last executing test programs: 2m31.720164511s ago: executing program 3 (id=1416): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0xc0806, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x7f) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x8) 2m31.459933224s ago: executing program 3 (id=1417): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.981706111s ago: executing program 3 (id=1421): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 2m30.76079733s ago: executing program 3 (id=1423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3a, 0x0, 0x2}]}) 2m30.408513706s ago: executing program 3 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 2m30.03523811s ago: executing program 3 (id=1431): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x38) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 2m14.991733021s ago: executing program 32 (id=1431): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x38) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 12.64975158s ago: executing program 5 (id=2171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8930, &(0x7f0000000000)="f3ed") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0xfffffffffffffff8, 0x3, 0x0, 0x2004c5, 0x8000000, 0x0, 0x0, 0x1000007, 0x2, 0x5, 0x104b, 0x2, 0x8001], 0x0, 0x282240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.194806116s ago: executing program 5 (id=2175): syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}, 0x0, 0x48004, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x15, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x10, 0x0, 0x5, 0x101, 0x1000, 0xfffffffffffffffd], 0x8080000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.674588973s ago: executing program 5 (id=2178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f00000002c0)="4321a0e529d0d15d1f5b", 0xa}], 0x2) 11.325059416s ago: executing program 4 (id=2179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.232389716s ago: executing program 5 (id=2184): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 8.819291697s ago: executing program 4 (id=2190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f00000002c0)="4321a0e529d0d15d1f5b0ccc95e30830", 0x10}], 0x3) 8.531475944s ago: executing program 0 (id=2191): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) 8.454429066s ago: executing program 2 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @random="a6e286036e89", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) 8.392384349s ago: executing program 1 (id=2194): open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 8.386986043s ago: executing program 2 (id=2195): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 7.923989139s ago: executing program 2 (id=2198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffeff}]}) lseek(0xffffffffffffffff, 0x2000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r2, 0x406, r3) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x100000}, 0x20) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x102, 0x0) sendfile(r5, r5, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x17, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000000467060010000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000008500aa802d0000a500000085000000a1000000185e0000020000000000000000008000b29238b035e2b3e7ff527b1ec944bbcb1da0284987a85ada7328dbde1bbd9738ba574f071a57d0fa9b67f4ccb8ddda572845ceec37082a7d0928e851c950de7d38a9120bf31a8326847570cc826913370b9dd45f5de6e909f9944b3482b33ccfaff0f3f42fd398451924380e4c7f7e4c65e0e3281c004001ecad48dcc9976a50053016d26d23c360751dd4a926fc4a2cd9b13613136af80fdf"], &(0x7f0000000040)='syzkaller\x00', 0x1000, 0x1, &(0x7f0000000140)=""/1, 0x41100, 0x40, '\x00', 0x0, @netfilter, r5, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0xf23d}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x8001, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) 7.236353074s ago: executing program 1 (id=2199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63", 0xa5}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.023425322s ago: executing program 5 (id=2200): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) unshare(0x2040400) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_setup(0xbf, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) 5.506666365s ago: executing program 5 (id=2201): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.344360695s ago: executing program 1 (id=2202): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x0, 0x3, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.65263517s ago: executing program 1 (id=2203): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4f", 0x0, 0x15}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) 4.350775345s ago: executing program 1 (id=2206): openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) pipe(&(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setresuid(0xee01, 0x0, 0xffffffffffffffff) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3e, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x4, 0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol]}}}}}}, 0x46) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) write$uinput_user_dev(r4, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x50, 0x8000, 0x5, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x9, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0xa0, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x0, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0xfffffffe, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x800, 0x7, 0x9, 0x7, 0x7, 0x5, 0x80000001, 0x8, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x4, 0xfffffc00, 0x1, 0x4, 0x3ff, 0xfffffff8, 0x7f, 0x1, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe34, 0x3, 0x0, 0x1, 0xe8, 0xffff8004, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x47, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x11, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000005, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x81, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0xaea, 0xcd5e, 0x59, 0x9, 0x6, 0x8, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040010ec8a9d6c270010000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) unshare(0xc020680) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x40002) syz_open_dev$media(0x0, 0x1, 0x8c01) 4.332013415s ago: executing program 2 (id=2207): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000274c"], 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='grpquota_block_hardl']) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 4.252229691s ago: executing program 0 (id=2208): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 3.37601005s ago: executing program 0 (id=2210): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 2.544718008s ago: executing program 4 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000180)="b97d", &(0x7f00000004c0)=""/178, 0x4}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x20, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350180696d367265673000000020000000001400400076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d61449311d070000000140035006772e530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x20040014) shutdown(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close(r0) 1.27418295s ago: executing program 1 (id=2212): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4f", 0x0, 0x15}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) 1.176079491s ago: executing program 2 (id=2213): openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) pipe(&(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setresuid(0xee01, 0x0, 0xffffffffffffffff) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3e, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x4, 0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol]}}}}}}, 0x46) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) write$uinput_user_dev(r4, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x50, 0x8000, 0x5, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x9, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0xa0, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x0, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0xfffffffe, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x800, 0x7, 0x9, 0x7, 0x7, 0x5, 0x80000001, 0x8, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x4, 0xfffffc00, 0x1, 0x4, 0x3ff, 0xfffffff8, 0x7f, 0x1, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe34, 0x3, 0x0, 0x1, 0xe8, 0xffff8004, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x47, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x11, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000005, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x81, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0xaea, 0xcd5e, 0x59, 0x9, 0x6, 0x8, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040010ec8a9d6c270010000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) unshare(0xc020680) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x40002) syz_open_dev$media(0x0, 0x1, 0x8c01) 30.205215ms ago: executing program 0 (id=2214): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00", @ANYRES32], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)="627e4b9451d0dcdd39", 0x9) 0s ago: executing program 4 (id=2215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) kernel console output (not intermixed with test programs): 7031][ T8300] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.707'. [ 395.411155][ T8302] syz.2.708 (8302): drop_caches: 2 [ 399.340709][ T8330] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.720'. [ 399.452999][ T5869] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 399.493597][ T8337] netlink: 68 bytes leftover after parsing attributes in process `syz.4.723'. [ 399.493615][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 399.493622][ T8337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.723'. [ 399.602995][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 399.612365][ T5869] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 399.612383][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.612393][ T5869] usb 4-1: Product: syz [ 399.612400][ T5869] usb 4-1: Manufacturer: syz [ 399.612406][ T5869] usb 4-1: SerialNumber: syz [ 399.617828][ T5869] usb 4-1: config 0 descriptor?? [ 399.858119][ T5869] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.432940][ T5876] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 400.464594][ T5869] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 400.597261][ T5876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 400.597293][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 400.597317][ T5876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 400.605445][ T5876] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 400.605473][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.605491][ T5876] usb 3-1: Product: syz [ 400.605504][ T5876] usb 3-1: Manufacturer: syz [ 400.605517][ T5876] usb 3-1: SerialNumber: syz [ 400.693285][ T5876] usb 3-1: config 0 descriptor?? [ 400.695197][ T8351] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 400.695342][ T8351] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 400.698289][ T5876] usb 3-1: ucan: probing device on interface #0 [ 400.902599][ T5876] usb 3-1: ucan: device protocol version 0 is not supported [ 400.902624][ T5876] usb 3-1: ucan: probe failed; try to update the device firmware [ 403.305730][ T5861] usb 4-1: USB disconnect, device number 17 [ 404.267657][ T31] usb 3-1: USB disconnect, device number 11 [ 404.999366][ T8449] syz.2.766 (8449): drop_caches: 2 [ 405.331660][ T8456] fuse: Bad value for 'fd' [ 407.180007][ T8479] netlink: 52 bytes leftover after parsing attributes in process `syz.0.775'. [ 409.559021][ T8498] loop8: detected capacity change from 0 to 8 [ 409.559684][ T8498] Dev loop8: unable to read RDB block 8 [ 409.559711][ T8498] loop8: unable to read partition table [ 409.559825][ T8498] loop8: partition table beyond EOD, truncated [ 409.559834][ T8498] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 410.822656][ T8507] netlink: 'syz.3.787': attribute type 4 has an invalid length. [ 410.988889][ T8509] netlink: 'syz.3.787': attribute type 4 has an invalid length. [ 413.070473][ T8527] netlink: 68 bytes leftover after parsing attributes in process `syz.0.797'. [ 413.070491][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 413.070499][ T8527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.797'. [ 413.120611][ T8531] loop8: detected capacity change from 0 to 8 [ 413.131483][ T8531] Dev loop8: unable to read RDB block 8 [ 413.131527][ T8531] loop8: unable to read partition table [ 413.131747][ T8531] loop8: partition table beyond EOD, truncated [ 413.131764][ T8531] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 415.012867][ T8563] loop8: detected capacity change from 0 to 8 [ 415.031526][ T8563] Dev loop8: unable to read RDB block 8 [ 415.031555][ T8563] loop8: unable to read partition table [ 415.046186][ T8563] loop8: partition table beyond EOD, truncated [ 415.096005][ T8563] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 415.820850][ T8567] netlink: 'syz.2.812': attribute type 4 has an invalid length. [ 415.926074][ T8569] netlink: 'syz.2.812': attribute type 4 has an invalid length. [ 417.445797][ T8585] syz.0.819 (8585): drop_caches: 2 [ 418.906846][ T8593] syz.4.821 (8593): drop_caches: 2 [ 420.264804][ T8606] loop8: detected capacity change from 0 to 8 [ 420.323167][ T8606] Dev loop8: unable to read RDB block 8 [ 420.323199][ T8606] loop8: unable to read partition table [ 420.323322][ T8606] loop8: partition table beyond EOD, truncated [ 420.323343][ T8606] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 420.944231][ T8610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.946450][ T8610] tipc: Started in network mode [ 420.946476][ T8610] tipc: Node identity 7a1b594ca3d5, cluster identity 4711 [ 420.946653][ T8610] tipc: Enabled bearer , priority 0 [ 421.390301][ T8609] tipc: Disabling bearer [ 422.861083][ T8636] netlink: 68 bytes leftover after parsing attributes in process `syz.3.837'. [ 422.861102][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 422.861109][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.837'. [ 423.033014][ T5935] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 423.183036][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 423.205022][ T5935] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 423.205047][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.205057][ T5935] usb 1-1: Product: syz [ 423.205064][ T5935] usb 1-1: Manufacturer: syz [ 423.205071][ T5935] usb 1-1: SerialNumber: syz [ 423.208534][ T5935] usb 1-1: config 0 descriptor?? [ 423.683433][ T5935] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 017 [ 424.107805][ T5869] usb 1-1: USB disconnect, device number 17 [ 425.991736][ T8679] syz.0.851 (8679): drop_caches: 2 [ 426.703532][ T8688] binder: BINDER_SET_CONTEXT_MGR already set [ 426.703542][ T8688] binder: 8687:8688 ioctl 4018620d 200000004a80 returned -16 [ 433.353017][ T809] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 433.482952][ T809] usb 1-1: device descriptor read/64, error -71 [ 435.143132][ T809] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 435.273542][ T809] usb 1-1: device descriptor read/64, error -71 [ 435.383372][ T809] usb usb1-port1: attempt power cycle [ 435.752987][ T809] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 435.773488][ T809] usb 1-1: device descriptor read/8, error -71 [ 436.016443][ T809] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 436.143227][ T5876] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 