last executing test programs: 13.158047476s ago: executing program 3 (id=4979): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000010c0)=0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r3}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) mount(0x0, &(0x7f0000000800)='.\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000006c0)='=\n\x9b\xa1Q\a\x00\n@\xf6\"2a\xd7\x1fch\x1a}#\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nR\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xd8ZE\x92\xb4\x18|\x14\xc8\x14\xab\xe3\xd2\xb8\xf9J\x13\xbc\xea\xccp;\xa5\xe8\r=\n\x9e\xfb\x17\"\xc4QJ\xdf\xa9\x02BQ\x11\b\xab\x14\xf7\x16\xde\xc3\x89\xc6d\xdd\x18\x01\xdd\xf3\xe2\xa5\xef\x02\x17T\x94\xb9\xd4v\xb1\xe3\xb7L\xe6>*\x11e\x18\xe7-\b\xe9\x87\x81,N\x1f\x94\xa4\xe5\xd6\xd4m\x92\xccg3jNvd\xd2O|c\xb3\xa0\xf2\xc6\\\x8a\'\xb3\x81S\x9b6\xf5\xb7\x93\v\xb0\aD\xb9\xf7>\xcf?\xea\xfb\xfc\xb9\x9d\xa5\xb5\xbc\xe2\xddUJN\xb2\xb7\x9c\xc3qk\x06\xdb\xd69\x8b\x00'/288) 12.845431846s ago: executing program 2 (id=4980): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x4, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.178597192s ago: executing program 3 (id=4982): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x48}}}}}}}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x48884) write$proc_mixer(r3, 0x0, 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r3, 0x0) 11.285944739s ago: executing program 2 (id=4985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.953356543s ago: executing program 2 (id=4988): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 10.275606809s ago: executing program 3 (id=4989): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x4, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xc, "e80ee304ecb784ec4655260c"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x78, 0x29, 0x36, {0x5e, 0xb, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x1b0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.84991366s ago: executing program 2 (id=4991): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/15, 0xf}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000000280)=""/7, 0x7}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) dup2(r3, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x1}, 0x40012100) r5 = socket$netlink(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001e0021002bbd7000000000000a000000050000000000000014"], 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 9.68986211s ago: executing program 3 (id=4992): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000020c0)=""/16, 0x10}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 7.377273026s ago: executing program 1 (id=4999): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x48}}}}}}}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x48884) write$proc_mixer(r1, 0x0, 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r1, 0x0) 7.282803298s ago: executing program 1 (id=5000): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5.526384123s ago: executing program 2 (id=5003): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) connect$pppl2tp(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast2}, 0x0, 0x1, 0x3, 0x1}}, 0x2e) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5.445569542s ago: executing program 1 (id=5004): setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = open(0x0, 0x1e5842, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r5, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000a3) 5.125436409s ago: executing program 4 (id=5005): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = getpgid(0xffffffffffffffff) setpriority(0x2, r0, 0xb0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, 0xffffffffffffffff, 0x4000000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) r2 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) r3 = memfd_create(&(0x7f0000000080)='/dev/udmabuf\x00', 0x4) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000040)={r3, 0x0, 0x10000, 0x1000000}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000340)={0x9}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000300)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000040)=0x29, 0x4) 4.589491649s ago: executing program 0 (id=5006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0xff, 0x0) 4.390991884s ago: executing program 0 (id=5007): syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000845dcf0886124620b705010203010902"], 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) open(0x0, 0x400141042, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200003, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000280)=ANY=[], 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.215715535s ago: executing program 4 (id=5008): open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_unlink(0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) 3.592653129s ago: executing program 3 (id=5009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x3, 0x635e, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.358389583s ago: executing program 1 (id=5010): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x48}}}}}}}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x48884) write$proc_mixer(r1, 0x0, 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r1, 0x0) 3.053739009s ago: executing program 1 (id=5011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.809839304s ago: executing program 3 (id=5012): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') 2.743406078s ago: executing program 4 (id=5013): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 2.683182746s ago: executing program 1 (id=5014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/15, 0xf}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000000280)=""/7, 0x7}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) dup2(r3, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x1}, 0x40012100) r5 = socket$netlink(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001e0021002bbd7000000000000a000000050000000000000014"], 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 2.625033876s ago: executing program 4 (id=5015): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x40084d0c, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 2.534782717s ago: executing program 4 (id=5016): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.426524622s ago: executing program 0 (id=5017): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x101040, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) epoll_create1(0x80000) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) unshare(0x2c020400) 2.104871032s ago: executing program 0 (id=5018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) prlimit64(r2, 0xa, &(0x7f00000000c0)={0xd35, 0x6}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 1.106267573s ago: executing program 0 (id=5019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) 1.064911536s ago: executing program 4 (id=5020): setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = open(0x0, 0x1e5842, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r5, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000a3) 1.023176127s ago: executing program 2 (id=5021): syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 0s ago: executing program 0 (id=5022): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) kernel console output (not intermixed with test programs): T17775] kvm: requested 35200 ns i8254 timer period limited to 200000 ns [ 748.913049][T17775] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 748.928967][T17775] kvm: requested 21790 ns i8254 timer period limited to 200000 ns [ 748.959782][T17775] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 749.064161][T17775] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 749.132103][T17775] kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 749.162942][T17775] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 749.378334][T17775] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 749.482374][T17775] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 749.861391][T17807] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3513'. [ 750.462394][T17828] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 752.439167][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 753.120619][T17870] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 755.742862][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3540'. [ 758.553277][T17920] input: syz0 as /devices/virtual/input/input12 [ 758.820538][T17926] syzkaller0: entered promiscuous mode [ 758.851836][T17926] syzkaller0: entered allmulticast mode [ 758.935736][T17933] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 759.765678][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 760.685395][T17956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 761.301938][ T7620] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 761.452059][ T7620] usb 5-1: Using ep0 maxpacket: 8 [ 761.460869][ T7620] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.495543][ T7620] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 761.544043][ T7620] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 761.601670][ T7620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.645419][ T7620] usb 5-1: Product: syz [ 761.668142][ T7620] usb 5-1: Manufacturer: syz [ 761.685016][ T7620] usb 5-1: SerialNumber: syz [ 761.694890][T17966] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 761.736318][ T7620] usb 5-1: config 0 descriptor?? [ 762.019427][T17972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.028426][T17972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.290096][T17980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.298870][T17980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.482102][ T7620] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 762.590533][ T30] audit: type=1326 audit(1764275783.602:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.3.3571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f838bb8f749 code=0x0 [ 762.622286][ T7620] usb 3-1: device descriptor read/64, error -71 [ 762.701636][T17992] loop3: detected capacity change from 0 to 128 [ 762.721989][T17992] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 763.562328][ T7620] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 763.691903][ T7620] usb 3-1: device descriptor read/64, error -71 [ 763.760287][T18001] tipc: Enabling of bearer rejected, failed to enable media [ 763.812297][ T7620] usb usb3-port1: attempt power cycle [ 764.161847][ T7620] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 764.204127][ T7620] usb 3-1: device descriptor read/8, error -71 [ 764.452150][ T7620] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 764.473611][T18016] input: syz0 as /devices/virtual/input/input13 [ 764.495530][ T7620] usb 3-1: device descriptor read/8, error -71 [ 764.498443][ T5998] usb 5-1: USB disconnect, device number 10 [ 764.550074][T18018] IPVS: length: 218 != 24 [ 764.612569][ T7620] usb usb3-port1: unable to enumerate USB device [ 765.945045][T18035] loop4: detected capacity change from 0 to 4096 [ 766.347226][T18039] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3587'. [ 766.617910][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 767.581355][T18069] loop0: detected capacity change from 0 to 32768 [ 767.591668][T18069] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3592 (18069) [ 767.618598][T18069] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 767.629006][T18069] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 767.786066][T18069] BTRFS info (device loop0): enabling ssd optimizations [ 767.795042][T18069] BTRFS info (device loop0): turning on async discard [ 767.801923][T18069] BTRFS info (device loop0): enabling free space tree [ 768.583376][T16000] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 768.661919][ T5827] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 768.803038][ T5827] usb 2-1: device descriptor read/64, error -71 [ 769.041646][T18098] loop3: detected capacity change from 0 to 4096 [ 769.091879][ T5827] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 769.283105][ T5827] usb 2-1: device descriptor read/64, error -71 [ 769.402405][ T5827] usb usb2-port1: attempt power cycle [ 769.751865][ T5827] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 769.801903][ T5827] usb 2-1: device descriptor read/8, error -71 [ 770.222558][ T5827] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 770.282583][ T5827] usb 2-1: device descriptor read/8, error -71 [ 770.375486][T18141] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3607'. [ 770.425400][ T5827] usb usb2-port1: unable to enumerate USB device [ 770.903351][T18155] syzkaller0: entered promiscuous mode [ 770.962125][T18155] syzkaller0: entered allmulticast mode [ 771.310189][T18169] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 772.111292][T18200] vivid-007: disconnect [ 772.116444][T18199] vivid-007: reconnect [ 772.453818][ T30] audit: type=1326 audit(1764275793.432:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 772.632538][ T7524] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 772.647740][ T30] audit: type=1326 audit(1764275793.432:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 772.817752][ T7524] usb 2-1: device descriptor read/64, error -71 [ 772.825598][ T30] audit: type=1326 audit(1764275793.432:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 772.859678][ T30] audit: type=1326 audit(1764275793.432:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 772.884278][ T30] audit: type=1326 audit(1764275793.432:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 772.909960][ T30] audit: type=1326 audit(1764275793.432:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 773.050358][ T30] audit: type=1326 audit(1764275793.432:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 773.073614][ T7524] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 773.128058][ T30] audit: type=1326 audit(1764275793.432:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 773.271656][ T7524] usb 2-1: device descriptor read/64, error -71 [ 773.343798][ T30] audit: type=1326 audit(1764275793.432:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 773.382286][ T7524] usb usb2-port1: attempt power cycle [ 773.445781][ T30] audit: type=1326 audit(1764275793.432:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 773.741903][ T7524] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 773.763804][ T7524] usb 2-1: device descriptor read/8, error -71 [ 774.022661][ T7524] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 774.052576][ T7524] usb 2-1: device descriptor read/8, error -71 [ 774.171983][ T7524] usb usb2-port1: unable to enumerate USB device [ 775.105837][T18285] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 775.113171][ T7524] IPVS: starting estimator thread 0... [ 775.121840][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 775.211907][T18289] IPVS: using max 30 ests per chain, 72000 per kthread [ 775.649805][ T48] IPVS: stop unused estimator thread 0... [ 776.172170][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 776.321945][ T10] usb 3-1: device descriptor read/64, error -71 [ 776.572080][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 