface number 0 [ 1821.783875][T13349] usb 1-1: config 249 interface 203 altsetting 184 has an invalid endpoint with address 0x2C, skipping [ 1821.807511][T13349] usb 1-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1821.835852][T13349] usb 1-1: config 249 interface 203 has no altsetting 0 [ 1821.853366][T13349] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1821.865984][T13349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.878697][T13349] usb 1-1: Product: syz [ 1821.887966][T13349] usb 1-1: Manufacturer: syz [ 1821.895673][T13349] usb 1-1: SerialNumber: syz [ 1822.124989][T13349] rtl8150 1-1:249.203: couldn't find required endpoints [ 1822.139331][T13349] rtl8150: probe of 1-1:249.203 failed with error -5 [ 1822.161754][T13349] usb 1-1: USB disconnect, device number 8 [ 1824.109298][T24311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1824.218322][T26900] netlink: 'syz.7.6297': attribute type 7 has an invalid length. [ 1824.226368][T26900] netlink: 'syz.7.6297': attribute type 8 has an invalid length. [ 1824.979124][T24311] usb 1-1: Using ep0 maxpacket: 32 [ 1824.991510][T24311] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1825.009132][T24311] usb 1-1: config 0 has no interface number 0 [ 1825.029618][T24311] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1825.046566][T24311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.065080][T24311] usb 1-1: Product: syz [ 1825.081418][T24311] usb 1-1: Manufacturer: syz [ 1825.086124][T24311] usb 1-1: SerialNumber: syz [ 1825.127542][T24311] usb 1-1: config 0 descriptor?? [ 1825.142184][T24311] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1825.375366][T24311] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1827.070112][T24311] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1827.201448][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1827.209618][T24313] usb 1-1: USB disconnect, device number 9 [ 1827.272947][T24313] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1827.334611][T24313] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1827.348217][T24313] quatech2 1-1:0.51: device disconnected [ 1829.895275][T24313] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1830.293963][T24313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1830.310870][T24313] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1830.425323][T24313] usb 1-1: can't read configurations, error -71 [ 1835.219211][T26956] netlink: 'syz.2.6307': attribute type 7 has an invalid length. [ 1835.227034][T26956] netlink: 'syz.2.6307': attribute type 8 has an invalid length. [ 1840.489074][T14854] usb 8-1: new full-speed USB device number 99 using dummy_hcd [ 1840.702635][T14854] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1840.756973][T14854] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1840.774289][T14854] usb 8-1: can't read configurations, error -71 [ 1847.727166][T27031] netlink: 'syz.7.6326': attribute type 7 has an invalid length. [ 1847.735710][T27031] netlink: 'syz.7.6326': attribute type 8 has an invalid length. [ 1850.436783][T24314] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1850.444633][T14854] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1852.225662][T14854] usb 3-1: Using ep0 maxpacket: 8 [ 1852.230903][T24314] usb 8-1: Using ep0 maxpacket: 32 [ 1852.346718][T14854] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1852.370639][T14854] usb 3-1: can't read configurations, error -71 [ 1852.389683][T24314] usb 8-1: unable to read config index 0 descriptor/all [ 1852.396769][T24314] usb 8-1: can't read configurations, error -71 [ 1854.529598][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1856.935046][T27097] netlink: 'syz.0.6344': attribute type 7 has an invalid length. [ 1856.943223][T27097] netlink: 'syz.0.6344': attribute type 8 has an invalid length. [ 1859.240009][T24314] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1860.979224][T24314] usb 3-1: Using ep0 maxpacket: 8 [ 1860.990272][T24314] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1861.010964][T24314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.045104][T24314] usb 3-1: Product: syz [ 1861.066870][T24314] usb 3-1: Manufacturer: syz [ 1861.079050][T24314] usb 3-1: SerialNumber: syz [ 1861.101775][T24314] usb 3-1: config 