436.292949][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 436.381452][ T5876] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 436.381481][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.381499][ T5876] usb 3-1: Product: syz [ 436.381512][ T5876] usb 3-1: Manufacturer: syz [ 436.381525][ T5876] usb 3-1: SerialNumber: syz [ 437.657628][ T5876] usb 3-1: config 0 descriptor?? [ 437.659603][ T809] usb 1-1: device descriptor read/8, error -71 [ 437.763311][ T809] usb usb1-port1: unable to enumerate USB device [ 437.873345][ T5876] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 438.463056][ T5869] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 438.617877][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 438.634742][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.635352][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.635381][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.635401][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.635420][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.638669][ T5869] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 438.638695][ T5869] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 438.638923][ T5869] usb 4-1: Manufacturer: syz [ 438.771071][ T5869] usb 4-1: config 0 descriptor?? [ 439.213086][ T5869] rc_core: IR keymap rc-hauppauge not found [ 439.213105][ T5869] Registered IR keymap rc-empty [ 439.216179][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 439.311876][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 439.356793][ T5876] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 439.410020][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 439.411591][ T5876] usb 3-1: USB disconnect, device number 12 [ 439.610480][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 440.469550][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.469618][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.544778][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.563356][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.593122][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.613001][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.633182][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.652964][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.672978][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.703544][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.724832][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.743274][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 440.916162][ T5869] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 440.916187][ T5869] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 440.946842][ T5869] usb 4-1: USB disconnect, device number 18 [ 441.222760][ T8817] syz.2.905 (8817): drop_caches: 2 [ 441.827913][ T8829] loop2: detected capacity change from 0 to 7 [ 441.838081][ T8829] Dev loop2: unable to read RDB block 7 [ 441.838112][ T8829] loop2: AHDI p1 p2 p3 [ 441.838139][ T8829] loop2: partition table partially beyond EOD, truncated [ 441.838453][ T8829] loop2: p1 start 1601398130 is beyond EOD, truncated [ 441.838470][ T8829] loop2: p2 start 1702059890 is beyond EOD, truncated [ 447.111785][ T8877] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.932'. [ 448.276365][ T8885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.923912][ T8910] syz.4.941 (8910): drop_caches: 2 [ 453.047601][ T8956] netlink: 68 bytes leftover after parsing attributes in process `syz.0.958'. [ 453.047628][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 453.047642][ T8956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.958'. [ 454.657051][ T8970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 456.535244][ T8986] syz.3.968 (8986): drop_caches: 2 [ 456.762937][ T809] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 456.788218][ T8993] netlink: 68 bytes leftover after parsing attributes in process `syz.2.970'. [ 456.788235][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 456.788243][ T8993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 456.913493][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 456.925221][ T809] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 456.925248][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.925273][ T809] usb 1-1: Product: syz [ 456.925286][ T809] usb 1-1: Manufacturer: syz [ 456.925299][ T809] usb 1-1: SerialNumber: syz [ 456.990863][ T809] usb 1-1: config 0 descriptor?? [ 457.296035][ T809] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 458.480693][ T809] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 458.504795][ T809] usb 1-1: USB disconnect, device number 22 [ 460.768916][ T9040] syz.2.992 (9040): drop_caches: 2 [ 462.283562][ T9071] syz.0.1003 (9071): drop_caches: 2 [ 463.181801][ T9090] syz.2.1010 (9090): drop_caches: 2 [ 469.168261][ T9147] syz.2.1034 (9147): drop_caches: 2 [ 470.164446][ T9159] sctp: [Deprecated]: syz.0.1037 (pid 9159) Use of int in maxseg socket option. [ 470.164446][ T9159] Use struct sctp_assoc_value instead [ 472.570196][ T9183] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 472.576054][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 476.259341][ T9218] fuse: Unknown parameter 'use00000000000000000000' [ 476.551085][ T9228] sctp: [Deprecated]: syz.2.1063 (pid 9228) Use of int in maxseg socket option. [ 476.551085][ T9228] Use struct sctp_assoc_value instead [ 477.057897][ T9233] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 477.064042][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 477.863142][ T809] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 478.024963][ T809] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 478.024982][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 478.024996][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 478.025010][ T809] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 478.027015][ T809] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 478.027031][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.027041][ T809] usb 1-1: Product: syz [ 478.027048][ T809] usb 1-1: Manufacturer: syz [ 478.027055][ T809] usb 1-1: SerialNumber: syz [ 478.030138][ T809] usb 1-1: config 0 descriptor?? [ 478.030815][ T9246] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.032158][ T809] usb 1-1: ucan: probing device on interface #0 [ 478.032170][ T809] usb 1-1: ucan: invalid in_ep MaxPacketSize [ 478.032177][ T809] usb 1-1: ucan: probe failed; try to update the device firmware [ 481.665789][ T5933] usb 1-1: USB disconnect, device number 23 [ 482.153411][ T9286] syz.0.1088 (9286): drop_caches: 2 [ 482.451466][ T9291] syz.3.1089 (9291): drop_caches: 2 [ 483.519268][ T9303] syz.4.1078 (9303): drop_caches: 2 [ 484.352454][ T9321] syz.3.1097 (9321): drop_caches: 2 [ 484.371330][ T9318] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 484.399825][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 484.486845][ T9317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.490711][ T9317] tipc: Enabling of bearer rejected, failed to enable media [ 492.257372][ T9398] syz.3.1125 (9398): drop_caches: 2 [ 493.655329][ T9422] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1134'. [ 493.883020][ T5933] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 494.062874][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 494.067972][ T5933] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 494.068057][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 494.068082][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.068104][ T5933] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.068144][ T5933] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 494.068165][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.104076][ T9430] syz.2.1137 (9430): drop_caches: 2 [ 494.307974][ T5933] usb 1-1: usb_control_msg returned -32 [ 494.308003][ T5933] usbtmc 1-1:16.0: can't read capabilities [ 494.367989][ T809] usb 1-1: USB disconnect, device number 24 [ 495.752964][ T809] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 495.802972][ T5869] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 495.907932][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.907964][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.907999][ T809] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 495.908020][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.911639][ T809] usb 1-1: config 0 descriptor?? [ 495.955285][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 495.955316][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 495.955342][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 495.955366][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 495.964541][ T5869] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 495.964570][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.964590][ T5869] usb 5-1: Product: syz [ 495.964603][ T5869] usb 5-1: Manufacturer: syz [ 495.964620][ T5869] usb 5-1: SerialNumber: syz [ 496.042998][ T5869] usb 5-1: config 0 descriptor?? [ 496.043928][ T9457] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 496.048967][ T5869] usb 5-1: ucan: probing device on interface #0 [ 496.048987][ T5869] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 496.049000][ T5869] usb 5-1: ucan: probe failed; try to update the device firmware [ 496.165868][ T809] usbhid 1-1:0.0: can't add hid device: -71 [ 496.165986][ T809] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 496.188411][ T809] usb 1-1: USB disconnect, device number 25 [ 496.289355][ T9474] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 496.294421][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 496.769853][ T9483] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1160'. [ 496.870747][ T9489] sctp: [Deprecated]: syz.0.1163 (pid 9489) Use of int in maxseg socket option. [ 496.870747][ T9489] Use struct sctp_assoc_value instead [ 497.218433][ T9500] loop2: detected capacity change from 0 to 7 [ 497.231746][ T9500] Dev loop2: unable to read RDB block 7 [ 497.231775][ T9500] loop2: unable to read partition table [ 497.231889][ T9500] loop2: partition table beyond EOD, truncated [ 497.231914][ T9500] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 498.506127][ T5869] usb 5-1: USB disconnect, device number 14 [ 498.762728][ T9524] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1176'. [ 498.865566][ T9529] sctp: [Deprecated]: syz.0.1179 (pid 9529) Use of int in maxseg socket option. [ 498.865566][ T9529] Use struct sctp_assoc_value instead [ 501.327776][ T9554] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 501.333524][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 501.489193][ T9558] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1191'. [ 501.556408][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.556470][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.252914][ T5876] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 505.402908][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 505.407272][ T5876] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 505.407289][ T5876] usb 3-1: config 0 has no interface number 0 [ 505.407347][ T5876] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 505.407359][ T5876] usb 3-1: config 0 interface 1 has no altsetting 0 [ 505.458773][ T5876] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 505.458802][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.458822][ T5876] usb 3-1: Product: syz [ 505.458835][ T5876] usb 3-1: Manufacturer: syz [ 505.458849][ T5876] usb 3-1: SerialNumber: syz [ 505.506919][ T5876] usb 3-1: config 0 descriptor?? [ 505.883675][ T5876] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 505.927431][ T5876] cx231xx 3-1:0.1: Failed to read PCB config [ 505.927563][ T5876] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 505.951062][ T5876] usb 3-1: USB disconnect, device number 13 [ 505.982733][ T9635] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 505.982777][ T9635] PKCS7: Only support pkcs7_signedData type [ 506.283009][ T5861] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 506.415912][ T5876] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 506.447358][ T5861] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 506.447376][ T5861] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.447386][ T5861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 506.447411][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.447424][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.448718][ T5861] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.448733][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.448743][ T5861] usb 4-1: Product: syz [ 506.448749][ T5861] usb 4-1: Manufacturer: syz [ 506.505795][ T5861] cdc_wdm 4-1:1.0: skipping garbage [ 506.505815][ T5861] cdc_wdm 4-1:1.0: skipping garbage [ 506.553785][ T5861] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 506.553820][ T5861] cdc_wdm 4-1:1.0: Unknown control protocol [ 506.632931][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 506.652997][ T5876] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 506.653023][ T5876] usb 3-1: config 0 has no interface number 0 [ 506.653061][ T5876] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 506.653081][ T5876] usb 3-1: config 0 interface 1 has no altsetting 0 [ 506.706143][ T5876] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 506.706171][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.706182][ T5876] usb 3-1: Product: syz [ 506.706189][ T5876] usb 3-1: Manufacturer: syz [ 506.706196][ T5876] usb 3-1: SerialNumber: syz [ 506.745965][ T5876] usb 3-1: config 0 descriptor?? [ 506.982785][ T5876] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 507.010026][ T5876] cx231xx 3-1:0.1: Failed to read PCB config [ 507.010102][ T5876] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 507.062267][ T5876] usb 3-1: USB disconnect, device number 14 [ 507.487926][ T5908] usb 4-1: USB disconnect, device number 19 [ 510.243542][ T9682] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 510.243560][ T9682] PKCS7: Only support pkcs7_signedData type [ 510.405215][ T9694] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 510.405234][ T9694] PKCS7: Only support pkcs7_signedData type [ 511.369643][ T9711] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 511.369662][ T9711] PKCS7: Only support pkcs7_signedData type [ 512.487941][ T9716] loop2: detected capacity change from 0 to 7 [ 512.499735][ T9716] Dev loop2: unable to read RDB block 7 [ 512.499780][ T9716] loop2: unable to read partition table [ 512.499980][ T9716] loop2: partition table beyond EOD, truncated [ 512.499997][ T9716] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 512.908041][ T9729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.910343][ T9729] tipc: Enabled bearer , priority 0 [ 514.367508][ T9726] tipc: Disabling bearer [ 515.045534][ T5876] tipc: Node number set to 2102621778 [ 515.252604][ T9761] loop2: detected capacity change from 0 to 7 [ 515.261775][ T7560] Dev loop2: unable to read RDB block 7 [ 515.261817][ T7560] loop2: unable to read partition table [ 515.262062][ T7560] loop2: partition table beyond EOD, truncated [ 515.270568][ T9761] Dev loop2: unable to read RDB block 7 [ 515.270610][ T9761] loop2: unable to read partition table [ 515.270811][ T9761] loop2: partition table beyond EOD, truncated [ 515.270827][ T9761] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 516.000017][ T5876] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 516.153056][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 516.155132][ T5876] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 516.155147][ T5876] usb 3-1: config 