776.724535][ T10] usb 3-1: device descriptor read/64, error -71 [ 776.854158][ T10] usb usb3-port1: attempt power cycle [ 777.221950][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 777.252546][ T10] usb 3-1: device descriptor read/8, error -71 [ 777.418145][T18346] use of bytesused == 0 is deprecated and will be removed in the future, [ 777.448130][T18346] use the actual size instead. [ 777.491834][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 777.522500][ T10] usb 3-1: device descriptor read/8, error -71 [ 777.636696][ T10] usb usb3-port1: unable to enumerate USB device [ 777.879382][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 777.879399][ T30] audit: type=1326 audit(1764275798.892:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 777.928163][ T30] audit: type=1326 audit(1764275798.892:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 777.971101][ T30] audit: type=1326 audit(1764275798.892:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 778.006169][ T30] audit: type=1326 audit(1764275798.892:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 778.071954][ T30] audit: type=1326 audit(1764275798.892:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 778.103540][ T30] audit: type=1326 audit(1764275798.892:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 778.128772][ T30] audit: type=1326 audit(1764275798.892:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 778.154684][ T30] audit: type=1326 audit(1764275798.892:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 778.181544][ T5915] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 778.183026][T14735] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 778.220683][ T30] audit: type=1326 audit(1764275798.892:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 778.245134][ T5915] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 778.256556][T14735] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 778.277189][ T5915] usb 4-1: USB disconnect, device number 12 [ 778.278765][T14735] usb 1-1: USB disconnect, device number 14 [ 778.289562][ T30] audit: type=1326 audit(1764275798.892:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2200f2b829 code=0x7ffc0000 [ 778.630080][T18365] loop1: detected capacity change from 0 to 32768 [ 778.638107][T18365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3679 (18365) [ 778.653390][T18365] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 778.663606][T18365] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 778.671874][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 778.744977][T18365] BTRFS info (device loop1): enabling ssd optimizations [ 778.752275][T18365] BTRFS info (device loop1): turning on async discard [ 778.759050][T18365] BTRFS info (device loop1): enabling free space tree [ 779.075807][ T5915] usb 4-1: device descriptor read/all, error -71 [ 779.599808][T18405] netlink: 'syz.0.3685': attribute type 10 has an invalid length. [ 779.725816][T14735] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 779.972349][T18410] netlink: 'syz.2.3686': attribute type 4 has an invalid length. [ 779.996869][T18405] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 780.069826][T18408] netlink: 'syz.2.3686': attribute type 4 has an invalid length. [ 780.092103][T14735] usb 5-1: Using ep0 maxpacket: 32 [ 780.106988][T14735] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.127249][T14735] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 780.150979][T14735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.165867][T14735] usb 5-1: config 0 descriptor?? [ 780.187986][T14735] dvb-usb: found a 'TeVii S662' in warm state. [ 780.204408][T14735] dw2102: su3000_power_ctrl: 1, initialized 0 [ 780.211096][T14735] dvb-usb: bulk message failed: -22 (2/0) [ 780.226410][T14735] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 780.237128][T14735] dvbdev: DVB: registering new adapter (TeVii S662) [ 780.247749][T14735] usb 5-1: media controller created [ 780.255243][T14735] dvb-usb: bulk message failed: -22 (6/0) [ 780.264314][T14735] dw2102: i2c transfer failed. [ 780.273005][T14735] dvb-usb: bulk message failed: -22 (6/0) [ 780.278849][T14735] dw2102: i2c transfer failed. [ 780.305041][T14735] dvb-usb: bulk message failed: -22 (6/0) [ 780.319401][T14735] dw2102: i2c transfer failed. [ 780.344410][T14735] dvb-usb: bulk message failed: -22 (6/0) [ 780.351121][T14735] dw2102: i2c transfer failed. [ 780.356530][T14735] dvb-usb: bulk message failed: -22 (6/0) [ 780.366309][T14735] dw2102: i2c transfer failed. [ 780.373907][T14735] dvb-usb: bulk message failed: -22 (6/0) [ 780.379770][T14735] dw2102: i2c transfer failed. [ 780.405565][T18403] dvb-usb: bulk message failed: -22 (37/0) [ 780.422061][T14735] dvb-usb: MAC address: 02:02:02:02:02:02 [ 780.428009][T18403] dw2102: i2c transfer failed. [ 780.441814][T18403] i2c i2c-1: Invalid block size returned: 33 [ 780.455791][T14735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.497523][T14735] dvb-usb: bulk message failed: -22 (3/0) [ 780.504885][T14735] dw2102: command 0x0e transfer failed. [ 780.513607][T14735] dvb-usb: bulk message failed: -22 (3/0) [ 780.520208][T14735] dw2102: command 0x0e transfer failed. [ 780.625336][T15178] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 780.882081][T14735] dvb-usb: bulk message failed: -22 (3/0) [ 780.891125][T14735] dw2102: command 0x0e transfer failed. [ 780.917577][T14735] dvb-usb: bulk message failed: -22 (3/0) [ 780.959000][T14735] dw2102: command 0x0e transfer failed. [ 780.965324][T14735] dvb-usb: bulk message failed: -22 (1/0) [ 780.989751][T14735] dw2102: command 0x51 transfer failed. [ 781.020868][T14735] dvb-usb: bulk message failed: -22 (5/0) [ 781.053311][T14735] dw2102: i2c probe for address 0x68 failed. [ 781.066096][T14735] dvb-usb: bulk message failed: -22 (5/0) [ 781.120896][T14735] dw2102: i2c probe for address 0x69 failed. [ 781.143602][T14735] dvb-usb: bulk message failed: -22 (5/0) [ 781.173432][T14735] dw2102: i2c probe for address 0x6a failed. [ 781.195938][T14735] dw2102: probing for demodulator failed. Is the external power switched on? [ 781.254102][T14735] dvb-usb: no frontend was attached by 'TeVii S662' [ 781.489363][T18434] tipc: Enabled bearer , priority 0 [ 781.502019][T14735] rc_core: IR keymap rc-tt-1500 not found [ 781.507852][T14735] Registered IR keymap rc-empty [ 781.532179][T18434] syzkaller0: entered promiscuous mode [ 781.532931][T14735] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 781.537775][T18434] syzkaller0: entered allmulticast mode [ 781.571844][ T5893] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 781.625118][T14735] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15 [ 781.655690][T18434] tipc: Resetting bearer [ 781.670707][T18433] tipc: Resetting bearer [ 781.677466][T14735] dvb-usb: schedule remote query interval to 250 msecs. [ 781.690487][T14735] dw2102: su3000_power_ctrl: 0, initialized 1 [ 781.707810][T14735] dvb-usb: TeVii S662 successfully initialized and connected. [ 781.748086][T18433] tipc: Disabling bearer [ 781.761648][T14735] usb 5-1: USB disconnect, device number 11 [ 781.792078][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 781.798131][ T5893] usb 1-1: no configurations [ 781.803708][ T5893] usb 1-1: can't read configurations, error -22 [ 781.944478][T14735] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 781.971852][ T5893] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 781.977016][T18439] syzkaller0: entered promiscuous mode [ 781.986082][T18446] netlink: 'syz.1.3698': attribute type 10 has an invalid length. [ 782.026111][T18439] syzkaller0: entered allmulticast mode [ 782.192652][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 782.199111][ T5893] usb 1-1: no configurations [ 782.203868][ T5893] usb 1-1: can't read configurations, error -22 [ 782.217812][ T5893] usb usb1-port1: attempt power cycle [ 782.415864][ T5915] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 782.645638][ T5893] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 782.663692][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 782.672524][ T5893] usb 1-1: no configurations [ 782.677369][ T5893] usb 1-1: can't read configurations, error -22 [ 782.698368][ T5915] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 782.708205][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.718682][ T5915] usb 4-1: Product: syz [ 782.738237][ T5915] usb 4-1: Manufacturer: syz [ 782.750840][ T5915] usb 4-1: SerialNumber: syz [ 782.805146][ T5915] usb 4-1: config 0 descriptor?? [ 782.854307][ T5893] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 782.882766][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 782.892312][ T5893] usb 1-1: no configurations [ 782.898815][ T5893] usb 1-1: can't read configurations, error -22 [ 782.905990][ T5893] usb usb1-port1: unable to enumerate USB device [ 784.854822][ T5915] usb 4-1: USB disconnect, device number 15 [ 785.066082][ T30] kauditd_printk_skb: 386 callbacks suppressed [ 785.066099][ T30] audit: type=1326 audit(1764275806.082:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.118760][ T30] audit: type=1326 audit(1764275806.082:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.143046][ T30] audit: type=1326 audit(1764275806.112:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.166165][ T30] audit: type=1326 audit(1764275806.112:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.267426][ T30] audit: type=1326 audit(1764275806.112:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.310702][ T30] audit: type=1326 audit(1764275806.112:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.333802][ T30] audit: type=1326 audit(1764275806.112:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.366134][ T30] audit: type=1326 audit(1764275806.112:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.426080][ T30] audit: type=1326 audit(1764275806.122:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.449052][ T30] audit: type=1326 audit(1764275806.122:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838bb8f749 code=0x7ffc0000 [ 785.775819][T18446] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 785.935755][T18469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3703'. [ 786.212420][T18481] tipc: Enabled bearer , priority 0 [ 786.221175][T18481] tipc: Resetting bearer [ 786.256982][T18480] tipc: Disabling bearer [ 786.277280][T18476] syz.4.3705 (18476): drop_caches: 2 [ 786.566804][T18491] loop5: detected capacity change from 0 to 1375 [ 786.821880][T18502] netlink: 'syz.1.3714': attribute type 10 has an invalid length. [ 787.159688][T18514] ipt_ECN: cannot use operation on non-tcp rule [ 787.531599][T18525] loop0: detected capacity change from 0 to 32768 [ 787.545522][T18525] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3718 (18525) [ 787.754026][T18525] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 787.764253][T18525] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 788.007546][T18525] BTRFS info (device loop0): enabling ssd optimizations [ 788.014595][T18525] BTRFS info (device loop0): turning on async discard [ 788.021360][T18525] BTRFS info (device loop0): enabling free space tree [ 788.334880][T16000] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 788.584849][T18544] syzkaller0: entered promiscuous mode [ 788.590367][T18544] syzkaller0: entered allmulticast mode [ 789.626722][T18565] tipc: Enabled bearer , priority 0 [ 789.736927][T18565] syzkaller0: entered promiscuous mode [ 789.764825][T18565] syzkaller0: entered allmulticast mode [ 789.859109][T18565] tipc: Resetting bearer [ 789.886190][T18562] tipc: Resetting bearer [ 789.974833][T18562] tipc: Disabling bearer [ 790.420648][T18580] loop4: detected capacity change from 0 to 4096 [ 790.672765][T18588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3735'. [ 791.066979][T18596] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 791.353454][T18601] cgroup: name respecified [ 793.251166][T18636] loop3: detected capacity change from 0 to 32768 [ 793.259729][T18636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3750 (18636) [ 793.276280][T18636] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 793.286839][T18636] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 793.400139][T18636] BTRFS info (device loop3): enabling ssd optimizations [ 793.407189][T18636] BTRFS info (device loop3): turning on async discard [ 793.414020][T18636] BTRFS info (device loop3): enabling free space tree [ 794.150121][T15605] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 795.179001][ T7524] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 795.313796][T18684] syzkaller0: entered promiscuous mode [ 795.322349][T18684] syzkaller0: entered allmulticast mode [ 795.442277][ T7524] usb 1-1: Using ep0 maxpacket: 32 [ 795.450363][ T7524] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.463031][ T7524] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 795.475331][ T7524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.487450][ T7524] usb 1-1: config 0 descriptor?? [ 795.496287][ T7524] dvb-usb: found a 'TeVii S662' in warm state. [ 795.503018][ T7524] dw2102: su3000_power_ctrl: 1, initialized 0 [ 795.509285][ T7524] dvb-usb: bulk message failed: -22 (2/0) [ 795.518496][ T7524] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 795.568017][ T7524] dvbdev: DVB: registering new adapter (TeVii S662) [ 795.722511][ T7524] usb 1-1: media controller created [ 795.727821][ T7524] dvb-usb: bulk message failed: -22 (6/0) [ 795.734532][ T7524] dw2102: i2c transfer failed. [ 795.739314][ T7524] dvb-usb: bulk message failed: -22 (6/0) [ 795.781352][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 795.797942][ T7524] dw2102: i2c transfer failed. [ 795.812851][ T7524] dvb-usb: bulk message failed: -22 (6/0) [ 795.819014][ T7524] dw2102: i2c transfer failed. [ 795.824599][ T7524] dvb-usb: bulk message failed: -22 (6/0) [ 795.830600][ T7524] dw2102: i2c transfer failed. [ 795.847712][ T7524] dvb-usb: bulk message failed: -22 (6/0) [ 796.098640][ T7524] dw2102: i2c transfer failed. [ 796.128762][ T7524] dvb-usb: bulk message failed: -22 (6/0) [ 796.186761][ T50] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 796.237210][ T7524] dw2102: i2c transfer failed. [ 796.244691][ T7524] dvb-usb: MAC address: 02:02:02:02:02:02 [ 796.316418][ T7524] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 796.380166][ T7524] dvb-usb: bulk message failed: -22 (3/0) [ 796.386221][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 796.421961][ T50] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 796.463335][ T7524] dw2102: command 0x0e transfer failed. [ 796.470446][ T7524] dvb-usb: bulk message failed: -22 (3/0) [ 796.482140][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.490372][ T7524] dw2102: command 0x0e transfer failed. [ 796.566270][ T50] usb 5-1: config 0 descriptor?? [ 796.673378][T18703] netlink: 'syz.0.3768': attribute type 29 has an invalid length. [ 796.682356][T18703] netlink: 'syz.0.3768': attribute type 29 has an invalid length. [ 796.791328][ T50] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 796.815044][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 796.879171][ T50] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 796.886698][ T7524] dvb-usb: bulk message