0 descriptor?? [ 1861.317208][T24314] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1861.365285][T27132] netlink: 'syz.7.6362': attribute type 7 has an invalid length. [ 1861.373670][T27132] netlink: 'syz.7.6362': attribute type 8 has an invalid length. [ 1862.327813][T24314] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1862.345201][T24314] usb 3-1: USB disconnect, device number 108 [ 1867.417460][T27180] netlink: 'syz.0.6372': attribute type 7 has an invalid length. [ 1867.425341][T27180] netlink: 'syz.0.6372': attribute type 8 has an invalid length. [ 1872.754051][T27220] binder: 27219:27220 ioctl 4018620d 0 returned -22 [ 1874.048440][T27231] netlink: 'syz.6.6383': attribute type 7 has an invalid length. [ 1874.056784][T27231] netlink: 'syz.6.6383': attribute type 8 has an invalid length. [ 1880.758789][T27283] netlink: 'syz.0.6396': attribute type 7 has an invalid length. [ 1880.766995][T27283] netlink: 'syz.0.6396': attribute type 8 has an invalid length. [ 1883.245890][T27301] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6403'. [ 1887.167440][T27346] netlink: 'syz.2.6407': attribute type 7 has an invalid length. [ 1887.175472][T27346] netlink: 'syz.2.6407': attribute type 8 has an invalid length. [ 1891.123163][T27375] binder: BINDER_SET_CONTEXT_MGR already set [ 1891.156837][T27375] binder: 27374:27375 ioctl 4018620d 200000004a80 returned -16 [ 1892.423589][T27382] netlink: 'syz.7.6424': attribute type 7 has an invalid length. [ 1892.431602][T27382] netlink: 'syz.7.6424': attribute type 8 has an invalid length. [ 1898.163987][T27424] binder: BINDER_SET_CONTEXT_MGR already set [ 1898.170623][T27424] binder: 27423:27424 ioctl 4018620d 200000004a80 returned -16 [ 1899.016266][T27439] netlink: 'syz.7.6435': attribute type 7 has an invalid length. [ 1899.024371][T27439] netlink: 'syz.7.6435': attribute type 8 has an invalid length. [ 1901.818562][T27467] binder: BINDER_SET_CONTEXT_MGR already set [ 1901.824783][T27467] binder: 27466:27467 ioctl 4018620d 200000004a80 returned -16 [ 1903.949154][T27478] netlink: 'syz.6.6453': attribute type 7 has an invalid length. [ 1903.956938][T27478] netlink: 'syz.6.6453': attribute type 8 has an invalid length. [ 1906.129332][T24314] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1906.418256][T24314] usb 1-1: Using ep0 maxpacket: 16 [ 1906.499054][T24314] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1906.507554][T24314] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1906.576173][T24314] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1906.608322][T24314] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1906.622217][T24314] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1906.632647][T24314] usb 1-1: config 0 has no interface number 0 [ 1906.639159][T24314] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1906.650432][T24314] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1906.661780][T24314] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1906.671807][T24314] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1906.685735][T24314] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1906.692962][T24314] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1906.706144][T24314] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1906.719421][T24314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.733151][T24314] usb 1-1: Product: syz [ 1906.737528][T24314] usb 1-1: Manufacturer: syz [ 1906.753934][T24314] usb 1-1: SerialNumber: syz [ 1906.773930][T24314] usb 1-1: config 0 descriptor?? [ 1906.790537][T24314] usb 1-1: selecting invalid altsetting 2 [ 1907.428411][T27514] binder: 27513:27514 ioctl c0306201 0 returned -14 [ 1909.282648][T24314] get_1284_register timeout [ 1909.287567][ C0] usb 1-1: async_complete: urb error -104 [ 1909.408765][T24314] usb 1-1: USB disconnect, device number 12 [ 1909.741743][T27539] netlink: 'syz.6.6465': attribute type 7 has an invalid length. [ 1909.749681][T27539] netlink: 'syz.6.6465': attribute type 8 has an invalid length. [ 1914.509770][T27567] binder: 27566:27567 ioctl c0306201 0 returned -14 [ 1915.005276][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.096152][T27581] netlink: 'syz.2.6479': attribute type 7 has an invalid length. [ 1915.104195][T27581] netlink: 'syz.2.6479': attribute