0 has no interface number 0 [ 516.155171][ T5876] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 516.155182][ T5876] usb 3-1: config 0 interface 1 has no altsetting 0 [ 516.157227][ T5876] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 516.157248][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.157259][ T5876] usb 3-1: Product: syz [ 516.157266][ T5876] usb 3-1: Manufacturer: syz [ 516.157273][ T5876] usb 3-1: SerialNumber: syz [ 516.249263][ T5876] usb 3-1: config 0 descriptor?? [ 516.478673][ T5876] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 516.481204][ T5876] cx231xx 3-1:0.1: Failed to read PCB config [ 516.481253][ T5876] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 516.534722][ T5876] usb 3-1: USB disconnect, device number 15 [ 516.897117][ T9795] loop2: detected capacity change from 0 to 7 [ 516.899107][ T9795] Dev loop2: unable to read RDB block 7 [ 516.899148][ T9795] loop2: unable to read partition table [ 516.899342][ T9795] loop2: partition table beyond EOD, truncated [ 516.899372][ T9795] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 519.805829][ T9824] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 519.805846][ T9824] PKCS7: Only support pkcs7_signedData type [ 519.907122][ T9828] loop2: detected capacity change from 0 to 7 [ 519.907723][ T9828] Dev loop2: unable to read RDB block 7 [ 519.907748][ T9828] loop2: unable to read partition table [ 519.907862][ T9828] loop2: partition table beyond EOD, truncated [ 519.907871][ T9828] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 521.678787][ T9865] loop2: detected capacity change from 0 to 7 [ 521.679840][ T9865] Dev loop2: unable to read RDB block 7 [ 521.679880][ T9865] loop2: unable to read partition table [ 521.680093][ T9865] loop2: partition table beyond EOD, truncated [ 521.680104][ T9865] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 525.850787][ T9929] loop2: detected capacity change from 0 to 7 [ 525.883647][ T9929] Dev loop2: unable to read RDB block 7 [ 525.883677][ T9929] loop2: unable to read partition table [ 525.883795][ T9929] loop2: partition table beyond EOD, truncated [ 525.883805][ T9929] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 527.533929][ T9942] netlink: 'syz.4.1332': attribute type 72 has an invalid length. [ 530.432956][ T809] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 530.616331][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.616364][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.616401][ T809] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 530.616423][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.624405][ T809] usb 5-1: config 0 descriptor?? [ 530.835385][ T809] usbhid 5-1:0.0: can't add hid device: -71 [ 530.835470][ T809] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 530.845061][ T809] usb 5-1: USB disconnect, device number 15 [ 531.035046][ T9978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 531.714244][T10000] netlink: 'syz.2.1354': attribute type 4 has an invalid length. [ 531.717450][ T9999] Bluetooth: MGMT ver 1.23 [ 531.717479][ T9999] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 532.128087][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 532.131496][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 532.157286][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 532.158358][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 532.159275][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 532.484551][T10016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.485040][T10016] batadv_slave_0: entered promiscuous mode [ 532.979783][T10022] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 533.010873][T10023] warning: `syz.4.1361' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 534.073838][T10046] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1370'. [ 534.073867][T10046] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.074268][T10046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.074282][T10046] IPv6: NLM_F_CREATE should be set when creating new route [ 534.193428][ T5799] Bluetooth: hci5: command tx timeout [ 534.296575][ T333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.611961][T10053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.625235][T10053] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 535.936569][ T333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.272893][ T5799] Bluetooth: hci5: command tx timeout [ 536.650704][ T333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.747580][ T809] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 536.913003][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 536.915476][ T809] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 536.915502][ T809] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 536.915524][ T809] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.915548][ T809] usb 5-1: config 1 interface 0 has no altsetting 0 [ 536.918159][ T809] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 536.918187][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.918204][ T809] usb 5-1: Product: syz [ 536.918219][ T809] usb 5-1: Manufacturer: syz [ 536.918232][ T809] usb 5-1: SerialNumber: syz [ 537.106259][ T333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.183512][ T809] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 537.527121][T10013] chnl_net:caif_netlink_parms(): no params data found [ 537.668738][ T809] usb 5-1: USB disconnect, device number 16 [ 537.721340][ T809] usblp0: removed [ 537.883132][ T5861] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 538.023747][T10013] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.023878][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.024107][T10013] bridge_slave_0: entered allmulticast mode [ 538.026721][T10013] bridge_slave_0: entered promiscuous mode [ 538.035944][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 538.048934][ T5861] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 538.048967][ T5861] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 538.048991][ T5861] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.049013][ T5861] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.049061][ T5861] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 538.049082][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.214123][T10013] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.214240][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.214424][T10013] bridge_slave_1: entered allmulticast mode [ 538.218826][T10013] bridge_slave_1: entered promiscuous mode [ 538.353235][ T5799] Bluetooth: hci5: command tx timeout [ 538.374081][ T5861] usb 3-1: GET_CAPABILITIES returned 0 [ 538.374110][ T5861] usbtmc 3-1:16.0: can't read capabilities [ 538.562067][T10013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.584433][T10013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.604442][ T9740] usb 3-1: USB disconnect, device number 16 [ 538.682168][ T333] bridge_slave_1: left allmulticast mode [ 538.682350][ T333] bridge_slave_1: left promiscuous mode [ 538.688315][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.712995][ T5861] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 538.776094][ T333] bridge_slave_0: left allmulticast mode [ 538.776125][ T333] bridge_slave_0: left promiscuous mode [ 538.776385][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.869565][ T5861] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x41, changing to 0x1 [ 538.869606][ T5861] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 538.869628][ T5861] usb 4-1: config 0 interface 0 has no altsetting 0 [ 538.901790][ T5861] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 538.901825][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 538.901844][ T5861] usb 4-1: Product: syz [ 538.901858][ T5861] usb 4-1: Manufacturer: syz [ 538.901872][ T5861] usb 4-1: SerialNumber: syz [ 538.911979][ T5861] usb 4-1: config 0 descriptor?? [ 538.958463][ T5861] usb 4-1: selecting invalid altsetting 0 [ 539.318713][ T5861] usb 4-1: USB disconnect, device number 20 [ 539.652990][ T5876] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 539.803043][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 539.805413][ T5876] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 539.805462][ T5876] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 539.805489][ T5876] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 539.805514][ T5876] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 539.810226][ T5876] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 539.810254][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.810273][ T5876] usb 5-1: Product: syz [ 539.810286][ T5876] usb 5-1: Manufacturer: syz [ 539.810300][ T5876] usb 5-1: SerialNumber: syz [ 539.950598][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 540.020557][ T5876] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input10 [ 540.153022][ T5876] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 540.153048][ T5876] (id 0x00) [ 540.263527][ T5876] rc_core: IR keymap rc-imon-pad not found [ 540.263548][ T5876] Registered IR keymap rc-empty [ 540.263632][ T5876] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 540.263649][ T5876] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 540.369698][ T5876] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 540.391978][ T5876] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input11 [ 540.416031][ T5876] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:17> initialized [ 540.438491][ T5799] Bluetooth: hci5: command tx timeout [ 540.533872][ T333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.547685][ T5861] usb 5-1: USB disconnect, device number 17 [ 540.560394][T10131] imon:display_open: could not find interface for minor 0 [ 540.643604][ T333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.686700][ T333] bond0 (unregistering): Released all slaves [ 540.727532][ T333] bond1 (unregistering): Released all slaves [ 540.843820][ T333] bond2 (unregistering): (slave dummy0): Releasing active interface [ 540.902759][ T333] bond2 (unregistering): Released all slaves [ 541.153244][ T333] tipc: Left network mode [ 541.165844][T10013] team0: Port device team_slave_0 added [ 541.179405][T10013] team0: Port device team_slave_1 added [ 541.439841][T10013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.439858][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.439884][T10013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.442076][T10013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.442089][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.442114][T10013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.330092][T10013] hsr_slave_0: entered promiscuous mode [ 542.331303][T10013] hsr_slave_1: entered promiscuous mode [ 542.345907][T10013] debugfs: 'hsr0' already exists in 'hsr' [ 542.345934][T10013] Cannot create hsr debugfs directory [ 543.361710][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.361897][T10215] batadv_slave_0: entered promiscuous mode [ 543.392924][ T5861] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 543.561904][ T5861] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 543.561932][ T5861] usb 1-1: config 0 has no interface number 0 [ 543.561975][ T5861] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.598010][ T5861] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 543.598039][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.598057][ T5861] usb 1-1: Product: syz [ 543.598070][ T5861] usb 1-1: Manufacturer: syz [ 543.598083][ T5861] usb 1-1: SerialNumber: syz [ 543.612385][ T5861] usb 1-1: config 0 descriptor?? [ 543.805747][ T5861] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 543.876554][T10225] nbd3: detected capacity change from 0 to 112 [ 543.885150][ T5861] usb 1-1: USB disconnect, device number 26 [ 543.905369][ T5861] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 543.972934][ T333] hsr_slave_0: left promiscuous mode [ 544.013109][ T333] hsr_slave_1: left promiscuous mode [ 544.015812][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.015907][ T333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.068802][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.068936][ T333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.098873][ T5806] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 544.131314][ T333] veth1_macvtap: left promiscuous mode [ 544.132413][ T333] veth0_macvtap: left promiscuous mode [ 544.132708][ T333] veth1_vlan: left promiscuous mode [ 544.137633][ T333] veth0_vlan: left promiscuous mode [ 544.246855][ T5806] usb 5-1: config 1 interface 0 has no altsetting 0 [ 544.249296][ T5806] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 544.249322][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.249341][ T5806] usb 5-1: Product: syz [ 544.249354][ T5806] usb 5-1: Manufacturer: syz [ 544.249368][ T5806] usb 5-1: SerialNumber: syz [ 544.480328][ T5799] block nbd3: Receive control failed (result -104) [ 544.719982][ T5806] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 544.735181][ T5806] usb 5-1: USB disconnect, device number 18 [ 544.744848][ T5806] usblp0: removed [ 545.072899][ T9740] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 545.244785][ T9740] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.244841][ T9740] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 545.244865][ T9740] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.244877][ T9740] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 545.244890][ T9740] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 545.245993][ T9740] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.246040][ T9740] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 545.246065][ T9740] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.246078][ T9740] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 545.246091][ T9740] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 545.247075][ T9740] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.247120][ T9740] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 545.247146][ T9740] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.247165][ T9740] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 545.247177][ T9740] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 545.250744][ T9740] usb 1-1: string descriptor 0 read error: -22 [ 545.250850][ T9740] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 545.250863][ T9740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.428401][ T9740] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 545.640367][ T9740] usb 1-1: USB disconnect, device number 27 [ 545.846915][ T333] team0 (unregistering): Port device team_slave_1 removed [ 545.869052][T10236] kvm: kvm [10235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000000 [ 545.869139][T10236] kvm: kvm [10235]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 545.891618][T10236] kvm: kvm [10235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 545.903236][T10236] kvm: kvm [10235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 545.903312][T10236] kvm: kvm [10235]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 545.907880][T10236] kvm: kvm [10235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 545.965483][ T333] team0 (unregistering): Port device team_slave_0 removed [ 546.248127][ T809] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 546.408889][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.408915][ T809] usb 5-1: config 0 has no interfaces? [ 546.408943][ T809] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 546.408966][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.457728][ T809] usb 5-1: config 0 descriptor?? [ 546.680978][ T809] usb 5-1: USB disconnect, device number 19 [ 547.893715][T10284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.233086][ T5933] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 548.402575][ T5933] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 548.402609][ T5933] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 548.402623][ T5933] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.402636][ T5933] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 548.402649][ T5933] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 548.403825][ T5933] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 548.403871][ T5933] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 548.403896][ T5933] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.403920][ T5933] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 548.403944][ T5933] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 548.404976][ T5933] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 548.405025][ T5933] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 548.405050][ T5933] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.405073][ T5933] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 548.405097][ T5933] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 548.408316][ T5933] usb 1-1: string descriptor 0 read error: -22 [ 548.408446][ T5933] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 548.408469][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.440804][ T5933] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 548.593051][ T5933] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 548.647991][ T5791] usb 1-1: USB disconnect, device number 28 [ 548.756589][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.756616][ T5933] usb 5-1: config 0 has no interfaces? [ 548.756644][ T5933] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 548.756666][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.766149][ T5933] usb 5-1: config 0 descriptor?? [ 548.938891][T10013] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 548.985953][ T5799] Bluetooth: hci4: Malformed LE Event: 0x0d [ 548.986939][T10013] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 549.007270][ T5791] usb 5-1: USB disconnect, device number 20 [ 549.074831][T10013] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 549.124854][T10013] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 549.703234][T10013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.771043][T10013] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.801695][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.810832][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.853405][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.853540][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.272036][T10351] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 550.962227][T10013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.749118][T10013] veth0_vlan: entered promiscuous mode [ 551.807232][T10013] veth1_vlan: entered promiscuous mode [ 551.878125][T10013] veth0_macvtap: entered promiscuous mode [ 551.899615][T10013] veth1_macvtap: entered promiscuous mode [ 551.957456][T10013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.994970][T10013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.035349][ T104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.039530][ T104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.070532][ T104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.071004][ T104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.288720][T10387] No control pipe specified [ 552.552864][ T3679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.552884][ T3679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.724900][ T3679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.724923][ T3679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.211300][T10412] fuse: Bad value for 'fd' [ 554.278266][T10415] /dev/nullb0: Can't open blockdev [ 554.779940][T10423] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1488'. [ 554.780078][T10423] IPv6: NLM_F_CREATE should be specified when creating new route [ 554.780177][T10423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.780189][T10423] IPv6: NLM_F_CREATE should be set when creating new route [ 555.965589][ T5806] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 556.114520][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 556.116520][ T5806] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 556.121860][ T5806] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 556.121884][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 556.121895][ T5806] usb 1-1: Product: syz [ 556.121902][ T5806] usb 1-1: Manufacturer: syz [ 556.121910][ T5806] usb 1-1: SerialNumber: syz [ 556.175744][ T5806] usb 1-1: config 0 descriptor?? [ 556.178715][T10443] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 556.326026][T10453] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1499'. [ 556.326087][T10453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.391466][T10455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.407768][T10455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.502637][ T5806] usb 1-1: USB disconnect, device number 29 [ 557.629895][T10479] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1510'. [ 557.629958][T10479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.119248][T10495] binder: BINDER_SET_CONTEXT_MGR already set [ 558.119258][T10495] binder: 10494:10495 ioctl 4018620d 200000000040 returned -16 [ 558.221372][T10498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.269304][T10431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.290634][T10502] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1521'. [ 558.290658][T10502] IPv6: NLM_F_CREATE should be specified when creating new route [ 558.290753][T10502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.290763][T10502] IPv6: NLM_F_CREATE should be set when creating new route [ 558.699597][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 558.702706][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 558.718824][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 558.720362][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 558.721096][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 559.108038][T10526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.516254][T10514] chnl_net:caif_netlink_parms(): no params data found [ 559.740604][T10547] team0 (unregistering): Port device team_slave_0 removed [ 559.785577][T10547] team0 (unregistering): Port device team_slave_1 removed [ 559.917094][T10557] ======================================================= [ 559.917094][T10557] WARNING: The mand mount option has been deprecated and [ 559.917094][T10557] and is ignored by this kernel. Remove the mand [ 559.917094][T10557] option from the mount to silence this warning. [ 559.917094][T10557] ======================================================= [ 559.972472][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.974326][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.974551][T10514] bridge_slave_0: entered allmulticast mode [ 559.983882][T10514] bridge_slave_0: entered promiscuous mode [ 559.989086][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.989265][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.989437][T10514] bridge_slave_1: entered allmulticast mode [ 559.994898][T10514] bridge_slave_1: entered promiscuous mode [ 560.026632][T10559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.166064][T10514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.169916][T10514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.512942][ T5799] Bluetooth: hci5: command tx timeout [ 560.530785][T10577] hpfs: Bad magic ... probably not HPFS [ 560.550560][T10514] team0: Port device team_slave_0 added [ 560.553010][T10574] tipc: Started in network mode [ 560.553029][T10574] tipc: Node identity 4, cluster identity 4711 [ 560.553041][T10574] tipc: Node number set to 4 [ 560.589937][T10514] team0: Port device team_slave_1 added [ 560.690217][T10584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.742754][T10514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.742772][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.743062][T10514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.748168][T10514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.748182][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.748207][T10514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.832966][ T5799] Bluetooth: hci1: command tx timeout [ 560.864908][T10514] hsr_slave_0: entered promiscuous mode [ 560.866141][T10514] hsr_slave_1: entered promiscuous mode [ 560.867010][T10514] debugfs: 'hsr0' already exists in 'hsr' [ 560.867032][T10514] Cannot create hsr debugfs directory [ 561.044983][T10592] overlayfs: failed to resolve './file0': -2 [ 561.257773][T10602] hpfs: Bad magic ... probably not HPFS [ 561.428469][T10609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.488515][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 561.492568][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 561.505745][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 561.509539][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 561.524950][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 561.529669][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 561.545685][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 561.550972][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 561.561731][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 561.578440][T10604] kvm: kvm [10603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 562.241716][T10623] block nbd4: shutting down sockets [ 562.266712][T10514] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 562.304058][T10514] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 562.376690][T10514] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 562.441722][T10514] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 562.835116][T10514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.860608][T10514] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.874313][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.875773][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.877990][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.878060][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.914966][ T5799] Bluetooth: hci1: command tx timeout [ 562.999649][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.999714][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.514523][T10514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.629771][T10672] block nbd4: NBD_DISCONNECT [ 563.677022][T10672] block nbd4: Disconnected due to user request. [ 563.677045][T10672] block nbd4: shutting down sockets [ 564.346380][T10696] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 564.421489][T10514] veth0_vlan: entered promiscuous mode [ 564.455713][T10514] veth1_vlan: entered promiscuous mode [ 564.531108][T10514] veth0_macvtap: entered promiscuous mode [ 564.551820][T10514] veth1_macvtap: entered promiscuous mode [ 564.578803][T10514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.611399][T10514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.655893][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.656775][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.658262][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.658306][ T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.992988][ T5799] Bluetooth: hci1: command tx timeout [ 565.074079][T10715] binder_alloc: 10713: binder_alloc_buf, no vma [ 565.142244][ T3679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.142265][ T3679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.326169][T10719] cgroup: fork rejected by pids controller in /syz1 [ 565.347455][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.347475][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.036713][T10741] binder_alloc: 10740: binder_alloc_buf, no vma [ 566.743131][T10761] 9p: Bad value for 'rfdno' [ 566.776088][T10763] overlayfs: failed to resolve './file0': -2 [ 566.892118][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 566.912221][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 566.934695][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 566.954066][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.955979][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 567.073612][ T5809] Bluetooth: hci1: command tx timeout [ 567.274289][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.333708][T10785] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 567.389377][T10785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 567.798596][T10803] 9p: Bad value for 'rfdno' [ 567.815960][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.861198][T10805] overlayfs: failed to resolve './file0': -2 [ 568.166749][T10813] hpfs: Bad magic ... probably not HPFS [ 568.285760][T10819] netlink: 'syz.5.1643': attribute type 1 has an invalid length. [ 568.369670][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.408363][T10822] block nbd0: NBD_DISCONNECT [ 568.556646][T10819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 568.748251][T10802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 568.748503][T10802] block device autoloading is deprecated and will be removed. [ 568.867476][T10834] overlayfs: failed to resolve './file0': -2 [ 568.981429][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.984272][T10838] fuse: Bad value for 'fd' [ 569.073582][ T5809] Bluetooth: hci5: command tx timeout [ 569.153011][ T5809] Bluetooth: hci1: command tx timeout [ 569.455110][ T9740] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 569.570634][T10862] netlink: 'syz.4.1660': attribute type 3 has an invalid length. [ 569.625193][ T9740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.625223][ T9740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.625243][ T9740] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 569.625281][ T9740] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.625302][ T9740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.643481][ T9740] usb 6-1: config 0 descriptor?? [ 569.925632][T10871] overlayfs: failed to resolve './file0': -2 [ 569.980277][T10872] fuse: Bad value for 'fd' [ 570.088381][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.088423][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.088447][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.088472][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.088498][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.088523][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.088549][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.088574][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.088596][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.088621][ T9740] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 570.193095][T10766] chnl_net:caif_netlink_parms(): no params data found [ 570.228773][ T9740] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 570.266605][ T12] bridge_slave_1: left allmulticast mode [ 570.266635][ T12] bridge_slave_1: left promiscuous mode [ 570.266861][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.369089][ T12] bridge_slave_0: left allmulticast mode [ 570.369115][ T12] bridge_slave_0: left promiscuous mode [ 570.369321][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.413318][ T5806] usb 6-1: USB disconnect, device number 2 [ 570.568622][T10883] fido_id[10883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 