failed: -22 (3/0) [ 796.906910][ T7524] dw2102: command 0x0e transfer failed. [ 796.916189][ T50] usb 5-1: media controller created [ 796.929825][ T7524] dvb-usb: bulk message failed: -22 (3/0) [ 796.950026][ T7524] dw2102: command 0x0e transfer failed. [ 796.966522][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 796.987520][ T7524] dvb-usb: bulk message failed: -22 (1/0) [ 796.994072][ T7524] dw2102: command 0x51 transfer failed. [ 797.012962][ T7524] dvb-usb: bulk message failed: -22 (5/0) [ 797.032077][ T7524] dw2102: i2c probe for address 0x68 failed. [ 797.044347][ T7524] dvb-usb: bulk message failed: -22 (5/0) [ 797.059422][ T7524] dw2102: i2c probe for address 0x69 failed. [ 797.088177][ T7524] dvb-usb: bulk message failed: -22 (5/0) [ 797.110766][ T7524] dw2102: i2c probe for address 0x6a failed. [ 797.127689][T18692] dvb-usb: bulk message failed: -22 (5/0) [ 797.136924][ T7524] dw2102: probing for demodulator failed. Is the external power switched on? [ 797.148185][T18692] dw2102: i2c transfer failed. [ 797.168416][ T7524] dvb-usb: no frontend was attached by 'TeVii S662' [ 797.176347][ T50] az6027: usb out operation failed. (-71) [ 797.194499][ T50] az6027: usb out operation failed. (-71) [ 797.208017][ T50] stb0899_attach: Driver disabled by Kconfig [ 797.229464][ T50] az6027: no front-end attached [ 797.229464][ T50] [ 797.254117][ T50] az6027: usb out operation failed. (-71) [ 797.277326][ T50] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 797.323066][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 797.369776][ T50] dvb-usb: schedule remote query interval to 400 msecs. [ 797.422836][ T50] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 797.464403][ T50] usb 5-1: USB disconnect, device number 12 [ 797.651806][ T7524] rc_core: IR keymap rc-tt-1500 not found [ 797.681584][ T7524] Registered IR keymap rc-empty [ 797.695878][ T7524] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 797.720676][ T7524] input: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input16 [ 797.824303][ T7524] dvb-usb: schedule remote query interval to 250 msecs. [ 797.831310][ T7524] dw2102: su3000_power_ctrl: 0, initialized 1 [ 797.909533][ T7524] dvb-usb: TeVii S662 successfully initialized and connected. [ 797.919154][ T50] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 797.958516][ T7524] usb 1-1: USB disconnect, device number 19 [ 798.158518][ T7524] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 798.338930][T18705] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 798.346219][ T5943] IPVS: starting estimator thread 0... [ 798.397523][T18730] syzkaller0: entered promiscuous mode [ 798.410750][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3778'. [ 798.420094][T18730] syzkaller0: entered allmulticast mode [ 798.448168][T18731] IPVS: using max 25 ests per chain, 60000 per kthread [ 798.455268][ T50] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 798.751827][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 799.010006][ T50] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 799.048475][ T6338] IPVS: stop unused estimator thread 0... [ 799.056338][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.092864][ T50] usb 5-1: config 0 descriptor?? [ 799.320088][ T50] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 799.459059][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 799.511500][T18721] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 799.550826][ T50] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 799.702753][T18754] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3781'. [ 799.722036][ T50] usb 5-1: media controller created [ 799.930093][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.359855][ T50] az6027: usb out operation failed. (-71) [ 800.440478][ T50] az6027: usb out operation failed. (-71) [ 800.459591][ T50] stb0899_attach: Driver disabled by Kconfig [ 800.473730][ T50] az6027: no front-end attached [ 800.473730][ T50] [ 800.495623][ T50] az6027: usb out operation failed. (-71) [ 800.508114][T18765] create_pit_timer: 5 callbacks suppressed [ 800.508125][T18765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 800.524803][ T50] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 800.544258][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 800.564457][T18765] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 800.584714][T18765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 800.607424][T18765] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 800.625245][T18765] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 800.641260][ T50] dvb-usb: schedule remote query interval to 400 msecs. [ 800.664072][T18765] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 800.677745][ T50] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 800.748798][T18765] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 800.797736][T18765] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 800.808294][ T50] usb 5-1: USB disconnect, device number 13 [ 800.832786][T18765] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 800.867571][T18765] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 801.095473][ T50] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 802.007697][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3792'. [ 802.039228][T18788] @: renamed from syz_tun (while UP) [ 802.798771][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3800'. [ 805.100368][T18835] netlink: 'syz.0.3808': attribute type 10 has an invalid length. [ 805.601476][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 808.573261][T18888] loop4: detected capacity change from 0 to 32768 [ 808.580854][T18888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3825 (18888) [ 808.595751][T18888] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 808.606003][T18888] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 808.738850][T18888] BTRFS info (device loop4): enabling ssd optimizations [ 808.745984][T18888] BTRFS info (device loop4): turning on async discard [ 808.752910][T18888] BTRFS info (device loop4): enabling free space tree [ 808.900302][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.910278][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.455704][T16584] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 812.092437][ T50] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 812.284116][ T50] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 812.315400][ T50] usb 2-1: config 0 has no interface number 1 [ 812.536374][ T50] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 812.596252][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.697140][ T50] usb 2-1: config 0 descriptor?? [ 812.792884][T18959] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 814.213083][T18972] netlink: 'syz.0.3846': attribute type 10 has an invalid length. [ 815.431834][ T50] usb 2-1: USB disconnect, device number 17 [ 815.943477][T19002] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 816.322281][ T50] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 816.545006][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 816.615903][ T50] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.688085][ T50] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 816.773474][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.892991][ T50] usb 1-1: config 0 descriptor?? [ 817.087168][ T50] dvb-usb: found a 'TeVii S662' in warm state. [ 817.138576][ T50] dw2102: su3000_power_ctrl: 1, initialized 0 [ 817.168961][ T50] dvb-usb: bulk message failed: -22 (2/0) [ 818.077427][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 818.157600][ T50] dvbdev: DVB: registering new adapter (TeVii S662) [ 818.212950][ T50] usb 1-1: media controller created [ 818.218205][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 818.241787][ T50] dw2102: i2c transfer failed. [ 818.280353][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 818.318894][ T50] dw2102: i2c transfer failed. [ 818.348837][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 818.508832][ T50] dw2102: i2c transfer failed. [ 818.518726][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 818.524930][ T50] dw2102: i2c transfer failed. [ 818.796949][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 818.807274][ T50] dw2102: i2c transfer failed. [ 818.815454][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 818.830111][ T50] dw2102: i2c transfer failed. [ 818.846059][ T50] dvb-usb: MAC address: 02:02:02:02:02:02 [ 819.065131][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.265446][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 819.277394][ T50] dw2102: command 0x0e transfer failed. [ 819.291786][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 819.347812][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 819.411789][ T50] dw2102: command 0x0e transfer failed. [ 819.579436][T19049] fuse: Bad value for 'fd' [ 819.731856][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 819.778646][ T50] dw2102: command 0x0e transfer failed. [ 819.792110][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 819.808717][ T50] dw2102: command 0x0e transfer failed. [ 819.928405][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 819.943220][ T50] dw2102: command 0x51 transfer failed. [ 819.964531][ T50] dvb-usb: bulk message failed: -22 (5/0) [ 819.990913][ T50] dw2102: i2c probe for address 0x68 failed. [ 820.040985][ T50] dvb-usb: bulk message failed: -22 (5/0) [ 820.121231][ T50] dw2102: i2c probe for address 0x69 failed. [ 820.208113][ T50] dvb-usb: bulk message failed: -22 (5/0) [ 820.214829][ T50] dw2102: i2c probe for address 0x6a failed. [ 820.221018][ T50] dw2102: probing for demodulator failed. Is the external power switched on? [ 820.230427][ T50] dvb-usb: no frontend was attached by 'TeVii S662' [ 820.556604][ T50] rc_core: IR keymap rc-tt-1500 not found [ 820.587981][ T50] Registered IR keymap rc-empty [ 820.687810][ T50] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 820.754029][ T50] input: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input19 [ 820.847064][ T50] dvb-usb: schedule remote query interval to 250 msecs. [ 820.887702][ T50] dw2102: su3000_power_ctrl: 0, initialized 1 [ 820.933277][ T50] dvb-usb: TeVii S662 successfully initialized and connected. [ 820.989864][ T50] usb 1-1: USB disconnect, device number 20 [ 821.449352][ T50] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 821.669877][T19062] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 821.782052][ T5943] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 821.986348][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 822.291294][ T5943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.415535][ T5943] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 822.516463][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.494013][ T5943] usb 4-1: config 0 descriptor?? [ 823.526581][ T5943] dvb-usb: found a 'TeVii S662' in warm state. [ 823.543912][ T5943] dw2102: su3000_power_ctrl: 1, initialized 0 [ 823.550030][ T5943] dvb-usb: bulk message failed: -22 (2/0) [ 823.602808][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.642704][ T5943] dvbdev: DVB: registering new adapter (TeVii S662) [ 823.649490][ T5943] usb 4-1: media controller created [ 823.681931][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 823.731823][ T5943] dw2102: i2c transfer failed. [ 823.736752][T19059] dvb-usb: bulk message failed: -22 (37/0) [ 823.753722][T19059] dw2102: i2c transfer failed. [ 823.769156][T19059] i2c i2c-1: Invalid block size returned: 33 [ 823.782078][ T5998] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 823.800582][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 823.807148][ T5943] dw2102: i2c transfer failed. [ 823.820345][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 823.833854][ T5943] dw2102: i2c transfer failed. [ 823.850837][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 823.861008][ T5943] dw2102: i2c transfer failed. [ 823.870542][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 823.877773][ T5943] dw2102: i2c transfer failed. [ 823.882662][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 823.888490][ T5943] dw2102: i2c transfer failed. [ 823.895241][ T5943] dvb-usb: MAC address: 02:02:02:02:02:02 [ 823.919871][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.961790][ T5998] usb 2-1: Using ep0 maxpacket: 32 [ 823.968654][ T5998] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 823.989971][ T5998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.004587][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 824.014889][ T5943] dw2102: command 0x0e transfer failed. [ 824.021874][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 824.029334][ T5998] usb 2-1: config 0 descriptor?? [ 824.034517][ T5943] dw2102: command 0x0e transfer failed. [ 824.352009][ T5998] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 824.358856][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 824.381153][ T5943] dw2102: command 0x0e transfer failed. [ 824.391014][ T5998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 824.406952][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 824.424403][ T5943] dw2102: command 0x0e transfer failed. [ 824.434350][ T5998] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 824.447173][ T5943] dvb-usb: bulk message failed: -22 (1/0) [ 824.466083][T19078] ALSA: mixer_oss: invalid OSS volume '' [ 824.477277][ T5998] usb 2-1: media controller created [ 824.487168][ T5943] dw2102: command 0x51 transfer failed. [ 824.551787][ T5943] dvb-usb: bulk message failed: -22 (5/0) [ 824.573580][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.575874][ T5943] dw2102: i2c probe for address 0x68 failed. [ 824.614619][ T5943] dvb-usb: bulk message failed: -22 (5/0) [ 824.806855][ T5998] az6027: usb out operation failed. (-71) [ 824.813713][ T5943] dw2102: i2c probe for address 0x69 failed. [ 824.842165][ T5998] az6027: usb out operation failed. (-71) [ 824.856020][ T5943] dvb-usb: bulk message failed: -22 (5/0) [ 824.873962][ T5998] stb0899_attach: Driver disabled by Kconfig [ 824.905556][ T5943] dw2102: i2c probe for address 0x6a failed. [ 824.912490][ T5998] az6027: no front-end attached [ 824.912490][ T5998] [ 824.925512][ T5943] dw2102: probing for demodulator failed. Is the external power switched on? [ 824.936830][ T5998] az6027: usb out operation failed. (-71) [ 824.951762][ T5943] dvb-usb: no frontend was attached by 'TeVii S662' [ 824.958479][ T5998] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 824.975675][ T5998] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 825.016754][ T5998] dvb-usb: schedule remote query interval to 400 msecs. [ 825.028888][ T5998] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 825.079331][ T5998] usb 2-1: USB disconnect, device number 18 [ 825.291942][ T5943] rc_core: IR keymap rc-tt-1500 not found [ 825.298208][ T5943] Registered IR keymap rc-empty [ 825.325913][ T5943] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 825.359183][ T5998] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 825.374561][ T5943] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input20 [ 825.408540][ T5943] dvb-usb: schedule remote query interval to 250 msecs. [ 825.434701][ T5943] dw2102: su3000_power_ctrl: 0, initialized 1 [ 825.454696][ T5943] dvb-usb: TeVii S662 successfully initialized and connected. [ 825.476860][T19093] loop3: detected capacity change from 0 to 4096 [ 825.502065][ T5943] usb 4-1: USB disconnect, device number 16 [ 825.714113][ T5943] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 825.932964][T19100] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 826.983837][T19119] netlink: 'syz.4.3885': attribute type 13 has an invalid length. [ 827.152873][ T5943] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 827.313563][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 827.331819][ T5998] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 827.529650][ T5943] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 827.539095][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.553039][ T5943] usb 2-1: config 0 descriptor?? [ 827.676527][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 827.701106][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 827.793480][ T5943] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 827.827763][ T5998] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 827.839947][ T5943] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 827.866898][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.876664][ T5943] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 827.884411][T19130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3892'. [ 827.904932][ T5998] usb 5-1: config 0 descriptor?? [ 827.944029][T19107] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 828.987445][T19144] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 829.239641][T19148] loop1: detected capacity change from 0 to 4096 [ 829.656335][ T60] ntfs3(loop1): ino=5, mi_enum_attr [ 829.908879][T19161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3904'. [ 830.198210][T19168] capability: warning: `syz.0.3905' uses 32-bit capabilities (legacy support in use) [ 830.426983][ T5998] usbhid 5-1:0.0: can't add hid device: -71 [ 830.433701][ T5998] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 830.488495][ T5998] usb 5-1: USB disconnect, device number 14 [ 831.144855][T19193] loop5: detected capacity change from 0 to 7911 [ 831.180771][T19193] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 831.793566][T19204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3917'. [ 834.497931][T19240] tipc: Enabled bearer , priority 0 [ 834.530412][T19240] syzkaller0: entered promiscuous mode [ 834.559931][T19240] syzkaller0: entered allmulticast mode [ 834.604617][T19240] tipc: Resetting bearer [ 834.614046][T19239] tipc: Resetting bearer [ 834.665587][T19239] tipc: Disabling bearer [ 835.051671][T19254] binder: binder_mmap: 19247 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 835.105817][T19250] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 836.126581][T19268] syzkaller0: entered promiscuous mode [ 836.133359][T19268] syzkaller0: entered allmulticast mode [ 836.406265][T19277] fuse: Bad value for 'user_id' [ 836.411142][T19277] fuse: Bad value for 'user_id' [ 836.718151][T19282] syzkaller0: entered promiscuous mode [ 836.749461][T19282] syzkaller0: entered allmulticast mode [ 837.124545][T14732] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 837.180103][T19292] netlink: 'syz.4.3940': attribute type 4 has an invalid length. [ 837.225939][T19292] netlink: 'syz.4.3940': attribute type 4 has an invalid length. [ 837.292466][T14732] usb 1-1: Using ep0 maxpacket: 16 [ 837.300158][T14732] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 837.319041][T14732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 837.352830][T14732] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 837.387926][T14732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.425647][T14732] usb 1-1: Product: syz [ 837.431780][T14732] usb 1-1: Manufacturer: syz [ 837.443674][T14732] usb 1-1: SerialNumber: syz [ 837.465431][T14732] usb 1-1: config 0 descriptor?? [ 837.486461][T14732] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 837.504552][T14732] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 837.663263][T19296] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3942'. [ 838.181940][ T5998] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 838.332186][ T5998] usb 5-1: Using ep0 maxpacket: 32 [ 838.340603][ T5998] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 838.351036][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.368894][ T5998] usb 5-1: config 0 descriptor?? [ 838.516154][T19306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.524835][T14732] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 838.533737][T19306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.631072][ T5998] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 839.604754][T14732] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 839.612326][T14732] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 839.635418][T14732] em28xx 1-1:0.0: No AC97 audio processor [ 839.749162][T19321] syzkaller0: entered promiscuous mode [ 839.770663][T19321] syzkaller0: entered allmulticast mode [ 840.309603][T19329] netlink: 'syz.3.3952': attribute type 4 has an invalid length. [ 840.360475][T19337] netlink: 'syz.3.3952': attribute type 4 has an invalid length. [ 840.423469][T14732] usb 1-1: USB disconnect, device number 21 [ 840.436771][T14732] em28xx 1-1:0.0: Disconnecting em28xx [ 840.480993][T14732] em28xx 1-1:0.0: Freeing device [ 842.353573][T19373] syzkaller0: entered promiscuous mode [ 842.367258][T19373] syzkaller0: entered allmulticast mode [ 844.046948][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3963'. [ 844.093555][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3964'. [ 844.484617][T19386] netlink: 'syz.0.3968': attribute type 4 has an invalid length. [ 844.518420][T19386] netlink: 'syz.0.3968': attribute type 4 has an invalid length. [ 845.083681][T19402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3969'. [ 845.094839][T19402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3969'. [ 846.883742][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3975'. [ 848.184951][T19442] netlink: 'syz.2.3983': attribute type 4 has an invalid length. [ 848.236712][T19446] netlink: 'syz.2.3983': attribute type 4 has an invalid length. [ 849.328787][T19460] syzkaller1: entered promiscuous mode [ 849.361823][T19460] syzkaller1: entered allmulticast mode [ 849.398309][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3987'. [ 849.442784][T19460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3987'. [ 850.497646][T19482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3992'. [ 850.803296][T19491] syzkaller0: entered promiscuous mode [ 850.808959][T19491] syzkaller0: entered allmulticast mode [ 852.376086][T19517] syzkaller0: entered promiscuous mode [ 852.385038][T19517] syzkaller0: entered allmulticast mode [ 853.041606][T19527] syzkaller0: entered promiscuous mode [ 853.062622][T19527] syzkaller0: entered allmulticast mode [ 853.299651][T19536] loop3: detected capacity change from 0 to 4096 [ 854.273134][T19552] syzkaller0: entered promiscuous mode [ 854.289701][T19552] syzkaller0: entered allmulticast mode [ 855.181424][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4021'. [ 855.192183][T19560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4021'. [ 855.887426][T19585] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 855.920666][T19585] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 855.931596][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4033'. [ 855.936302][T19585] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 855.969014][T19585] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 855.977740][T19585] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 855.987104][T19585] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 855.998079][T19585] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 856.007123][T19585] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 856.018251][T19585] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 856.027359][T19585] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 856.356795][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 856.521965][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 856.538554][ T5901] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.557648][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 856.581537][ T5901] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 856.592668][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.607509][ T5901] usb 4-1: config 0 descriptor?? [ 856.704763][T19608] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 857.519379][ T5901] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 857.535246][T19612] vivid-007: disconnect [ 857.548342][T19611] vivid-007: reconnect [ 857.654248][ T5901] usb 4-1: USB disconnect, device number 17 [ 858.083770][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'. [ 858.608553][T19633] fuse: root generation should be zero [ 859.630959][T19648] syzkaller0: entered promiscuous mode [ 859.638151][T19648] syzkaller0: entered allmulticast mode [ 860.126094][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4057'. [ 861.274009][T19695] binder: binder_mmap: 19687 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 861.778768][T19690] loop4: detected capacity change from 0 to 4096 [ 862.677506][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4070'. [ 863.603336][T19718] ALSA: mixer_oss: invalid OSS volume '' [ 863.896262][T19745] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 863.921661][T19745] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 864.033533][ T5901] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 864.110636][T19745] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 864.130252][T19745] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 864.140590][T19745] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 864.175931][T19745] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 864.191528][T19745] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 864.201819][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 864.209622][ T5901] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 864.226878][T19745] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 864.250946][ T5901] usb 1-1: config 0 has no interface number 0 [ 864.288043][T19745] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 864.317734][ T5901] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 864.329154][T19745] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 864.350558][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.394518][ T5901] usb 1-1: Product: syz [ 864.411077][ T5901] usb 1-1: Manufacturer: syz [ 864.448589][ T5901] usb 1-1: SerialNumber: syz [ 864.471172][ T5901] usb 1-1: config 0 descriptor?? [ 864.503528][ T5901] smsc95xx v2.0.0 [ 864.926393][ T5901] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 864.983986][ T5901] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 866.566369][T19780] syzkaller0: entered promiscuous mode [ 866.575706][T19780] syzkaller0: entered allmulticast mode [ 866.714360][T19779] @: renamed from syz_tun (while UP) [ 867.262563][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 867.441773][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 867.452283][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 867.460785][ T10] usb 4-1: config 0 has no interface number 0 [ 867.468852][ T10] usb 4-1: config 0 interface 132 has no altsetting 0 [ 867.495535][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 867.505096][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.539320][ T10] usb 4-1: Product: syz [ 867.550323][ T10] usb 4-1: Manufacturer: syz [ 867.577387][ T10] usb 4-1: SerialNumber: syz [ 867.629898][ T10] usb 4-1: config 0 descriptor?? [ 867.749638][ T5901] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 867.787870][ T5901] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 867.856950][ T5901] usb 1-1: USB disconnect, device number 22 [ 868.068301][ T10] cdc_subset 4-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.3-1, Belkin, eTEK, or compatible, f2:b1:d2:59:08:05 [ 868.136552][ T10] usb 4-1: USB disconnect, device number 18 [ 868.144054][ T10] cdc_subset 4-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.3-1, Belkin, eTEK, or compatible [ 869.051802][ T5901] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 869.231883][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 869.326063][ T5901] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.434070][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 869.464532][ T5901] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 869.495702][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.623830][ T5901] usb 4-1: config 0 descriptor?? [ 870.133539][ T5901] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 870.326741][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.341193][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.593049][ T5901] usb 4-1: USB disconnect, device number 19 [ 870.791239][T19835] tipc: Started in network mode [ 870.801088][T19835] tipc: Node identity cafadf60ca17, cluster identity 4711 [ 870.815851][T19835] tipc: Enabled bearer , priority 0 [ 870.839217][T19835] tipc: Resetting bearer [ 870.861296][T19834] tipc: Disabling bearer [ 871.583219][T19848] tipc: Enabled bearer , priority 0 [ 871.616903][T19848] tipc: Resetting bearer [ 871.691182][T19847] tipc: Disabling bearer [ 872.146768][T19856] loop0: detected capacity change from 0 to 4096 [ 872.617237][T12933] ntfs3(loop0): ino=5, mi_enum_attr [ 873.809551][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4129'. [ 874.184825][T19899] netlink: 'syz.1.4131': attribute type 12 has an invalid length. [ 874.732656][T19899] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 874.740719][T19899] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 875.020132][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4135'. [ 875.100269][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4135'. [ 875.343568][T19921] syzkaller1: entered promiscuous mode [ 875.349092][T19921] syzkaller1: entered allmulticast mode [ 875.422618][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4140'. [ 875.497802][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4139'. [ 875.522617][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4139'. [ 877.424805][T19945] @: renamed from syz_tun (while UP) [ 878.736432][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4153'. [ 879.031547][T19977] loop2: detected capacity change from 0 to 4096 [ 879.662273][T19991] syzkaller1: entered promiscuous mode [ 879.705181][T19991] syzkaller1: entered allmulticast mode [ 879.745894][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4160'. [ 879.815812][T19993] tipc: Enabling of bearer rejected, failed to enable media [ 879.852093][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4160'. [ 879.862034][T19993] syzkaller0: entered promiscuous mode [ 879.867573][T19993] syzkaller0: entered allmulticast mode [ 880.573617][T20010] tipc: Enabling of bearer rejected, failed to enable media [ 880.621550][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4168'. [ 881.190908][T20034] tipc: Enabled