type 8 has an invalid length. [ 1916.022141][T27588] sctp: [Deprecated]: syz.6.6483 (pid 27588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1916.022141][T27588] Use struct sctp_sack_info instead [ 1920.146736][T27615] netlink: 'syz.7.6491': attribute type 7 has an invalid length. [ 1920.154819][T27615] netlink: 'syz.7.6491': attribute type 8 has an invalid length. [ 1920.571738][T27619] binder: 27618:27619 ioctl c0306201 0 returned -14 [ 1920.616279][T27623] sctp: [Deprecated]: syz.2.6494 (pid 27623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1920.616279][T27623] Use struct sctp_sack_info instead [ 1924.583009][T27650] netlink: 'syz.7.6501': attribute type 7 has an invalid length. [ 1924.591067][T27650] netlink: 'syz.7.6501': attribute type 8 has an invalid length. [ 1925.466927][T27657] sctp: [Deprecated]: syz.2.6504 (pid 27657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1925.466927][T27657] Use struct sctp_sack_info instead [ 1926.590517][T27664] net_ratelimit: 44 callbacks suppressed [ 1926.590531][T27664] dccp_invalid_packet: P.Data Offset(4) too small [ 1928.927238][T27693] netlink: 'syz.0.6511': attribute type 7 has an invalid length. [ 1928.935253][T27693] netlink: 'syz.0.6511': attribute type 8 has an invalid length. [ 1929.982292][T27708] dccp_invalid_packet: P.Data Offset(4) too small [ 1931.605037][T27733] netlink: 'syz.7.6522': attribute type 7 has an invalid length. [ 1931.612962][T27733] netlink: 'syz.7.6522': attribute type 8 has an invalid length. [ 1935.185531][T27759] netlink: 'syz.0.6533': attribute type 7 has an invalid length. [ 1935.193712][T27759] netlink: 'syz.0.6533': attribute type 8 has an invalid length. [ 1937.288363][T27789] ALSA: mixer_oss: invalid OSS volume '' [ 1938.348654][T27810] ALSA: mixer_oss: invalid OSS volume '' [ 1938.604986][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 1938.605003][ T28] audit: type=1326 audit(1938.548:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1938.696956][ T28] audit: type=1326 audit(1938.588:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1938.757517][ C1] sd 0:0:1:0: [sda] tag#6324 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1938.768102][ C1] sd 0:0:1:0: [sda] tag#6324 CDB: Write(6) 0a 00 00 00 04 00 00 00 20 01 00 00 [ 1938.778005][ T28] audit: type=1326 audit(1938.598:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1938.806591][ T28] audit: type=1326 audit(1938.598:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1938.829445][ T28] audit: type=1326 audit(1938.598:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1938.851942][ T28] audit: type=1326 audit(1938.598:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1938.881417][ T28] audit: type=1326 audit(1938.598:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1938.905918][ T28] audit: type=1326 audit(1938.608:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1938.935353][ T28] audit: type=1326 audit(1938.608:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1938.964505][ T28] audit: type=1326 audit(1938.608:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27825 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7132d9cdd9 code=0x7ffc0000 [ 1939.043638][T27834] ALSA: mixer_oss: invalid OSS volume '' [ 1939.051375][T27832] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.6561'. [ 1940.676424][T27861] ALSA: mixer_oss: invalid OSS volume '' [ 1941.903189][T27873] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.6575'. [ 1942.253086][T27889] ALSA: mixer_oss: invalid OSS volume '' [ 1946.754652][T27932] ALSA: mixer_oss: invalid OSS volume '' [ 1947.244431][T27943] tmpfs: Bad value for 'nr_blocks' [ 1948.128638][T27959] ALSA: mixer_oss: invalid OSS volume '' [ 1948.619579][T27974] tmpfs: Bad value for 'nr_blocks' [ 1949.530362][T27988] ALSA: mixer_oss: invalid OSS volume '' [ 1950.107372][T28005] tmpfs: Bad value for 'nr_blocks' [ 1952.492635][T28043] dvmrp2: entered allmulticast mode [ 1955.620125][T24314] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1955.861586][T24314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1955.921897][T24314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1956.025265][T24314] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1956.116452][T24314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.347246][T24314] usb 