570.588662][T10889] overlayfs: failed to resolve './file1': -2 [ 571.051380][T10903] fuse: Bad value for 'fd' [ 571.124062][T10905] overlayfs: failed to resolve './file0': -2 [ 571.153274][ T5809] Bluetooth: hci5: command tx timeout [ 571.625911][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.714961][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.759858][ T12] bond0 (unregistering): Released all slaves [ 572.105592][T10766] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.105796][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.105986][T10766] bridge_slave_0: entered allmulticast mode [ 572.108526][T10766] bridge_slave_0: entered promiscuous mode [ 572.111639][T10766] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.111824][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.111994][T10766] bridge_slave_1: entered allmulticast mode [ 572.114860][T10766] bridge_slave_1: entered promiscuous mode [ 572.188765][ T5809] block nbd5: Receive control failed (result -32) [ 572.209892][T10920] block nbd5: shutting down sockets [ 572.510179][T10952] overlayfs: failed to resolve './file0': -2 [ 572.684137][ T9740] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 572.772630][T10766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.788906][T10766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.842964][ T9740] usb 5-1: Using ep0 maxpacket: 8 [ 572.850117][ T9740] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 572.850173][ T9740] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 572.850196][ T9740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 572.850221][ T9740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 572.850242][ T9740] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.850291][ T9740] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 572.850314][ T9740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.982670][ T5791] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 573.083908][ T9740] usb 5-1: usb_control_msg returned -32 [ 573.083954][ T9740] usbtmc 5-1:16.0: can't read capabilities [ 573.143174][ T5791] usb 1-1: Using ep0 maxpacket: 8 [ 573.152251][ T5791] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 573.152286][ T5791] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 573.152310][ T5791] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 573.152332][ T5791] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.152370][ T5791] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.152392][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.236778][ T5809] Bluetooth: hci5: command tx timeout [ 573.427791][ T5791] usb 1-1: GET_CAPABILITIES returned 0 [ 573.427836][ T5791] usbtmc 1-1:16.0: can't read capabilities [ 573.459582][T10971] overlayfs: upper fs does not support file handles, falling back to index=off. [ 573.467054][T10972] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 573.651928][ T809] usb 1-1: USB disconnect, device number 30 [ 573.665750][ T5861] usb 5-1: USB disconnect, device number 21 [ 573.701570][T10766] team0: Port device team_slave_0 added [ 573.740837][T10766] team0: Port device team_slave_1 added [ 574.024462][T10987] overlayfs: failed to resolve './file1': -2 [ 574.113089][ T12] hsr_slave_0: left promiscuous mode [ 574.154451][ T12] hsr_slave_1: left promiscuous mode [ 574.157803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.157829][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.211109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.211147][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.315990][ T12] veth1_macvtap: left promiscuous mode [ 574.316093][ T12] veth0_macvtap: left promiscuous mode [ 574.335034][ T12] veth1_vlan: left promiscuous mode [ 574.335226][ T12] veth0_vlan: left promiscuous mode [ 574.553111][ T32] block nbd3: Possible stuck request ffff88802607e000: control (read@0,4096B). Runtime 30 seconds [ 574.671317][ T5809] block nbd2: Receive control failed (result -32) [ 574.688214][T10980] block nbd2: shutting down sockets [ 574.750476][T11010] overlayfs: failed to resolve './file1': -2 [ 574.907979][ T5791] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 575.084786][ T5791] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 575.084813][ T5791] usb 1-1: config 0 has no interface number 0 [ 575.084878][ T5791] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 575.087457][ T5791] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 575.087484][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.087502][ T5791] usb 1-1: Product: syz [ 575.087516][ T5791] usb 1-1: Manufacturer: syz [ 575.087529][ T5791] usb 1-1: SerialNumber: syz [ 575.092636][ T5791] usb 1-1: config 0 descriptor?? [ 575.207616][ T5791] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 575.322990][ T5809] Bluetooth: hci5: command tx timeout [ 575.366451][ T5806] usb 1-1: USB disconnect, device number 31 [ 575.371330][ T5806] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 575.737661][T11034] 9pnet_virtio: no channels available for device syz [ 575.797914][ T12] team0 (unregistering): Port device team_slave_1 removed [ 575.835419][T11037] overlayfs: failed to resolve './file1': -2 [ 575.878481][ T12] team0 (unregistering): Port device team_slave_0 removed [ 576.367503][T10766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.367522][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.367547][T10766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.426079][T10766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.426098][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.426124][T10766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.482275][ T5809] block nbd2: Receive control failed (result -32) [ 576.493719][T11032] block nbd2: shutting down sockets [ 576.563769][T10766] hsr_slave_0: entered promiscuous mode [ 576.565191][T10766] hsr_slave_1: entered promiscuous mode [ 576.566094][T10766] debugfs: 'hsr0' already exists in 'hsr' [ 576.566115][T10766] Cannot create hsr debugfs directory [ 578.220748][T11106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.242423][T11106] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 578.714421][ T5933] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 578.896762][ T5933] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 578.896792][ T5933] usb 3-1: config 0 has no interface number 0 [ 578.896835][ T5933] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.901523][ T5933] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 578.901552][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.901570][ T5933] usb 3-1: Product: syz [ 578.901584][ T5933] usb 3-1: Manufacturer: syz [ 578.901596][ T5933] usb 3-1: SerialNumber: syz [ 578.974694][ T5933] usb 3-1: config 0 descriptor?? [ 579.049968][ T5933] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 579.249931][ T5933] usb 3-1: USB disconnect, device number 17 [ 579.275090][ T5933] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 579.688490][T10766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 579.733067][T10766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 579.825517][T10766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 579.919379][T10766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 580.354700][T10766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.396036][ T5791] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 580.402727][T10766] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.434262][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.434392][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.490267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.490407][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.536066][ T5791] usb 5-1: device descriptor read/64, error -71 [ 580.793002][ T5791] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 580.923656][ T5791] usb 5-1: device descriptor read/64, error -71 [ 581.006914][ T5933] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 581.056108][ T5791] usb usb5-port1: attempt power cycle [ 581.158761][T11217] overlayfs: upper fs does not support file handles, falling back to index=off. [ 581.175352][ T5933] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 581.175378][ T5933] usb 3-1: config 0 has no interface number 0 [ 581.175435][ T5933] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.177846][ T5933] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 581.177871][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.177889][ T5933] usb 3-1: Product: syz [ 581.177903][ T5933] usb 3-1: Manufacturer: syz [ 581.177916][ T5933] usb 3-1: SerialNumber: syz [ 581.208703][ T5933] usb 3-1: config 0 descriptor?? [ 581.255155][ T5933] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 581.336750][T10766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.423163][ T5791] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 581.453989][ T5791] usb 5-1: device descriptor read/8, error -71 [ 581.526520][T10766] veth0_vlan: entered promiscuous mode [ 581.602411][T10766] veth1_vlan: entered promiscuous mode [ 581.698428][T10766] veth0_macvtap: entered promiscuous mode [ 581.702944][ T5791] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 581.731380][T10766] veth1_macvtap: entered promiscuous mode [ 581.733937][ T5791] usb 5-1: device descriptor read/8, error -71 [ 581.839088][T10766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.853368][ T5791] usb usb5-port1: unable to enumerate USB device [ 581.896449][T10766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.930919][ T333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.943292][ T333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.947060][ T3679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.950869][ T3679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.491749][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.491771][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.600752][T11236] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1781'. [ 582.601487][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.601500][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.372759][T11260] fuse: Bad value for 'fd' [ 583.779947][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 583.928290][ T5861] usb 3-1: USB disconnect, device number 18 [ 583.946164][ T5861] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 584.189822][T11274] block nbd0: shutting down sockets [ 584.313930][T11280] netlink: 'syz.1.1797': attribute type 3 has an invalid length. [ 584.313952][T11280] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 584.313964][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 584.616317][ T5935] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 584.648828][T11296] fuse: Unknown parameter '0x0000000000000003' [ 584.742918][ T5935] usb 6-1: device descriptor read/64, error -71 [ 584.768217][T11298] nbd4: detected capacity change from 0 to 112 [ 584.781233][T11302] block nbd4: shutting down sockets [ 584.818993][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.819120][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.821651][ T7560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.821680][ T7560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.821809][ T7560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.821832][ T7560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.821886][ T7560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.821908][ T7560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.822026][ T7560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.822049][ T7560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.822125][ T7560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.822148][ T7560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.822217][ T7560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.822238][ T7560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.822290][ T7560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.822312][ T7560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.822342][ T7560] ldm_validate_partition_table(): Disk read failed. [ 584.822396][ T7560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.822418][ T7560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.822536][ T7560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.822560][ T7560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 584.826901][ T7560] Dev nbd4: unable to read RDB block 0 [ 584.829568][ T7560] nbd4: unable to read partition table [ 584.864280][ T7560] ldm_validate_partition_table(): Disk read failed. [ 584.864491][ T7560] Dev nbd4: unable to read RDB block 0 [ 584.875121][ T7560] nbd4: unable to read partition table [ 584.982908][ T5935] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 585.113090][ T5935] usb 6-1: device descriptor read/64, error -71 [ 585.225480][ T5935] usb usb6-port1: attempt power cycle [ 585.448411][T11313] netlink: 'syz.4.1810': attribute type 3 has an invalid length. [ 585.448432][T11313] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 585.448445][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1810'. [ 585.584697][ T5935] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 585.603832][ T5935] usb 6-1: device descriptor read/8, error -71 [ 585.638400][T11320] sctp: [Deprecated]: syz.4.1812 (pid 11320) Use of int in maxseg socket option. [ 585.638400][T11320] Use struct sctp_assoc_value instead [ 586.139293][T11309] overlayfs: statfs failed on './file0' [ 586.263211][ T5935] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 586.272270][T11327] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1814'. [ 586.297458][ T5935] usb 6-1: device descriptor read/8, error -71 [ 586.403211][ T5935] usb usb6-port1: unable to enumerate USB device [ 586.421639][T11329] nbd0: detected capacity change from 0 to 112 [ 586.440169][T11332] block nbd0: shutting down sockets [ 586.497370][ T6030] ldm_validate_partition_table(): Disk read failed. [ 586.497478][ T6030] Dev nbd0: unable to read RDB block 0 [ 586.497650][ T6030] nbd0: unable to read partition table [ 586.522549][ T6030] ldm_validate_partition_table(): Disk read failed. [ 586.522657][ T6030] Dev nbd0: unable to read RDB block 0 [ 586.525886][ T6030] nbd0: unable to read partition table [ 586.676630][T11343] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 586.736717][T11343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.801826][T11349] netlink: 'syz.0.1822': attribute type 3 has an invalid length. [ 586.801841][T11349] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 586.801848][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 586.882950][ T5806] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 587.038305][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.038337][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.038359][ T5806] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 587.038399][ T5806] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 587.038421][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.047709][ T5806] usb 5-1: config 0 descriptor?? [ 587.227147][T11357] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1825'. [ 587.492144][ T5806] hid_parser_main: 28 callbacks suppressed [ 587.492193][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.492225][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.492251][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.492276][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.492321][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.492348][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.492379][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.492405][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.492431][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.492478][ T5806] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 587.570789][ T5806] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 587.589147][T11365] hpfs: Bad magic ... probably not HPFS [ 587.720489][ T5806] usb 5-1: USB disconnect, device number 26 [ 587.736783][T11372] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 587.823750][T11377] netlink: 'syz.2.1833': attribute type 3 has an invalid length. [ 587.823765][T11377] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 587.823772][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1833'. [ 587.869554][T11369] fido_id[11369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 588.009772][T11372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 588.179248][T11384] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.1836'. [ 589.538194][T11411] netlink: 'syz.5.1845': attribute type 3 has an invalid length. [ 589.538217][T11411] netlink: 'syz.5.1845': attribute type 1 has an invalid length. [ 589.538230][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'. [ 589.659334][T11397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.659526][T11397] batadv_slave_0: entered promiscuous mode [ 589.965421][T11424] cgroup: fork rejected by pids controller in /syz4 [ 591.613084][T11451] netlink: 'syz.0.1860': attribute type 3 has an invalid length. [ 591.613101][T11451] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 591.613108][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1860'. [ 600.435316][T11466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.435589][T11466] batadv_slave_0: entered promiscuous mode [ 600.640844][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.662482][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.665529][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.676721][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.677761][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.902747][T11482] netlink: 'syz.2.1871': attribute type 3 has an invalid length. [ 600.902769][T11482] netlink: 'syz.2.1871': attribute type 1 has an invalid length. [ 600.903310][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 601.165072][ T3679] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.549376][ T3679] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.599966][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1878'. [ 602.755289][ T5799] Bluetooth: hci4: command tx timeout [ 602.828119][T11525] netlink: 'syz.2.1884': attribute type 3 has an invalid length. [ 602.828140][T11525] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 602.828153][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'. [ 602.906392][ T3679] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.159700][ T3679] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.557114][T11474] chnl_net:caif_netlink_parms(): no params data found [ 603.720912][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 603.802305][T11550] block nbd1: NBD_DISCONNECT [ 603.980315][ T3679] bridge_slave_1: left allmulticast mode [ 603.980343][ T3679] bridge_slave_1: left promiscuous mode [ 603.980568][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.059309][ T5803] cgroup: fork rejected by pids controller in /syz2 [ 604.073803][ T3679] bridge_slave_0: left allmulticast mode [ 604.073832][ T3679] bridge_slave_0: left promiscuous mode [ 604.074070][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.635836][ T32] block nbd3: Possible stuck request ffff88802607e000: control (read@0,4096B). Runtime 60 seconds [ 604.832947][ T5799] Bluetooth: hci4: command tx timeout [ 605.103669][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.175675][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.214826][ T3679] bond0 (unregistering): Released all slaves [ 605.220122][ T3679] bond1 (unregistering): Released all slaves [ 605.273759][ T3679] bond2 (unregistering): (slave dummy0): Releasing active interface [ 605.297577][ T3679] bond2 (unregistering): Released all slaves [ 605.309791][ T3679] bond3 (unregistering): Released all slaves [ 605.756097][ T3679] tipc: Left network mode [ 605.781529][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.787373][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1904'. [ 605.787935][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.788180][T11474] bridge_slave_0: entered allmulticast mode [ 605.791128][T11474] bridge_slave_0: entered promiscuous mode [ 605.813901][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.814047][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.814259][T11474] bridge_slave_1: entered allmulticast mode [ 605.816975][T11474] bridge_slave_1: entered promiscuous mode [ 605.921877][T11474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.956400][T11474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.259001][T11474] team0: Port device team_slave_0 added [ 606.267416][T11474] team0: Port device team_slave_1 added [ 606.748806][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 606.751687][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 606.760853][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 606.765971][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 606.766926][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 607.114257][ T5799] Bluetooth: hci4: command tx timeout [ 607.115374][T11474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.115388][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.115415][T11474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.284449][T11474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.284467][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.284491][T11474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.943165][ T3679] hsr_slave_0: left promiscuous mode [ 607.962995][ T3679] hsr_slave_1: left promiscuous mode [ 607.964168][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.964192][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.015221][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.015240][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.090161][ T3679] veth1_macvtap: left promiscuous mode [ 608.092318][ T3679] veth0_macvtap: left promiscuous mode [ 608.092581][ T3679] veth1_vlan: left promiscuous mode [ 608.092717][ T3679] veth0_vlan: left promiscuous mode [ 608.833004][ T5799] Bluetooth: hci3: command tx timeout [ 609.091647][T11643] loop2: detected capacity change from 0 to 7 [ 609.111738][T11643] Dev loop2: unable to read RDB block 7 [ 609.111785][T11643] loop2: unable to read partition table [ 609.112003][T11643] loop2: partition table beyond EOD, truncated [ 609.120688][T11643] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 609.146207][T11474] hsr_slave_0: entered promiscuous mode [ 609.147084][T11474] hsr_slave_1: entered promiscuous mode [ 609.147593][T11474] debugfs: 'hsr0' already exists in 'hsr' [ 609.147609][T11474] Cannot create hsr debugfs directory [ 609.156348][ T5799] Bluetooth: hci4: command tx timeout [ 610.383959][T11602] chnl_net:caif_netlink_parms(): no params data found [ 610.913236][ T5799] Bluetooth: hci3: command tx timeout [ 611.235255][ T5799] Bluetooth: hci4: command tx timeout [ 611.341267][T11602] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.341334][T11602] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.341462][T11602] bridge_slave_0: entered allmulticast mode [ 611.343134][T11602] bridge_slave_0: entered promiscuous mode [ 611.346557][T11602] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.346976][T11602] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.347150][T11602] bridge_slave_1: entered allmulticast mode [ 611.349475][T11602] bridge_slave_1: entered promiscuous mode [ 611.640744][T11602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.714011][T11716] overlayfs: missing 'lowerdir' [ 611.926980][T11602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.106064][ T3679] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.287195][T11602] team0: Port device team_slave_0 added [ 612.289749][T11725] 9p: Bad value for 'rfdno' [ 612.453878][ T3679] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.518413][T11602] team0: Port device team_slave_1 added [ 612.697486][ T3679] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.736440][T11602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.736452][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.736466][T11602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.740949][T11602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.740959][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.740973][T11602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.993024][ T5799] Bluetooth: hci3: command tx timeout [ 613.144966][ T3679] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.185437][T11602] hsr_slave_0: entered promiscuous mode [ 613.186759][T11602] hsr_slave_1: entered promiscuous mode [ 613.187681][T11602] debugfs: 'hsr0' already exists in 'hsr' [ 613.187704][T11602] Cannot create hsr debugfs directory [ 614.194122][T11706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.273576][ T3679] bridge_slave_1: left allmulticast mode [ 614.273605][ T3679] bridge_slave_1: left promiscuous mode [ 614.273976][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.323173][T11770] fuse: Bad value for 'fd' [ 614.325199][T11770] overlayfs: overlapping lowerdir path [ 614.396106][ T3679] bridge_slave_0: left allmulticast mode [ 614.396136][ T3679] bridge_slave_0: left promiscuous mode [ 614.396388][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.429323][T11775] overlayfs: missing 'workdir' [ 614.561157][T11782] 9p: Bad value for 'rfdno' [ 615.073125][ T5799] Bluetooth: hci3: command tx timeout [ 615.183437][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.264479][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.289657][ T3679] bond0 (unregistering): Released all slaves [ 615.324153][ T3679] bond1 (unregistering): (slave dummy0): Releasing active interface [ 615.345223][ T3679] bond1 (unregistering): Released all slaves [ 615.384121][T11474] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 615.453219][T11788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.453377][T11788] batadv_slave_0: entered promiscuous mode [ 615.531600][T11474] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 615.804210][ T3679] tipc: Left network mode [ 615.843830][T11474] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 615.995882][T11474] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.023702][T11798] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 617.048107][T11819] overlayfs: missing 'workdir' [ 617.502994][ T3679] hsr_slave_0: left promiscuous mode [ 617.533073][ T3679] hsr_slave_1: left promiscuous mode [ 617.533924][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.573860][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.573879][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.635878][ T3679] veth1_macvtap: left promiscuous mode [ 617.635943][ T3679] veth0_macvtap: left promiscuous mode [ 617.636082][ T3679] veth1_vlan: left promiscuous mode [ 617.636175][ T3679] veth0_vlan: left promiscuous mode [ 618.337027][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 618.373457][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 619.012232][T11602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 619.122922][T11602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 620.098617][T11602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 620.161951][T11602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 620.201287][T11474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.317354][T11474] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.365166][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.382473][ T5005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.422669][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.425989][ T5005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.092123][T11602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.253753][T11602] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.281261][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.281392][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.292259][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.292383][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.102664][T11474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.388329][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1982'. [ 624.443451][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.443518][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.698772][T11602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.875750][T11602] veth0_vlan: entered promiscuous mode [ 624.924502][T11602] veth1_vlan: entered promiscuous mode [ 625.045020][T11914] overlayfs: missing 'lowerdir' [ 625.163171][T11474] veth0_vlan: entered promiscuous mode [ 625.186071][T11602] veth0_macvtap: entered promiscuous mode [ 625.211485][T11602] veth1_macvtap: entered promiscuous mode [ 625.226516][T11474] veth1_vlan: entered promiscuous mode [ 625.337612][T11602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.408355][T11920] cgroup: fork rejected by pids controller in /syz5 [ 625.438634][T11602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.481693][T11474] veth0_macvtap: entered promiscuous mode [ 625.505464][ T1004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.523045][ T1004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.535400][ T1004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.557557][T11474] veth1_macvtap: entered promiscuous mode [ 625.559136][ T1004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.728769][T11927] netlink: 'syz.1.1993': attribute type 3 has an invalid length. [ 625.728790][T11927] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 625.728803][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1993'. [ 625.840659][T11474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.895088][T11474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.939631][ T3679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.940840][ T3679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.944647][ T3679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.971386][ T3679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.200452][T11941] overlayfs: missing 'lowerdir' [ 626.330528][ T3679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.330549][ T3679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.900471][T11957] netlink: 'syz.0.2005': attribute type 3 has an invalid length. [ 626.900493][T11957] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 626.900506][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2005'. [ 627.141239][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 627.153450][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 627.169308][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 627.181591][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 627.190858][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 627.260894][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 627.458841][ T3679] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.594988][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.595009][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.862466][ T3679] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.901318][T11967] block nbd2: NBD_DISCONNECT [ 627.964767][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.964788][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.044150][T11969] overlayfs: missing 'lowerdir' [ 628.196302][T11972] overlayfs: missing 'lowerdir' [ 628.662061][ T3679] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.234039][ T5799] Bluetooth: hci1: command tx timeout [ 629.523482][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.523503][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.646598][T11992] netlink: 'syz.2.2016': attribute type 3 has an invalid length. [ 629.646620][T11992] netlink: 'syz.2.2016': attribute type 1 has an invalid length. [ 629.646632][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 630.105976][ T3679] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.296800][T12001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2018'. [ 630.568089][T12008] overlayfs: missing 'lowerdir' [ 630.585020][T12010] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 630.585077][T12010] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.685839][T12005] block nbd0: NBD_DISCONNECT [ 631.121546][T11959] chnl_net:caif_netlink_parms(): no params data found [ 631.273008][T12027] netlink: 'syz.1.2027': attribute type 3 has an invalid length. [ 631.273030][T12027] netlink: 'syz.1.2027': attribute type 1 has an invalid length. [ 631.273042][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'. [ 631.312900][ T5799] Bluetooth: hci1: command tx timeout [ 631.548665][ T3679] bridge_slave_1: left allmulticast mode [ 631.548694][ T3679] bridge_slave_1: left promiscuous mode [ 631.548930][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.680409][ T5933] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 632.745159][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.745193][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.745214][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.745263][ T5933] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 632.745285][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.795051][ T3679] bridge_slave_0: left allmulticast mode [ 632.795080][ T3679] bridge_slave_0: left promiscuous mode [ 632.795320][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.853576][ T5933] usb 5-1: config 0 descriptor?? [ 633.838318][ T5799] Bluetooth: hci1: command tx timeout [ 634.053542][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 634.054494][ T5933] usbhid 5-1:0.0: can't add hid device: -71 [ 634.054607][ T5933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 634.113188][ T5933] usb 5-1: USB disconnect, device number 27 [ 634.735564][ T32] block nbd3: Possible stuck request ffff88802607e000: control (read@0,4096B). Runtime 90 seconds [ 635.883054][ T5799] Bluetooth: hci1: command tx timeout [ 636.178579][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.282527][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.325902][ T3679] bond0 (unregistering): Released all slaves [ 636.336262][ T3679] bond1 (unregistering): Released all slaves [ 636.596380][T12072] overlayfs: upper fs does not support file handles, falling back to index=off. [ 636.767133][T12079] block nbd4: NBD_DISCONNECT [ 637.104153][T12090] netlink: 'syz.4.2040': attribute type 3 has an invalid length. [ 637.104317][T12090] netlink: 'syz.4.2040': attribute type 1 has an invalid length. [ 637.104330][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2040'. [ 637.221013][T12092] fuse: Bad value for 'fd' [ 637.372974][T12098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2032'. [ 640.074053][T11959] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.074249][T11959] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.074493][T11959] bridge_slave_0: entered allmulticast mode [ 640.123225][T11959] bridge_slave_0: entered promiscuous mode [ 640.193352][T11959] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.193467][T11959] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.193701][T11959] bridge_slave_1: entered allmulticast mode [ 640.196231][T11959] bridge_slave_1: entered promiscuous mode [ 640.296932][T11959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.323512][T11959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.456110][T12110] block nbd0: NBD_DISCONNECT [ 640.858132][T12108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.858329][T12108] batadv_slave_0: entered promiscuous mode [ 640.947574][T12114] No control pipe specified [ 641.357453][T11959] team0: Port device team_slave_0 added [ 641.458886][T12120] netlink: 'syz.0.2051': attribute type 3 has an invalid length. [ 641.458910][T12120] netlink: 'syz.0.2051': attribute type 1 has an invalid length. [ 641.458923][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2051'. [ 641.525076][T12125] fuse: Bad value for 'fd' [ 644.214039][T11959] team0: Port device team_slave_1 added [ 644.543031][ T5806] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 644.596020][T12138] block nbd1: NBD_DISCONNECT [ 644.695830][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.695850][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.695861][ T5806] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 644.695884][ T5806] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 644.695895][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.698946][ T5806] usb 5-1: config 0 descriptor?? [ 645.847687][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 645.849553][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 645.849931][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 645.850078][ T5806] usbhid 5-1:0.0: can't add hid device: -32 [ 645.850193][ T5806] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 645.906921][ T5806] usb 5-1: USB disconnect, device number 28 [ 645.944633][ T3679] hsr_slave_0: left promiscuous mode [ 646.022394][ T3679] hsr_slave_1: left promiscuous mode [ 646.023502][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.083872][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.083900][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.148049][ T3679] veth1_macvtap: left promiscuous mode [ 646.148117][ T3679] veth0_macvtap: left promiscuous mode [ 646.148256][ T3679] veth1_vlan: left promiscuous mode [ 646.148349][ T3679] veth0_vlan: left promiscuous mode [ 646.628275][T12158] No control pipe specified [ 646.886868][T12160] netlink: 'syz.4.2062': attribute type 11 has an invalid length. [ 647.010090][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 647.063704][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 647.293327][T11959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.293344][T11959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.293370][T11959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.339118][T12164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2058'. [ 647.350491][T11959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.350508][T11959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.350533][T11959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.712018][T11959] hsr_slave_0: entered promiscuous mode [ 648.151266][T11959] hsr_slave_1: entered promiscuous mode [ 648.152325][T11959] debugfs: 'hsr0' already exists in 'hsr' [ 648.152347][T11959] Cannot create hsr debugfs directory [ 651.383013][ T5908] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 651.503394][T12209] No control pipe specified [ 651.550412][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.550447][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.550469][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 651.550510][ T5908] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.550532][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.621318][ T5908] usb 3-1: config 0 descriptor?? [ 653.020446][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 653.020567][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 653.076615][T12217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2074'. [ 653.080401][ T5908] usb 3-1: USB disconnect, device number 19 [ 653.732646][T12229] netlink: 'syz.2.2078': attribute type 11 has an invalid length. [ 653.802946][ T5908] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 653.997546][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 653.997599][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 653.997625][ T5908] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.997650][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 653.997675][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 654.033054][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 654.033118][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 654.033142][ T5908] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.033165][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 654.033190][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 654.053045][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 654.053104][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 654.053131][ T5908] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.053155][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 654.053179][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 654.882964][ T5876] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 655.045648][T11959] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 655.062970][ T5876] usb 5-1: device descriptor read/64, error -71 [ 655.135127][T11959] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 655.229003][T11959] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 655.247059][ T5861] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 655.323535][ T5876] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 655.329049][T11959] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 655.373129][ T5861] usb 2-1: device descriptor read/64, error -71 [ 655.454496][ T5876] usb 5-1: device descriptor read/64, error -71 [ 655.565349][ T5876] usb usb5-port1: attempt power cycle [ 655.613098][ T5861] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 655.743100][ T5861] usb 2-1: device descriptor read/64, error -71 [ 655.853372][ T5861] usb usb2-port1: attempt power cycle [ 655.904154][ T5876] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 655.925258][ T5876] usb 5-1: device descriptor read/8, error -71 [ 655.976010][T11959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.009407][T11959] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.030888][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.031032][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.085705][T12047] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.085880][T12047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.153128][T12266] netlink: 'syz.2.2085': attribute type 3 has an invalid length. [ 656.153143][T12266] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 656.153150][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 656.193024][ T5876] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 656.193045][ T5861] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 656.214262][ T5861] usb 2-1: device descriptor read/8, error -71 [ 656.230738][ T5876] usb 5-1: device descriptor read/8, error -71 [ 656.333407][ T5876] usb usb5-port1: unable to enumerate USB device [ 656.452974][ T5861] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 656.473689][ T5861] usb 2-1: device descriptor read/8, error -71 [ 656.583406][ T5861] usb usb2-port1: unable to enumerate USB device [ 656.676983][ T5908] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 656.677014][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.708948][ T5908] usb 1-1: can't set config #168, error -71 [ 656.726435][ T5908] usb 1-1: USB disconnect, device number 32 [ 657.284068][T11959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.676361][T12308] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 657.676407][T12308] PKCS7: Only support pkcs7_signedData type [ 658.390643][T11959] veth0_vlan: entered promiscuous mode [ 658.456240][T11959] veth1_vlan: entered promiscuous mode [ 659.413470][T12351] fuse: Bad value for 'fd' [ 659.832665][T11959] veth0_macvtap: entered promiscuous mode [ 659.838790][T11959] veth1_macvtap: entered promiscuous mode [ 659.965871][ T5791] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 660.131566][ T5791] usb 3-1: device descriptor read/64, error -71 [ 660.162317][T11959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.372895][ T5791] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 660.542970][ T5791] usb 3-1: device descriptor read/64, error -71 [ 660.663248][ T5791] usb usb3-port1: attempt power cycle [ 660.841686][T11959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.878228][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.881272][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.881703][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.881740][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.012953][ T5791] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 661.044781][ T5791] usb 3-1: device descriptor read/8, error -71 [ 661.263001][ T809] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 661.302951][ T5791] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 661.364366][ T5791] usb 3-1: device descriptor read/8, error -71 [ 661.421088][T12047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.421111][T12047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.440990][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 661.451047][ T809] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 661.451101][ T809] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 661.451114][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.486927][ T5791] usb usb3-port1: unable to enumerate USB device [ 661.710864][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.710884][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.421178][T12399] fuse: Bad value for 'fd' [ 664.403212][ T5935] usb 2-1: USB disconnect, device number 16 [ 664.802981][ T32] block nbd3: Possible stuck request ffff88802607e000: control (read@0,4096B). Runtime 120 seconds [ 665.139032][T12432] loop8: detected capacity change from 0 to 8 [ 665.139766][T12432] Dev loop8: unable to read RDB block 8 [ 665.139792][T12432] loop8: unable to read partition table [ 665.139903][T12432] loop8: partition table beyond EOD, truncated [ 665.139913][T12432] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 665.473581][T12436] fuse: Bad value for 'fd' [ 666.019761][T12446] sctp: [Deprecated]: syz.2.2124 (pid 12446) Use of int in maxseg socket option. [ 666.019761][T12446] Use struct sctp_assoc_value instead [ 666.122931][ T809] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 666.293244][ T809] usb 1-1: device descriptor read/64, error -71 [ 666.534117][ T809] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 666.712188][ T809] usb 1-1: device descriptor read/64, error -71 [ 667.179727][ T809] usb usb1-port1: attempt power cycle [ 667.533037][ T809] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 667.553862][ T809] usb 1-1: device descriptor read/8, error -71 [ 667.794092][ T809] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 667.828414][ T809] usb 1-1: device descriptor read/8, error -71 [ 667.964265][ T809] usb usb1-port1: unable to enumerate USB device [ 670.878002][T12477] sctp: [Deprecated]: syz.0.2138 (pid 12477) Use of int in maxseg socket option. [ 670.878002][T12477] Use struct sctp_assoc_value instead [ 671.023037][ T5791] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 672.672988][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 672.675373][ T5791] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 672.675398][ T5791] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 672.675451][ T5791] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 672.675473][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.032740][ T809] usb 5-1: USB disconnect, device