bearer , priority 0 [ 881.205074][T20034] syzkaller0: entered promiscuous mode [ 881.213002][T20034] syzkaller0: entered allmulticast mode [ 881.221455][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 881.291655][T20032] tipc: Resetting bearer [ 881.361082][T20032] tipc: Disabling bearer [ 881.831995][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4180'. [ 881.836827][T20052] loop4: detected capacity change from 0 to 4096 [ 881.942076][ T5944] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 882.112057][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 882.121257][ T5944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.143405][ T5944] usb 1-1: config 0 has no interfaces? [ 882.164962][ T5944] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 882.186418][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.246295][ T5944] usb 1-1: config 0 descriptor?? [ 883.111082][T20078] syzkaller1: entered promiscuous mode [ 883.171540][T20084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'. [ 883.228320][T20085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4187'. [ 883.274601][T20078] syzkaller1: entered allmulticast mode [ 883.805519][T20087] tipc: Enabled bearer , priority 0 [ 883.831035][T20087] syzkaller0: entered promiscuous mode [ 883.846983][T20087] syzkaller0: entered allmulticast mode [ 883.897756][T20087] tipc: Resetting bearer [ 883.916891][T20086] tipc: Resetting bearer [ 883.937664][T20086] tipc: Disabling bearer [ 884.742992][ T5944] usb 1-1: USB disconnect, device number 23 [ 885.031951][T20125] syzkaller1: entered promiscuous mode [ 885.041980][T20125] syzkaller1: entered allmulticast mode [ 885.066999][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4199'. [ 885.078698][T20125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'. [ 885.366934][T20131] create_pit_timer: 1 callbacks suppressed [ 885.366946][T20131] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 885.916254][T20142] netlink: 'syz.0.4204': attribute type 1 has an invalid length. [ 885.968030][T20144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4204'. [ 886.020685][T20142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.164750][T20148] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4207'. [ 887.976344][T20185] netlink: 'syz.3.4219': attribute type 1 has an invalid length. [ 888.027465][T20185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.055089][T20187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4219'. [ 890.133804][T20226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4231'. [ 890.695956][T20238] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4234'. [ 890.830360][ T5998] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 890.852984][ T5943] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 890.881315][ T5998] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 890.910169][ T5943] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 890.932026][ T795] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 891.004681][ T5998] usb 5-1: USB disconnect, device number 15 [ 891.112492][ T5943] usb 2-1: USB disconnect, device number 19 [ 891.142986][ T795] usb 1-1: Using ep0 maxpacket: 32 [ 891.175695][ T795] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.226018][ T795] usb 1-1: config 0 has no interfaces? [ 891.231560][ T795] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 891.270580][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.436797][ T795] usb 1-1: config 0 descriptor?? [ 891.989284][T20257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4241'. [ 892.241366][T20266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4244'. [ 892.488390][T20273] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4246'. [ 893.963136][ T795] usb 1-1: USB disconnect, device number 24 [ 894.317170][T20295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4250'. [ 895.548576][T20312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4256'. [ 895.819822][T20320] netlink: 'syz.1.4257': attribute type 29 has an invalid length. [ 895.892398][T20321] netlink: 'syz.1.4257': attribute type 29 has an invalid length. [ 897.208869][T20344] syzkaller0: entered promiscuous mode [ 897.235043][T20344] syzkaller0: entered allmulticast mode [ 897.240833][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 897.240844][ T30] audit: type=1326 audit(1764275918.252:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.2.4266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20f98f749 code=0x7ffc0000 [ 897.304409][ T30] audit: type=1326 audit(1764275918.252:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.2.4266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20f98f749 code=0x7ffc0000 [ 897.362689][ T30] audit: type=1326 audit(1764275918.302:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.2.4266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7ff20f98f749 code=0x7ffc0000 [ 897.462173][ T30] audit: type=1326 audit(1764275918.302:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.2.4266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20f98f749 code=0x7ffc0000 [ 898.086062][T20363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4271'. [ 899.517527][T20389] binder: binder_mmap: 20386 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 899.673512][T20394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4282'. [ 899.841161][T20399] netlink: 'syz.0.4281': attribute type 29 has an invalid length. [ 899.855742][T20399] netlink: 'syz.0.4281': attribute type 29 has an invalid length. [ 901.593686][T20424] tipc: Enabled bearer , priority 0 [ 901.601141][T20424] syzkaller0: entered promiscuous mode [ 901.628085][T20424] syzkaller0: entered allmulticast mode [ 901.662403][T20424] tipc: Resetting bearer [ 901.711073][T20423] tipc: Resetting bearer [ 901.794659][T20423] tipc: Disabling bearer [ 902.432034][T20442] binder: binder_mmap: 20436 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 903.655063][T20470] netlink: 'syz.2.4306': attribute type 29 has an invalid length. [ 903.664869][T20470] netlink: 'syz.2.4306': attribute type 29 has an invalid length. [ 904.331548][T20482] tipc: Enabled bearer , priority 0 [ 904.380000][T20488] syzkaller0: entered promiscuous mode [ 904.399555][T20488] syzkaller0: entered allmulticast mode [ 904.526216][T20474] tipc: Resetting bearer [ 904.647830][T20473] tipc: Resetting bearer [ 904.898705][T20473] tipc: Disabling bearer [ 905.052028][T14716] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 905.201850][T14716] usb 4-1: Using ep0 maxpacket: 32 [ 905.208658][T14716] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 905.221789][ T795] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 905.236895][T14716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.283663][T14716] usb 4-1: config 0 descriptor?? [ 905.401775][ T795] usb 5-1: Using ep0 maxpacket: 32 [ 905.409055][ T795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.464967][T20514] binder: binder_mmap: 20508 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 905.565310][ T795] usb 5-1: config 0 has no interfaces? [ 905.571809][T14716] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 905.591144][ T795] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 905.600774][T14716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 905.707809][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.716986][T14716] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 905.730127][ T795] usb 5-1: config 0 descriptor?? [ 905.735280][T14716] usb 4-1: media controller created [ 905.760412][T14716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 905.800543][T14716] az6027: usb out operation failed. (-71) [ 905.806841][T14716] az6027: usb out operation failed. (-71) [ 905.824816][T14716] stb0899_attach: Driver disabled by Kconfig [ 905.834028][T14716] az6027: no front-end attached [ 905.834028][T14716] [ 905.846257][T14716] az6027: usb out operation failed. (-71) [ 905.854960][T14716] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 905.867975][T14716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 905.890834][T14716] dvb-usb: schedule remote query interval to 400 msecs. [ 905.902546][T14716] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 905.922308][ T795] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 905.935644][T14716] usb 4-1: USB disconnect, device number 20 [ 905.972759][T14716] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 906.071776][ T795] usb 2-1: Using ep0 maxpacket: 16 [ 906.078820][ T795] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 906.091807][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 906.113779][ T795] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 906.129984][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.229870][ T795] usb 2-1: Product: syz [ 906.239963][ T795] usb 2-1: Manufacturer: syz [ 906.315545][ T795] usb 2-1: SerialNumber: syz [ 906.385559][ T795] usb 2-1: config 0 descriptor?? [ 906.422064][ T795] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 906.449720][ T795] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 906.475427][T20524] syzkaller0: entered promiscuous mode [ 906.481121][T20524] syzkaller0: entered allmulticast mode [ 907.174523][T20537] netlink: 'syz.3.4328': attribute type 29 has an invalid length. [ 907.214508][T20537] netlink: 'syz.3.4328': attribute type 29 has an invalid length. [ 907.588898][T20538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.597906][ T795] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 907.605932][T20538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.994367][ T5944] usb 5-1: USB disconnect, device number 16 [ 908.642234][ T795] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 908.656800][ T795] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 908.666579][ T795] em28xx 2-1:0.0: No AC97 audio processor [ 909.267339][T14716] usb 2-1: USB disconnect, device number 20 [ 909.284243][T14716] em28xx 2-1:0.0: Disconnecting em28xx [ 909.349595][T14716] em28xx 2-1:0.0: Freeing device [ 909.360545][T20571] binder: binder_mmap: 20567 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 909.915217][T14716] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 910.018653][T20579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4339'. [ 910.092017][T20579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4339'. [ 910.131844][T14716] usb 2-1: Using ep0 maxpacket: 32 [ 910.158719][T14716] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 910.197226][T14716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.247194][T14716] usb 2-1: config 0 descriptor?? [ 910.496249][ T5998] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 910.496978][T14716] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 910.573840][T14716] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 910.587941][T14716] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 910.673073][ T5998] usb 5-1: Using ep0 maxpacket: 32 [ 910.682748][ T5998] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.703859][ T5998] usb 5-1: config 0 has no interfaces? [ 910.718330][ T5998] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 910.738610][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.769861][ T5998] usb 5-1: config 0 descriptor?? [ 911.370316][T20596] loop5: detected capacity change from 0 to 4095 [ 911.564696][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4346'. [ 912.360379][T20624] tipc: Enabled bearer , priority 0 [ 912.421202][T20625] syzkaller0: entered promiscuous mode [ 912.426922][T20625] syzkaller0: entered allmulticast mode [ 912.450673][T20624] tipc: Resetting bearer [ 912.477599][T20623] tipc: Resetting bearer [ 912.512718][T20623] tipc: Disabling bearer [ 912.839807][T20631] binder: binder_mmap: 20628 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 913.229254][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4356'. [ 913.238697][T20640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4356'. [ 913.315370][ T5998] usb 5-1: USB disconnect, device number 17 [ 913.708210][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 914.381236][T20662] ALSA: mixer_oss: invalid OSS volume '' [ 916.910245][T20694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4368'. [ 917.160916][T20699] syzkaller0: entered promiscuous mode [ 917.166579][T20699] syzkaller0: entered allmulticast mode [ 917.325807][T20697] loop4: detected capacity change from 0 to 4096 [ 917.641778][ T5998] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 917.811747][ T5998] usb 4-1: Using ep0 maxpacket: 16 [ 917.818883][ T5998] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 917.851881][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 917.889828][ T5998] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 917.922349][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.947030][ T5998] usb 4-1: Product: syz [ 917.960388][ T5998] usb 4-1: Manufacturer: syz [ 918.035321][ T5998] usb 4-1: SerialNumber: syz [ 918.058319][ T5998] usb 4-1: config 0 descriptor?? [ 918.113949][ T5998] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 918.134958][ T5998] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 918.730636][T20728] ALSA: mixer_oss: invalid OSS volume '' [ 918.742838][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4381'. [ 919.072281][T20734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.081281][T20734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.160834][ T5998] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 919.506412][T20738] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4382'. [ 920.330645][ T5998] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 920.347766][ T5998] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 920.360167][ T5998] em28xx 4-1:0.0: No AC97 audio processor [ 920.946450][ T5998] usb 4-1: USB disconnect, device number 21 [ 920.963486][ T5998] em28xx 4-1:0.0: Disconnecting em28xx [ 921.076247][ T5998] em28xx 4-1:0.0: Freeing device [ 921.870163][T20772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4392'. [ 922.046053][T20774] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4394'. [ 922.208626][T20778] tipc: Enabled bearer , priority 0 [ 922.233929][T20778] syzkaller0: entered promiscuous mode [ 922.258951][T20778] syzkaller0: entered allmulticast mode [ 922.444103][T20778] tipc: Resetting bearer [ 922.453850][T20777] tipc: Resetting bearer [ 922.495081][T20777] tipc: Disabling bearer [ 922.859280][T20790] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 922.866211][T20790] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 922.907285][T20790] vhci_hcd vhci_hcd.0: Device attached [ 923.175170][ T5960] usb 42-1: SetAddress Request (2) to port 0 [ 923.194962][ T5960] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 923.432837][T20791] vhci_hcd: connection reset by peer [ 923.465946][T11466] vhci_hcd vhci_hcd.4: stop threads [ 923.472751][T20801] tipc: Enabled bearer , priority 0 [ 923.475688][T11466] vhci_hcd vhci_hcd.4: release socket [ 923.486634][T20801] syzkaller0: entered promiscuous mode [ 923.488548][T11466] vhci_hcd vhci_hcd.4: disconnect device [ 923.493095][T20801] syzkaller0: entered allmulticast mode [ 923.579323][T20801] tipc: Resetting bearer [ 923.606489][T20800] tipc: Resetting bearer [ 