8-1: config 0 descriptor?? [ 1956.841072][T24314] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x2 [ 1956.847984][T24314] pyra 0003:1E7D:2CF6.0018: item fetching failed at offset 6/7 [ 1956.862038][T24314] pyra 0003:1E7D:2CF6.0018: parse failed [ 1956.867965][T24314] pyra: probe of 0003:1E7D:2CF6.0018 failed with error -22 [ 1956.880749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1957.745307][T28167] binder: 28166:28167 ioctl c0306201 0 returned -14 [ 1958.308648][T28193] ALSA: mixer_oss: invalid OSS volume '' [ 1958.334148][T24314] usb 8-1: USB disconnect, device number 103 [ 1958.552451][T28203] gretap0: entered promiscuous mode [ 1958.562637][T28203] vlan2: entered promiscuous mode [ 1958.923438][T28220] ALSA: mixer_oss: invalid OSS volume '' [ 1959.376204][T28229] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6707'. [ 1962.110102][T28253] ALSA: mixer_oss: invalid OSS volume '' [ 1963.389082][T28275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6725'. [ 1963.958958][T28283] ALSA: mixer_oss: invalid OSS volume 'M' [ 1964.465158][T28298] [ 1964.468497][T28298] ============================= [ 1964.473514][T28298] WARNING: suspicious RCU usage [ 1964.478432][T28298] syzkaller #0 Not tainted [ 1964.482960][T28298] ----------------------------- [ 1964.487853][T28298] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1964.496472][T28298] [ 1964.496472][T28298] other info that might help us debug this: [ 1964.496472][T28298] [ 1964.507041][T28298] [ 1964.507041][T28298] rcu_scheduler_active = 2, debug_locks = 1 [ 1964.515326][T28298] 1 lock held by syz.7.6734/28298: [ 1964.521057][T28298] #0: ffffffff8d1322c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1964.531431][T28298] [ 1964.531431][T28298] stack backtrace: [ 1964.537376][T28298] CPU: 0 PID: 28298 Comm: syz.7.6734 Not tainted syzkaller #0 [ 1964.544898][T28298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1964.555009][T28298] Call Trace: [ 1964.558328][T28298] [ 1964.561292][T28298] dump_stack_lvl+0x18c/0x250 [ 1964.566039][T28298] ? show_regs_print_info+0x20/0x20 [ 1964.571288][T28298] ? load_image+0x420/0x420 [ 1964.575842][T28298] lockdep_rcu_suspicious+0x1e1/0x300 [ 1964.581259][T28298] get_callchain_entry+0x2a9/0x3c0 [ 1964.586434][T28298] get_perf_callchain+0xc6/0x510 [ 1964.591403][T28298] ? put_callchain_entry+0xb0/0xb0 [ 1964.596554][T28298] ? preempt_schedule_common+0x82/0xc0 [ 1964.602145][T28298] ? preempt_schedule+0xc0/0xd0 [ 1964.607031][T28298] ? schedule_preempt_disabled+0x20/0x20 [ 1964.612713][T28298] __bpf_get_stack+0x2e4/0x540 [ 1964.617520][T28298] ? stack_map_get_build_id_offset+0x720/0x720 [ 1964.623722][T28298] ? __cant_sleep+0x220/0x220 [ 1964.628434][T28298] ? bpf_prog_d43750871481577d+0x45/0x49 [ 1964.634100][T28298] bpf_get_stack_raw_tp+0x1a9/0x210 [ 1964.639343][T28298] bpf_prog_d43750871481577d+0x45/0x49 [ 1964.644835][T28298] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1964.650305][T28298] bpf_prog_test_run_syscall+0x317/0x4a0 [ 1964.655982][T28298] ? sock_gen_cookie+0x60/0x60 [ 1964.660874][T28298] ? sock_gen_cookie+0x60/0x60 [ 1964.665690][T28298] bpf_prog_test_run+0x321/0x390 [ 1964.670670][T28298] __sys_bpf+0x49d/0x890 [ 1964.674952][T28298] ? bpf_link_show_fdinfo+0x390/0x390 [ 1964.680376][T28298] ? lock_chain_count+0x20/0x20 [ 1964.685263][T28298] __x64_sys_bpf+0x7c/0x90 [ 1964.689708][T28298] do_syscall_64+0x55/0xa0 [ 1964.694165][T28298] ? clear_bhb_loop+0x40/0x90 [ 1964.698897][T28298] ? clear_bhb_loop+0x40/0x90 [ 1964.703617][T28298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1964.709544][T28298] RIP: 0033:0x7f4c91f9cdd9 [ 1964.713986][T28298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1964.733923][T28298] RSP: 002b:00007f4c92d9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1964.742380][T28298] RAX: ffffffffffffffda RBX: 00007f4c92215fa0 RCX: 00007f4c91f9cdd9 [ 1964.750383][T28298] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1964.758385][T28298] RBP: 00007f4c92032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1964.766387][T28298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1964.774389][T28298] R13: 00007f4c92216038 R14: 00007f4c92215fa0 R15: 00007ffd0f60c0b8 [ 1964.782405][T28298]