number 33 [ 677.519496][T12522] syz.5.2152 (12522): drop_caches: 2 [ 677.965091][T12533] sctp: [Deprecated]: syz.2.2155 (pid 12533) Use of int in maxseg socket option. [ 677.965091][T12533] Use struct sctp_assoc_value instead [ 678.363235][ T5791] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 678.522944][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 678.525423][ T5791] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 678.525450][ T5791] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 678.525495][ T5791] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 678.525514][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.723167][T12543] binder: 12541:12543 ioctl c0306201 0 returned -14 [ 678.842962][ T5791] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 678.972908][ T5791] usb 2-1: device descriptor read/64, error -71 [ 679.213013][ T5791] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 679.343145][ T5791] usb 2-1: device descriptor read/64, error -71 [ 679.453347][ T5791] usb usb2-port1: attempt power cycle [ 679.742207][T12572] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 680.052897][ T5791] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 680.073874][ T5791] usb 2-1: device descriptor read/8, error -71 [ 680.323486][ T5791] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 680.350086][ T5791] usb 2-1: device descriptor read/8, error -71 [ 680.406332][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2168'. [ 680.454271][ T5791] usb usb2-port1: unable to enumerate USB device [ 681.139997][ T9740] usb 5-1: USB disconnect, device number 34 [ 681.353768][T12588] sctp: [Deprecated]: syz.0.2172 (pid 12588) Use of int in maxseg socket option. [ 681.353768][T12588] Use struct sctp_assoc_value instead [ 683.532917][T12385] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 683.694040][T12385] usb 6-1: Using ep0 maxpacket: 8 [ 683.695924][T12385] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 683.695940][T12385] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 683.695967][T12385] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 683.695979][T12385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.042952][ T5861] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 684.194603][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.194623][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.194643][ T5861] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 684.194655][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.212624][ T5861] usb 2-1: config 0 descriptor?? [ 684.457138][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 684.457259][ T5861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 684.494967][ T5861] usb 2-1: USB disconnect, device number 21 [ 685.627360][T12666] fuse: Unknown parameter 'user_id00000000000000000000' [ 685.688075][T12667] sctp: [Deprecated]: syz.4.2197 (pid 12667) Use of int in maxseg socket option. [ 685.688075][T12667] Use struct sctp_assoc_value instead [ 686.029237][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.029299][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.426113][ T5791] usb 6-1: USB disconnect, device number 7 [ 689.432996][T12701] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 689.440889][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 689.562981][ T9740] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 689.692916][ T9740] usb 3-1: device descriptor read/64, error -71 [ 689.890641][T12704] fuse: Bad value for 'fd' [ 689.942922][ T9740] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 690.092943][ T9740] usb 3-1: device descriptor read/64, error -71 [ 690.204318][ T9740] usb usb3-port1: attempt power cycle [ 690.382960][ T809] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 690.542939][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 690.542936][ T9740] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 690.572719][ T809] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 690.572747][ T809] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 690.572900][ T809] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.572941][ T809] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 690.572962][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.575845][ T9740] usb 3-1: device descriptor read/8, error -71 [ 690.653025][ T809] usbtmc 1-1:16.0: bulk endpoints not found [ 690.822938][ T9740] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 690.876125][ T9740] usb 3-1: device descriptor read/8, error -71 [ 691.024907][ T9740] usb usb3-port1: unable to enumerate USB device [ 692.499970][T12728] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 692.505775][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 693.410231][ T809] usb 1-1: USB disconnect, device number 37 [ 693.975819][T12735] sctp: [Deprecated]: syz.4.2215 (pid 12735) Use of int in maxseg socket option. [ 693.975819][T12735] Use struct sctp_assoc_value instead [ 694.194585][ T37] INFO: task syz.3.1431:10221 blocked for more than 144 seconds. [ 694.194609][ T37] Tainted: G L syzkaller #0 [ 694.194615][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 694.194621][ T37] task:syz.3.1431 state:D stack:24712 pid:10221 tgid:10221 ppid:5790 task_flags:0x400040 flags:0x00080002 [ 694.194654][ T37] Call Trace: [ 694.194661][ T37] [ 694.194668][ T37] __schedule+0x14fb/0x52c0 [ 694.194706][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 694.194726][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 694.194737][ T37] ? __pfx___schedule+0x10/0x10 [ 694.194757][ T37] rt_mutex_schedule+0x76/0xf0 [ 694.194770][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 694.194790][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 694.194803][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 694.194814][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 694.194823][ T37] ? kasan_record_aux_stack+0xbd/0xd0 [ 694.194849][ T37] ? bdev_release+0x1af/0x660 [ 694.194863][ T37] mutex_lock_nested+0x168/0x1d0 [ 694.194873][ T37] ? __pfx___fsnotify_parent+0x10/0x10 [ 694.194891][ T37] bdev_release+0x1af/0x660 [ 694.194909][ T37] ? __pfx_blkdev_release+0x10/0x10 [ 694.194920][ T37] blkdev_release+0x15/0x20 [ 694.194929][ T37] __fput+0x461/0xa90 [ 694.194947][ T37] task_work_run+0x1d9/0x270 [ 694.194961][ T37] ? __pfx_task_work_run+0x10/0x10 [ 694.194978][ T37] exit_to_user_mode_loop+0xed/0x480 [ 694.195000][ T37] ? rcu_is_watching+0x15/0xb0 [ 694.195014][ T37] do_syscall_64+0x32d/0xf80 [ 694.195027][ T37] ? trace_irq_disable+0x3b/0x150 [ 694.195039][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.195050][ T37] ? clear_bhb_loop+0x40/0x90 [ 694.195063][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.195073][ T37] RIP: 0033:0x7f63a3e6c799 [ 694.195086][ T37] RSP: 002b:00007ffd7f199dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 694.195097][ T37] RAX: 0000000000000000 RBX: 00007f63a40e7da0 RCX: 00007f63a3e6c799 [ 694.195105][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 694.195111][ T37] RBP: 00007f63a40e7da0 R08: 0000000000000006 R09: 0000000000000000 [ 694.195117][ T37] R10: 00007f63a40e7cb0 R11: 0000000000000246 R12: 0000000000084e15 [ 694.195124][ T37] R13: 00007f63a40e609c R14: 0000000000084b9a R15: 00007ffd7f199ed0 [ 694.195140][ T37] [ 694.195145][ T37] INFO: task syz.3.1431:10225 blocked for more than 144 seconds. [ 694.195153][ T37] Tainted: G L syzkaller #0 [ 694.195158][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 694.195162][ T37] task:syz.3.1431 state:D stack:28280 pid:10225 tgid:10221 ppid:5790 task_flags:0x400140 flags:0x00080002 [ 694.195190][ T37] Call Trace: [ 694.195194][ T37] [ 694.195199][ T37] __schedule+0x14fb/0x52c0 [ 694.195215][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 694.195227][ T37] ? __pfx_sched_clock_cpu+0x10/0x10 [ 694.195245][ T37] ? __pfx___schedule+0x10/0x10 [ 694.195265][ T37] rt_mutex_schedule+0x76/0xf0 [ 694.195277][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 694.195294][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 694.195305][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 694.195317][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 694.195328][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 694.195338][ T37] ? do_syscall_64+0x14d/0xf80 [ 694.195363][ T37] ? bdev_release+0x1af/0x660 [ 694.195381][ T37] mutex_lock_nested+0x168/0x1d0 [ 694.195391][ T37] ? __pfx___fsnotify_parent+0x10/0x10 [ 694.195405][ T37] bdev_release+0x1af/0x660 [ 694.195424][ T37] ? __pfx_blkdev_release+0x10/0x10 [ 694.195434][ T37] blkdev_release+0x15/0x20 [ 694.195443][ T37] __fput+0x461/0xa90 [ 694.195460][ T37] task_work_run+0x1d9/0x270 [ 694.195473][ T37] ? __pfx_task_work_run+0x10/0x10 [ 694.195483][ T37] ? __fput_deferred+0x253/0x3e0 [ 694.195500][ T37] exit_to_user_mode_loop+0xed/0x480 [ 694.195513][ T37] ? rcu_is_watching+0x15/0xb0 [ 694.195526][ T37] do_syscall_64+0x32d/0xf80 [ 694.195538][ T37] ? trace_irq_disable+0x3b/0x150 [ 694.195549][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.195559][ T37] ? clear_bhb_loop+0x40/0x90 [ 694.195571][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.195581][ T37] RIP: 0033:0x7f63a3e6c799 [ 694.195590][ T37] RSP: 002b:00007f63a20a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.195600][ T37] RAX: 0000000000000000 RBX: 00007f63a40e6090 RCX: 00007f63a3e6c799 [ 694.195606][ T37] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 694.195613][ T37] RBP: 00007f63a3f02bd9 R08: 0000000000000000 R09: 0000000000000000 [ 694.195619][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.195625][ T37] R13: 00007f63a40e6128 R14: 00007f63a40e6090 R15: 00007ffd7f199c68 [ 694.195641][ T37] [ 694.195670][ T37] [ 694.195670][ T37] Showing all locks held in the system: [ 694.195678][ T37] 1 lock held by khungtaskd/37: [ 694.195683][ T37] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 694.195717][ T37] 6 locks held by kworker/1:2/809: [ 694.195723][ T37] #0: ffff888021e81d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 694.195750][ T37] #1: ffffc90004a37c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 694.195776][ T37] #2: ffff8880292e1188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 694.195803][ T37] #3: ffff8880292e55b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 694.195828][ T37] #4: ffff8880279a7258 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 694.195853][ T37] #5: ffffffff8e9fa320 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 694.195894][ T37] 2 locks held by getty/5552: [ 694.195899][ T37] #0: ffff888036a2f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 694.195923][ T37] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 694.195952][ T37] 1 lock held by udevd/7739: [ 694.195958][ T37] #0: ffff8880260134c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 694.195984][ T37] 1 lock held by syz.3.1431/10221: [ 694.195994][ T37] #0: ffff8880260134c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 694.196021][ T37] 1 lock held by syz.3.1431/10225: [ 694.196026][ T37] #0: ffff8880260134c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 694.196055][ T37] 2 locks held by syz.5.2201/12710: [ 694.196060][ T37] 1 lock held by syz.1.2212/12723: [ 694.196066][ T37] 3 locks held by syz.2.2213/12727: [ 694.196072][ T37] 1 lock held by syz.2.2213/12728: [ 694.196077][ T37] #0: ffffffff8f159e38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 694.196101][ T37] 1 lock held by syz.4.2215/12734: [ 694.196107][ T37] [ 694.196110][ T37] ============================================= [ 694.196110][ T37] [ 694.196122][ T37] NMI backtrace for cpu 1 [ 694.196136][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 694.196150][ T37] Tainted: [L]=SOFTLOCKUP [ 694.196153][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 694.196159][ T37] Call Trace: [ 694.196163][ T37] [ 694.196167][ T37] dump_stack_lvl+0xe8/0x150 [ 694.196182][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 694.196193][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 694.196208][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 694.196220][ T37] sys_info+0x135/0x170 [ 694.196233][ T37] watchdog+0xfd9/0x1030 [ 694.196247][ T37] ? watchdog+0x21a/0x1030 [ 694.196262][ T37] kthread+0x388/0x470 [ 694.196272][ T37] ? __pfx_watchdog+0x10/0x10 [ 694.196283][ T37] ? __pfx_kthread+0x10/0x10 [ 694.196293][ T37] ret_from_fork+0x51e/0xb90 [ 694.196309][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 694.196321][ T37] ? __switch_to+0xc7d/0x1450 [ 694.196340][ T37] ? __pfx_kthread+0x10/0x10 [ 694.196351][ T37] ret_from_fork_asm+0x1a/0x30 [ 694.196367][ T37] [ 694.196371][ T37] Sending NMI from CPU 1 to CPUs 0: [ 694.196407][ C0] NMI backtrace for cpu 0 [ 694.196423][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 694.196446][ C0] Tainted: [L]=SOFTLOCKUP [ 694.196453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 694.196463][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 694.196487][ C0] Code: 0e 5e 02 e9 93 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 87 27 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 694.196503][ C0] RSP: 0018:ffffffff8da07dc0 EFLAGS: 00000246 [ 694.196518][ C0] RAX: 0000000000df15cf RBX: ffffffff8199512d RCX: 0000000080000001 [ 694.196530][ C0] RDX: 0000000000000001 RSI: ffffffff8d55c1b5 RDI: ffffffff8ba64600 [ 694.196543][ C0] RBP: ffffffff8da07eb0 R08: ffff8880b8833f1b R09: 1ffff110171067e3 [ 694.196556][ C0] R10: dffffc0000000000 R11: ffffed10171067e4 R12: ffffffff8f6a2db0 [ 694.196568][ C0] R13: 1ffffffff1b605d8 R14: 0000000000000000 R15: 0000000000000000 [ 694.196580][ C0] FS: 0000000000000000(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 694.196594][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.196606][ C0] CR2: 00002000001e3030 CR3: 000000006b5f8000 CR4: 00000000003526f0 [ 694.196621][ C0] DR0: 0000000040000005 DR1: 0000000100000000 DR2: 0000000000000898 [ 694.196633][ C0] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 694.196644][ C0] Call Trace: [ 694.196650][ C0] [ 694.196656][ C0] default_idle+0x9/0x20 [ 694.196681][ C0] default_idle_call+0x72/0xb0 [ 694.196706][ C0] do_idle+0x1bd/0x500 [ 694.196726][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 694.196750][ C0] ? __pfx_do_idle+0x10/0x10 [ 694.196774][ C0] cpu_startup_entry+0x43/0x60 [ 694.196793][ C0] rest_init+0x2de/0x300 [ 694.196810][ C0] start_kernel+0x385/0x3d0 [ 694.196830][ C0] x86_64_start_reservations+0x24/0x30 [ 694.196855][ C0] x86_64_start_kernel+0x143/0x1c0 [ 694.196878][ C0] common_startup_64+0x13e/0x147 [ 694.196902][ C0] [ 694.197396][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 694.197405][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 694.197419][ T37] Tainted: [L]=SOFTLOCKUP [ 694.197422][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 694.197428][ T37] Call Trace: [ 694.197432][ T37] [ 694.197436][ T37] vpanic+0x56c/0xa60 [ 694.197454][ T37] ? __pfx_vpanic+0x10/0x10 [ 694.197472][ T37] panic+0xc5/0xd0 [ 694.197486][ T37] ? __pfx_panic+0x10/0x10 [ 694.197498][ T37] ? printk_trigger_flush+0x117/0x180 [ 694.197513][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 694.197529][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 694.197541][ T37] watchdog+0x1023/0x1030 [ 694.197555][ T37] ? watchdog+0x21a/0x1030 [ 694.197570][ T37] kthread+0x388/0x470 [ 694.197580][ T37] ? __pfx_watchdog+0x10/0x10 [ 694.197590][ T37] ? __pfx_kthread+0x10/0x10 [ 694.197601][ T37] ret_from_fork+0x51e/0xb90 [ 694.197616][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 694.197629][ T37] ? __switch_to+0xc7d/0x1450 [ 694.197642][ T37] ? __pfx_kthread+0x10/0x10 [ 694.197652][ T37] ret_from_fork_asm+0x1a/0x30 [ 694.197668][ T37] [ 694.198045][ T37] Kernel Offset: disabled