923.630459][T20800] tipc: Disabling bearer [ 923.786278][T20812] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4406'. [ 924.114351][T20820] tipc: Enabled bearer , priority 0 [ 924.122195][T20820] syzkaller0: entered promiscuous mode [ 924.127913][T20820] syzkaller0: entered allmulticast mode [ 924.140898][T20820] tipc: Resetting bearer [ 924.148531][T20819] tipc: Resetting bearer [ 924.165822][T20819] tipc: Disabling bearer [ 924.725550][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4413'. [ 924.735311][T20837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4413'. [ 925.665579][T20845] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4417'. [ 927.104128][T20874] loop5: detected capacity change from 0 to 4591 [ 927.117671][T20873] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4428'. [ 927.125873][T20874] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 927.201585][T20876] syzkaller0: entered promiscuous mode [ 927.208992][T20876] syzkaller0: entered allmulticast mode [ 927.973797][T20892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4433'. [ 927.983062][T20892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4433'. [ 928.267049][ T5960] usb 42-1: device descriptor read/8, error -110 [ 928.754321][ T5960] usb usb42-port1: attempt power cycle [ 928.950407][T20899] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 928.987567][T20899] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 928.997568][T20899] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 929.007426][T20899] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 929.026312][T20899] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 929.036921][T20899] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 929.049778][T20899] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 929.060969][T20899] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 929.072257][T20899] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 929.082236][T20899] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 929.312475][ T5960] usb usb42-port1: unable to enumerate USB device [ 929.449778][T20908] cgroup: fork rejected by pids controller in /syz3 [ 930.122061][T21622] syzkaller0: entered promiscuous mode [ 930.129887][T21622] syzkaller0: entered allmulticast mode [ 930.945585][T21637] loop3: detected capacity change from 0 to 4096 [ 931.774545][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.780890][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.061909][T21659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4448'. [ 932.071377][T21659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4448'. [ 933.156828][T21679] loop4: detected capacity change from 0 to 4096 [ 933.485989][T21688] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4462'. [ 934.584961][T21708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4467'. [ 940.253031][T21772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4488'. [ 941.769989][T21780] infiniband syz2: set down [ 941.775207][T21780] infiniband syz2: added ipvlan0 [ 941.918151][T21780] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 941.924451][T21780] infiniband syz2: Couldn't open port 1 [ 941.968314][T21780] RDS/IB: syz2: added [ 941.973648][T21780] smc: adding ib device syz2 with port count 1 [ 941.980278][T21780] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 944.371837][ T5893] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 944.541753][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 944.541788][T21783] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 944.549547][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 944.601797][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 944.650305][ T5893] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 944.669585][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.690411][ T5893] usb 4-1: Product: syz [ 944.702198][ T5893] usb 4-1: Manufacturer: syz [ 944.706849][ T5893] usb 4-1: SerialNumber: syz [ 944.740221][ T5893] usb 4-1: config 0 descriptor?? [ 944.744196][T21783] usb 5-1: Using ep0 maxpacket: 8 [ 944.764045][ T5893] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 944.791776][ T5893] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 944.803556][T21783] usb 5-1: config 110 has an invalid interface number: 204 but max is 0 [ 944.821915][T21783] usb 5-1: config 110 has no interface number 0 [ 944.841205][T21783] usb 5-1: config 110 interface 204 altsetting 104 bulk endpoint 0xB has invalid maxpacket 8 [ 944.885566][T21783] usb 5-1: config 110 interface 204 has no altsetting 0 [ 944.904285][T21783] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0010, bcdDevice=ac.80 [ 944.934989][T21783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.946388][T21783] usb 5-1: Product: syz [ 944.950684][T21783] usb 5-1: Manufacturer: syz [ 944.955891][T21783] usb 5-1: SerialNumber: syz [ 944.995397][T21813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 945.236764][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4504'. [ 946.171010][T21783] kvaser_usb 5-1:110.204: error -ENODEV: Cannot get usb endpoint(s) [ 946.276869][T21826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.291543][ T5893] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 946.346706][T21826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.624822][T21783] usb 5-1: USB disconnect, device number 18 [ 946.839999][ T5143] Bluetooth: hci1: Unexpected cc 0x00c9 with no status [ 947.002613][T21839] netlink: 'syz.2.4507': attribute type 1 has an invalid length. [ 947.068455][T21839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 947.273399][T21846] tipc: Enabled bearer , priority 0 [ 947.285547][T21842] syzkaller0: entered promiscuous mode [ 947.313297][T21842] syzkaller0: entered allmulticast mode [ 947.362009][ T5893] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 947.369491][ T5893] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 947.377212][ T5893] em28xx 4-1:0.0: No AC97 audio processor [ 947.475753][T21842] tipc: Resetting bearer [ 947.532169][T21841] tipc: Resetting bearer [ 947.613159][T21841] tipc: Disabling bearer [ 947.686603][T21852] tipc: Enabled bearer , priority 0 [ 947.696219][T21852] syzkaller0: entered promiscuous mode [ 947.739065][T21852] syzkaller0: entered allmulticast mode [ 947.892399][T21854] tipc: Resetting bearer [ 947.999768][T21849] tipc: Resetting bearer [ 948.102526][T21863] netlink: 'syz.2.4514': attribute type 4 has an invalid length. [ 948.153505][T21849] tipc: Disabling bearer [ 948.160340][T21864] netlink: 'syz.2.4514': attribute type 4 has an invalid length. [ 948.185069][ T5893] usb 4-1: USB disconnect, device number 22 [ 948.236949][ T5893] em28xx 4-1:0.0: Disconnecting em28xx [ 948.260303][ T5893] em28xx 4-1:0.0: Freeing device [ 949.088338][T21886] tipc: Enabled bearer , priority 0 [ 949.552757][T21888] syzkaller0: entered promiscuous mode [ 949.558374][T21888] syzkaller0: entered allmulticast mode [ 949.715864][T21886] tipc: Resetting bearer [ 949.735417][T21884] tipc: Resetting bearer [ 949.785773][T21884] tipc: Disabling bearer [ 951.572370][T21919] netlink: 'syz.3.4534': attribute type 4 has an invalid length. [ 951.636981][T21919] netlink: 'syz.3.4534': attribute type 4 has an invalid length. [ 952.441900][ T5827] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 952.611983][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 952.617273][ T30] audit: type=1326 audit(1764275973.632:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 952.665405][ T5827] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 952.686037][ T30] audit: type=1326 audit(1764275973.632:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 952.709454][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.720878][ T5827] usb 5-1: config 0 descriptor?? [ 952.814913][ T30] audit: type=1326 audit(1764275973.632:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 952.862539][ T30] audit: type=1326 audit(1764275973.632:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 952.936332][ T30] audit: type=1326 audit(1764275973.632:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 953.026328][ T5827] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 953.063608][ T30] audit: type=1326 audit(1764275973.632:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 953.122252][ T30] audit: type=1326 audit(1764275973.632:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 953.175702][ T30] audit: type=1326 audit(1764275973.632:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 953.255592][ T30] audit: type=1326 audit(1764275973.632:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 953.314391][ T30] audit: type=1326 audit(1764275973.632:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21943 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f38d7b8f749 code=0x7ffc0000 [ 953.649969][T21968] atomic_op ffff888068c36998 conn xmit_atomic 0000000000000000 [ 956.691848][T21997] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 956.698480][T21997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 956.739738][T21997] vhci_hcd vhci_hcd.0: Device attached [ 957.003258][T14734] usb 34-1: SetAddress Request (2) to port 0 [ 957.010593][T14734] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 957.134794][T22010] binder: binder_mmap: 22005 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 957.249601][T21999] vhci_hcd: connection reset by peer [ 957.257348][T12769] vhci_hcd vhci_hcd.0: stop threads [ 957.262692][T12769] vhci_hcd vhci_hcd.0: release socket [ 957.268193][T12769] vhci_hcd vhci_hcd.0: disconnect device [ 958.242892][T22018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4563'. [ 958.252197][T22018] nbd: must specify a size in bytes for the device [ 958.541402][T22024] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4565'. [ 959.322887][ T5893] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 959.525928][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 959.545658][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 959.597828][ T5893] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 959.711540][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.787730][ T5893] usb 4-1: config 0 descriptor?? [ 959.797301][T22035] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 960.017825][T22035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.032911][T22035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.053293][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 960.063079][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 960.099372][ T5893] usb 4-1: USB disconnect, device number 23 [ 960.653964][ T5893] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 960.841895][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 960.932087][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 960.971855][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 961.008645][ T5893] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 961.019716][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.139402][ T5893] usb 4-1: config 0 descriptor?? [ 961.176183][ T5893] hub 4-1:0.0: bad descriptor, ignoring hub [ 961.248194][ T5893] hub 4-1:0.0: probe with driver hub failed with error -5 [ 961.571562][ T5893] hid_parser_main: 8 callbacks suppressed [ 961.571589][ T5893] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 961.602292][ T5893] hid-multitouch 0003:0EEF:72C4.000C: reserved main item tag 0xd [ 961.643214][ T5893] hid-multitouch 0003:0EEF:72C4.000C: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 961.679110][T22061] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4576'. [ 961.829988][T22064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.883036][T22064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.962469][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 961.971552][ T5893] usb 4-1: USB disconnect, device number 24 [ 962.074443][T22073] binder: binder_mmap: 22065 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 962.098273][T14734] usb 34-1: device descriptor read/8, error -110 [ 962.107446][T22071] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 962.127834][T22071] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 962.197496][T22071] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 962.211166][T22071] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 962.251598][T22071] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 962.262045][T22071] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 962.274861][T22071] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 962.285636][T22071] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 962.308884][T22071] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 962.425722][T22071] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 962.494644][T14734] usb usb34-port1: attempt power cycle [ 963.052987][T14734] usb usb34-port1: unable to enumerate USB device [ 963.180459][T22096] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4587'. [ 964.261216][T22115] affs: No valid root block on device nullb0 [ 965.434902][T22133] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 967.250700][T22165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4608'. [ 968.548173][T22203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4620'. [ 968.689270][T22205] syzkaller0: entered promiscuous mode [ 968.715842][T22205] syzkaller0: entered allmulticast mode [ 970.375167][T22228] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.384707][T22228] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.549931][T22238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4631'. [ 970.895982][T22228] bridge0: entered allmulticast mode [ 972.520803][T22265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4638'. [ 972.530134][T22265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4638'. [ 972.614377][T22267] @: renamed from syz_tun [ 972.757555][ T5827] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 972.773828][T14716] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 972.825703][ T5827] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 972.837003][T14716] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 972.886780][ T5827] usb 5-1: USB disconnect, device number 19 [ 972.898703][T14716] usb 2-1: USB disconnect, device number 21 [ 972.966413][T22229] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 972.980204][T22229] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 973.049072][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 973.089109][T22229] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 973.105302][T22229] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 973.115778][T22229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 973.121937][T22229] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 973.197361][T22229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 973.331604][T22229] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 973.490390][T22229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 973.500476][T22229] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 973.788124][T22287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4648'. [ 974.191728][ T5901] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 974.351763][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 974.358555][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 974.370862][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 974.384407][ T5901] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 974.393710][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.402235][ T5901] usb 5-1: Product: syz [ 974.406688][ T5901] usb 5-1: Manufacturer: syz [ 974.411452][ T5901] usb 5-1: SerialNumber: syz [ 974.423386][ T5901] usb 5-1: config 0 descriptor?? [ 974.440215][ T5901] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 974.450753][ T5901] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 975.122208][T22312] Bluetooth: hci4: command 0x0406 tx timeout [ 975.128669][T22312] Bluetooth: hci5: command 0x0406 tx timeout [ 975.137706][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 975.173996][ T5901] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 975.180818][T22314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.190452][T22314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.283444][T22313] Bluetooth: hci0: command 0x0406 tx timeout [ 975.532484][T22313] Bluetooth: hci1: command 0x0406 tx timeout [ 975.917504][T22321] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 976.819768][ T5901] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 976.830891][ T5901] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 976.841952][ T5901] em28xx 5-1:0.0: No AC97 audio processor [ 977.227723][T22313] Bluetooth: hci4: command 0x0406 tx timeout [ 977.227906][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 977.361804][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 977.472337][T22325] netlink: 'syz.3.4659': attribute type 4 has an invalid length. [ 977.526767][T22331] netlink: 'syz.3.4659': attribute type 4 has an invalid length. [ 977.601896][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 977.639286][T22339] netlink: 'syz.0.4662': attribute type 29 has an invalid length. [ 977.649384][T22339] netlink: 'syz.0.4662': attribute type 29 has an invalid length. [ 977.660790][T22337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4664'. [ 977.986838][ T5827] usb 5-1: USB disconnect, device number 20 [ 977.993647][ T5827] em28xx 5-1:0.0: Disconnecting em28xx [ 978.005835][ T5827] em28xx 5-1:0.0: Freeing device [ 979.408567][T22379] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4675'. [ 979.573015][T22381] netlink: 'syz.4.4676': attribute type 4 has an invalid length. [ 979.611315][T22381] netlink: 'syz.4.4676': attribute type 4 has an invalid length. [ 981.741922][T22402] netlink: 'syz.4.4682': attribute type 29 has an invalid length. [ 981.752732][T22402] netlink: 'syz.4.4682': attribute type 29 has an invalid length. [ 982.104744][T22407] syzkaller0: entered promiscuous mode [ 982.110376][T22407] syzkaller0: entered allmulticast mode [ 982.433952][T22419] netlink: 'syz.3.4689': attribute type 1 has an invalid length. [ 982.447703][T22417] netlink: 'syz.1.4690': attribute type 4 has an invalid length. [ 982.487076][T22425] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4689'. [ 982.502450][T22426] netlink: 'syz.1.4690': attribute type 4 has an invalid length. [ 982.535412][T22419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 982.661747][ T5827] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 982.811870][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 982.822416][ T5827] usb 1-1: no configurations [ 982.878669][ T5827] usb 1-1: can't read configurations, error -22 [ 982.911744][T14734] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 983.041946][T14734] usb 4-1: device descriptor read/64, error -71 [ 983.101842][ T5827] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 983.251797][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 983.268937][ T5827] usb 1-1: no configurations [ 983.280750][ T5827] usb 1-1: can't read configurations, error -22 [ 983.292737][T14734] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 983.532624][ T5827] usb usb1-port1: attempt power cycle [ 983.680577][T14734] usb 4-1: device descriptor read/64, error -71 [ 983.803703][T14734] usb usb4-port1: attempt power cycle [ 983.961912][ T5827] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 983.992511][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 983.998633][ T5827] usb 1-1: no configurations [ 984.005749][ T5827] usb 1-1: can't read configurations, error -22 [ 984.145531][T14734] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 984.171972][ T5827] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 984.183528][T14734] usb 4-1: device descriptor read/8, error -71 [ 984.202500][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 984.209169][ T5827] usb 1-1: no configurations [ 984.220338][ T5827] usb 1-1: can't read configurations, error -22 [ 984.240733][ T5827] usb usb1-port1: unable to enumerate USB device [ 984.387632][T22462] syzkaller0: entered promiscuous mode [ 984.404694][T22462] syzkaller0: entered allmulticast mode [ 984.431849][T14734] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 984.460813][T22464] netlink: 'syz.4.4702': attribute type 29 has an invalid length. [ 984.472829][T14734] usb 4-1: device descriptor read/8, error -71 [ 984.505882][T22464] netlink: 'syz.4.4702': attribute type 29 has an invalid length. [ 984.584082][T14734] usb usb4-port1: unable to enumerate USB device [ 985.564633][T22471] netlink: 'syz.0.4706': attribute type 4 has an invalid length. [ 985.609317][T22471] netlink: 'syz.0.4706': attribute type 4 has an invalid length. [ 985.679769][T22475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4705'. [ 985.690417][T22475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4705'. [ 987.353538][T22499] syzkaller0: entered promiscuous mode [ 987.359028][T22499] syzkaller0: entered allmulticast mode [ 987.370227][T22502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4716'. [ 988.643381][T14734] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 989.271774][T14734] usb 1-1: device descriptor read/64, error -71 [ 989.591785][T14734] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 989.758871][T22554] netlink: 'syz.2.4721': attribute type 29 has an invalid length. [ 989.768207][T22554] netlink: 'syz.2.4721': attribute type 29 has an invalid length. [ 989.801754][T14734] usb 1-1: device descriptor read/64, error -71 [ 989.938053][T14734] usb usb1-port1: attempt power cycle [ 990.292375][T14734] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 990.312490][T14734] usb 1-1: device descriptor read/8, error -71 [ 990.554010][T14734] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 990.771777][T14734] usb 1-1: device not accepting address 32, error -71 [ 990.811538][T14734] usb usb1-port1: unable to enumerate USB device [ 991.863039][ T5845] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 991.871162][T22313] Bluetooth: hci3: command 0x1003 tx timeout [ 992.252356][T22597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4732'. [ 992.261481][T22597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4732'. [ 992.298009][ T5901] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 992.434264][ T5901] usb 5-1: device descriptor read/64, error -71 [ 993.051845][ T5901] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 993.143162][T22606] tipc: Enabling of bearer rejected, failed to enable media [ 993.173637][T22606] syzkaller0: entered promiscuous mode [ 993.179268][T22606] syzkaller0: entered allmulticast mode [ 993.205651][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.213612][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.243969][ T5901] usb 5-1: device descriptor read/64, error -71 [ 993.362831][ T5901] usb usb5-port1: attempt power cycle [ 993.772908][ T5901] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 993.804092][ T5901] usb 5-1: device descriptor read/8, error -71 [ 993.815023][T22616] netlink: 'syz.3.4739': attribute type 29 has an invalid length. [ 993.826381][T22616] netlink: 'syz.3.4739': attribute type 29 has an invalid length. [ 994.062588][ T5901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 994.102981][ T5901] usb 5-1: device descriptor read/8, error -71 [ 994.222409][ T5901] usb usb5-port1: unable to enumerate USB device [ 995.379940][T22647] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 998.951419][T22697] binder: binder_mmap: 22690 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 999.529267][T22704] tipc: Enabling of bearer rejected, failed to enable media [ 999.566694][T22704] syzkaller0: entered promiscuous mode [ 999.574536][T22704] syzkaller0: entered allmulticast mode [ 1002.178645][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4778'. [ 1004.580680][T22786] syzkaller0: entered promiscuous mode [ 1004.590882][T22786] syzkaller0: entered allmulticast mode [ 1005.356458][T22796] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1005.363080][T22796] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1005.396681][T22796] vhci_hcd vhci_hcd.0: Device attached [ 1005.722176][ T5943] usb 36-1: SetAddress Request (2) to port 0 [ 1005.752728][T22804] Sensor B: ================= START STATUS ================= [ 1005.760483][T22804] Sensor B: Test Pattern: 75% Colorbar [ 1005.767127][T22804] Sensor B: Show Information: All [ 1005.772453][T22804] Sensor B: Vertical Flip: false [ 1005.777533][T22804] Sensor B: Horizontal Flip: false [ 1005.782918][T22804] Sensor B: Brightness: 128 [ 1005.787630][T22804] Sensor B: Contrast: 128 [ 1005.792321][T22804] Sensor B: Hue: 0 [ 1005.796226][T22804] Sensor B: Saturation: 128 [ 1005.800896][T22804] Sensor B: ================== END STATUS ================== [ 1005.936453][ T5943] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1006.092007][T22797] vhci_hcd: connection reset by peer [ 1006.110669][ T5948] vhci_hcd vhci_hcd.1: stop threads [ 1006.118059][ T5948] vhci_hcd vhci_hcd.1: release socket [ 1006.128041][T22802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.138146][ T5948] vhci_hcd vhci_hcd.1: disconnect device [ 1007.846013][T22837] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1008.041888][ T5901] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1008.204260][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 1008.225849][ T5901] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1008.235521][ T5901] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.236347][T22840] syzkaller0: entered promiscuous mode [ 1008.248845][ T5901] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1008.262343][T22840] syzkaller0: entered allmulticast mode [ 1008.291255][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1008.346222][ T5901] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1008.365246][ T5901] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1008.381402][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.465355][ T5901] usbtmc 5-1:16.0: bulk endpoints not found [ 1008.525728][T22850] tipc: Enabling of bearer rejected, failed to enable media [ 1008.572155][T22850] syzkaller0: entered promiscuous mode [ 1008.588154][T22850] syzkaller0: entered allmulticast mode [ 1010.561115][T22870] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4814'. [ 1010.858420][T22870] syz.2.4814 (22870): drop_caches: 2 [ 1011.041774][ T5943] usb 36-1: device descriptor read/8, error -110 [ 1012.699579][ T5943] usb usb36-port1: attempt power cycle [ 1012.754761][T22884] syzkaller0: entered promiscuous mode [ 1012.872687][T22884] syzkaller0: entered allmulticast mode [ 1013.186698][ T5827] usb 5-1: USB disconnect, device number 25 [ 1013.332834][ T5943] usb usb36-port1: unable to enumerate USB device [ 1016.961757][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1017.111721][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1017.124090][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.161728][ T10] usb 4-1: config 0 has no interfaces? [ 1017.171972][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1017.201808][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.233988][ T10] usb 4-1: config 0 descriptor?? [ 1020.297586][ T5901] usb 4-1: USB disconnect, device number 29 [ 1022.716897][T22994] affs: No valid root block on device nullb0 [ 1023.402798][T22996] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1023.414036][T22996] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1023.425197][T22996] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1023.448558][T22996] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1023.467350][T22996] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1023.484073][T22996] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1023.501844][T22996] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1023.513567][T22996] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1023.523543][T22996] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1025.899573][T23027] syzkaller1: entered promiscuous mode [ 1025.905275][T23027] syzkaller1: entered allmulticast mode [ 1025.915185][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4856'. [ 1025.926566][T23027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4856'. [ 1027.395443][T23040] affs: No valid root block on device nullb0 [ 1028.318109][T23046] netlink: 'syz.2.4861': attribute type 4 has an invalid length. [ 1031.820273][T23085] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1031.831451][T23085] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1031.870975][T23085] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1031.901962][T23082] netlink: 'syz.4.4875': attribute type 4 has an invalid length. [ 1032.009143][T23085] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1032.039450][T23091] syzkaller0: entered promiscuous mode [ 1032.049394][T23091] syzkaller0: entered allmulticast mode [ 1032.061195][T23085] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1032.110139][T23085] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1032.147659][T23085] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1032.181142][T23085] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1032.273744][T23085] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1034.069072][T23107] ALSA: mixer_oss: invalid OSS volume '' [ 1036.167895][ T5960] libceph: mon0 (1)[c::]:6789 socket error on write [ 1036.435576][ T5960] libceph: mon0 (1)[c::]:6789 socket error on write [ 1036.489470][T23132] syzkaller0: entered promiscuous mode [ 1036.521265][T23132] syzkaller0: entered allmulticast mode [ 1036.972686][ T5827] libceph: mon0 (1)[c::]:6789 socket error on write [ 1037.034323][T23128] ceph: No mds server is up or the cluster is laggy [ 1037.464661][T23138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4891'. [ 1038.092906][T23150] netlink: 'syz.2.4893': attribute type 7 has an invalid length. [ 1038.703885][T23153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4896'. [ 1039.138478][T23158] ALSA: mixer_oss: invalid OSS volume '' [ 1040.553050][T23173] syzkaller0: entered promiscuous mode [ 1040.571426][T23173] syzkaller0: entered allmulticast mode [ 1040.581796][ T5960] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1040.755546][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 1040.778045][ T5960] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1040.797830][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.873031][ T5960] usb 2-1: config 0 descriptor?? [ 1040.888256][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1041.041830][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1041.048775][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.088016][ T10] usb 5-1: config 0 has no interfaces? [ 1041.106110][ T5960] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1041.117761][ T5960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1041.129128][ T5960] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1041.143181][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.166562][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.176873][ T5960] usb 2-1: media controller created [ 1041.192985][ T10] usb 5-1: Product: syz [ 1041.215725][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1041.234868][ T10] usb 5-1: Manufacturer: syz [ 1041.239542][ T10] usb 5-1: SerialNumber: syz [ 1041.248425][ T10] usb 5-1: config 0 descriptor?? [ 1041.318264][ T5960] az6027: usb out operation failed. (-71) [ 1041.335105][ T5960] az6027: usb out operation failed. (-71) [ 1041.340885][ T5960] stb0899_attach: Driver disabled by Kconfig [ 1041.483021][ T5960] az6027: no front-end attached [ 1041.483021][ T5960] [ 1041.505803][ T5960] az6027: usb out operation failed. (-71) [ 1041.511797][ T5960] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1042.063402][ T5960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 1042.165096][T23197] binder: 23193:23197 ioctl c0306201 200000000080 returned -14 [ 1042.276625][ T5960] dvb-usb: schedule remote query interval to 400 msecs. [ 1042.285019][ T5944] usb 5-1: USB disconnect, device number 26 [ 1042.297910][ T5960] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1042.309782][ T5960] usb 2-1: USB disconnect, device number 22 [ 1042.377089][ T5960] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1042.547419][T23215] ALSA: mixer_oss: invalid OSS volume '' [ 1044.895358][T23230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4920'. [ 1046.097639][T23259] affs: No valid root block on device nullb0 [ 1047.911224][T23279] ALSA: mixer_oss: invalid OSS volume '' [ 1048.049453][T23282] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1051.014488][T23306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1051.052414][T23306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1051.170956][T23306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1051.183204][T23306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1051.204222][T23306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1051.215684][T23306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1051.241495][T23306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1051.274542][T23306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1051.284188][T23306] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1051.802720][T23315] affs: No valid root block on device nullb0 [ 1052.291727][ T5944] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1052.452146][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 1052.470272][ T5944] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1052.672914][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.692127][ T5944] usb 2-1: config 0 descriptor?? [ 1053.067782][ T5944] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1053.281173][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1053.387888][ T5944] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1053.412404][ T5944] usb 2-1: media controller created [ 1053.436724][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.583406][T23339] ªªªªª2: renamed from veth0_vlan (while UP) [ 1053.927008][ T5944] az6027: usb out operation failed. (-71) [ 1053.952039][ T5944] az6027: usb out operation failed. (-71) [ 1053.957805][ T5944] stb0899_attach: Driver disabled by Kconfig [ 1053.977528][ T5944] az6027: no front-end attached [ 1053.977528][ T5944] [ 1054.012543][ T5944] az6027: usb out operation failed. (-71) [ 1054.018312][ T5944] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1054.044475][ T5944] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 1054.095913][ T5944] dvb-usb: schedule remote query interval to 400 msecs. [ 1054.148277][ T5944] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1054.187986][ T5944] usb 2-1: USB disconnect, device number 23 [ 1054.428411][ T5944] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1055.072007][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.078569][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.506707][T23350] syzkaller0: entered promiscuous mode [ 1055.544715][T23350] syzkaller0: entered allmulticast mode [ 1055.672987][T23352] loop4: detected capacity change from 0 to 4096 [ 1056.397397][T23363] ALSA: mixer_oss: invalid OSS volume '' [ 1057.744183][T23387] binder: binder_mmap: 23382 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 1058.304164][T23392] netlink: 'syz.4.4970': attribute type 29 has an invalid length. [ 1058.671984][T23396] netlink: 'syz.4.4970': attribute type 29 has an invalid length. [ 1059.817859][T23417] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 1060.938225][T23424] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1060.965383][T23424] CIFS mount error: No usable UNC path provided in device string! [ 1060.965383][T23424] [ 1060.976076][T23424] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1061.068153][T23425] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1062.428488][T23441] ALSA: mixer_oss: invalid OSS volume '' [ 1062.735130][T23449] binder: binder_mmap: 23444 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 1064.012200][ T5960] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1064.071425][T23471] netlink: 'syz.2.4991': attribute type 29 has an invalid length. [ 1064.080788][T23471] netlink: 'syz.2.4991': attribute type 29 has an invalid length. [ 1064.191712][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 1064.231929][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.257824][ T5960] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1064.271766][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1064.278528][ T5960] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1064.288662][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.536987][ T5960] usb 5-1: config 0 descriptor?? [ 1065.303231][ T5960] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1065.513492][T23486] syzkaller0: entered promiscuous mode [ 1065.519050][T23486] syzkaller0: entered allmulticast mode [ 1066.370428][T23491] ALSA: mixer_oss: invalid OSS volume '' [ 1068.124982][ T5960] usb 5-1: USB disconnect, device number 27 [ 1068.252784][T23501] syzkaller0: entered promiscuous mode [ 1068.258304][T23501] syzkaller0: entered allmulticast mode [ 1068.830575][T23512] ªªªªª2: renamed from veth0_vlan (while UP) [ 1069.645203][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5008'. [ 1069.661757][ T5943] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1070.092624][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 1070.114930][ T5943] usb 1-1: config 0 has no interfaces? [ 1070.143487][ T5943] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1070.161260][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.191724][ T5943] usb 1-1: Product: syz [ 1070.221680][ T5943] usb 1-1: Manufacturer: syz [ 1070.235104][ T5943] usb 1-1: SerialNumber: syz [ 1070.259330][ T5943] usb 1-1: config 0 descriptor?? [ 1070.299657][T23524] syzkaller0: entered promiscuous mode [ 1070.309429][T23524] syzkaller0: entered allmulticast mode [ 1070.492666][T23518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.506571][T23527] ALSA: mixer_oss: invalid OSS volume '' [ 1070.640260][T23518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.684884][T23518] 8021q: VLANs not supported on caif0 [ 1070.701487][ T5960] usb 1-1: USB disconnect, device number 33 [ 1070.721923][T23521] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1071.167728][ T5960] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1071.235929][T23543] netlink: 'syz.1.5014': attribute type 29 has an invalid length. [ 1071.326269][T23549] netlink: 'syz.1.5014': attribute type 29 has an invalid length. [ 1071.371937][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 1071.414887][ T5960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.507394][ T5960] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1071.572755][ T5960] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1071.615206][ T5960] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1071.675630][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.864543][ T5960] usb 4-1: config 0 descriptor?? [ 1071.961095][T23553] affs: No valid root block on device nullb0 [ 1072.512228][ T5960] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1073.806206][T23563] ================================================================== [ 1073.814288][T23563] BUG: KASAN: slab-use-after-free in locks_remove_posix+0x10f/0x630 [ 1073.822268][T23563] Read of size 8 at addr ffff888079558d60 by task syz.2.5021/23563 [ 1073.830143][T23563] [ 1073.832474][T23563] CPU: 1 UID: 0 PID: 23563 Comm: syz.2.5021 Not tainted syzkaller #0 PREEMPT(full) [ 1073.832488][T23563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1073.832501][T23563] Call Trace: [ 1073.832508][T23563] [ 1073.832515][T23563] dump_stack_lvl+0x189/0x250 [ 1073.832535][T23563] ? __kasan_check_byte+0x12/0x40 [ 1073.832552][T23563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1073.832567][T23563] ? lock_release+0x4b/0x3b0 [ 1073.832583][T23563] ? __virt_addr_valid+0x4a5/0x5c0 [ 1073.832595][T23563] print_report+0xca/0x240 [ 1073.832609][T23563] ? locks_remove_posix+0x10f/0x630 [ 1073.832625][T23563] kasan_report+0x118/0x150 [ 1073.832640][T23563] ? locks_remove_posix+0x10f/0x630 [ 1073.832657][T23563] locks_remove_posix+0x10f/0x630 [ 1073.832673][T23563] ? __pfx_locks_remove_posix+0x10/0x10 [ 1073.832695][T23563] ? do_raw_spin_unlock+0x122/0x240 [ 1073.832707][T23563] ? dnotify_flush+0x1db/0x5e0 [ 1073.832722][T23563] ? mqueue_flush_file+0x21c/0x270 [ 1073.832738][T23563] ? filp_flush+0xae/0x190 [ 1073.832749][T23563] filp_flush+0x113/0x190 [ 1073.832760][T23563] filp_close+0x1d/0x40 [ 1073.832770][T23563] put_files_struct+0x1ba/0x350 [ 1073.832787][T23563] do_exit+0x67f/0x2310 [ 1073.832800][T23563] ? do_raw_spin_lock+0x121/0x290 [ 1073.832811][T23563] ? __pfx_do_exit+0x10/0x10 [ 1073.832824][T23563] do_group_exit+0x21c/0x2d0 [ 1073.832835][T23563] ? lockdep_hardirqs_on+0x98/0x140 [ 1073.832850][T23563] get_signal+0x1285/0x1340 [ 1073.832868][T23563] arch_do_signal_or_restart+0x9a/0x7a0 [ 1073.832881][T23563] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1073.832895][T23563] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1073.832911][T23563] exit_to_user_mode_loop+0x87/0x4f0 [ 1073.832924][T23563] ? rcu_is_watching+0x15/0xb0 [ 1073.832934][T23563] do_syscall_64+0x2e3/0xf80 [ 1073.832950][T23563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.832960][T23563] ? clear_bhb_loop+0x60/0xb0 [ 1073.832972][T23563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.832983][T23563] RIP: 0033:0x7ff20f98f749 [ 1073.832999][T23563] Code: Unable to access opcode bytes at 0x7ff20f98f71f. [ 1073.833005][T23563] RSP: 002b:00007ff210759038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1073.833017][T23563] RAX: 0000000000000007 RBX: 00007ff20fbe6180 RCX: 00007ff20f98f749 [ 1073.833025][T23563] RDX: 0000000000000136 RSI: 0000000000000001 RDI: 0000200000000780 [ 1073.833032][T23563] RBP: 00007ff20fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1073.833039][T23563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1073.833045][T23563] R13: 00007ff20fbe6218 R14: 00007ff20fbe6180 R15: 00007fff24fc39f8 [ 1073.833057][T23563] [ 1073.833061][T23563] [ 1074.086573][T23563] Allocated by task 23563: [ 1074.090969][T23563] kasan_save_track+0x3e/0x80 [ 1074.095727][T23563] __kasan_slab_alloc+0x6c/0x80 [ 1074.100564][T23563] kmem_cache_alloc_noprof+0x37d/0x710 [ 1074.106020][T23563] locks_get_lock_context+0x134/0x3b0 [ 1074.111387][T23563] generic_setlease+0x528/0x1280 [ 1074.116310][T23563] do_fcntl_add_lease+0x34d/0x460 [ 1074.121322][T23563] fcntl_setlease+0x123/0x180 [ 1074.125982][T23563] do_fcntl+0x867/0x1a50 [ 1074.130208][T23563] __se_sys_fcntl+0xc8/0x150 [ 1074.134777][T23563] do_syscall_64+0xfa/0xf80 [ 1074.139265][T23563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.145148][T23563] [ 1074.147482][T23563] Freed by task 23563: [ 1074.151525][T23563] kasan_save_track+0x3e/0x80 [ 1074.156192][T23563] kasan_save_free_info+0x46/0x50 [ 1074.161211][T23563] __kasan_slab_free+0x5c/0x80 [ 1074.166074][T23563] kmem_cache_free+0x197/0x620 [ 1074.171055][T23563] __destroy_inode+0x2ea/0x670 [ 1074.175803][T23563] evict+0x87d/0xae0 [ 1074.179706][T23563] __dentry_kill+0x209/0x660 [ 1074.184296][T23563] finish_dput+0xc9/0x480 [ 1074.188602][T23563] path_put+0x39/0x60 [ 1074.192558][T23563] do_mq_open+0x468/0x7c0 [ 1074.196871][T23563] __x64_sys_mq_open+0x16a/0x1c0 [ 1074.201880][T23563] do_syscall_64+0xfa/0xf80 [ 1074.206369][T23563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.212243][T23563] [ 1074.214553][T23563] The buggy address belongs to the object at ffff888079558d10 [ 1074.214553][T23563] which belongs to the cache file_lock_ctx of size 112 [ 1074.228760][T23563] The buggy address is located 80 bytes inside of [ 1074.228760][T23563] freed 112-byte region [ffff888079558d10, ffff888079558d80) [ 1074.242453][T23563] [ 1074.244761][T23563] The buggy address belongs to the physical page: [ 1074.251250][T23563] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880795588f0 pfn:0x79558 [ 1074.261298][T23563] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1074.268589][T23563] page_type: f5(slab) [ 1074.272555][T23563] raw: 00fff00000000000 ffff888140443640 dead000000000122 0000000000000000 [ 1074.281122][T23563] raw: ffff8880795588f0 000000008017000f 00000000f5000000 0000000000000000 [ 1074.289683][T23563] page dumped because: kasan: bad access detected [ 1074.296074][T23563] page_owner tracks the page as allocated [ 1074.301768][T23563] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5203, tgid 5203 (udevd), ts 46974849605, free_ts 46943383935 [ 1074.320415][T23563] post_alloc_hook+0x234/0x290 [ 1074.325174][T23563] get_page_from_freelist+0x2365/0x2440 [ 1074.330707][T23563] __alloc_frozen_pages_noprof+0x181/0x370 [ 1074.336524][T23563] alloc_pages_mpol+0x232/0x4a0 [ 1074.341359][T23563] allocate_slab+0x86/0x3b0 [ 1074.345845][T23563] ___slab_alloc+0xf2b/0x1960 [ 1074.350508][T23563] __slab_alloc+0x65/0x100 [ 1074.354936][T23563] kmem_cache_alloc_noprof+0x40f/0x710 [ 1074.360376][T23563] locks_get_lock_context+0x134/0x3b0 [ 1074.365728][T23563] flock_lock_inode+0xf2/0x1410 [ 1074.370563][T23563] locks_lock_inode_wait+0x107/0x410 [ 1074.375835][T23563] __se_sys_flock+0x467/0x5b0 [ 1074.380500][T23563] do_syscall_64+0xfa/0xf80 [ 1074.384987][T23563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.390864][T23563] page last free pid 15 tgid 15 stack trace: [ 1074.396839][T23563] __free_frozen_pages+0xbc8/0xd30 [ 1074.401960][T23563] rcu_core+0xd70/0x1870 [ 1074.406185][T23563] handle_softirqs+0x27d/0x850 [ 1074.410938][T23563] run_ksoftirqd+0x9b/0x100 [ 1074.415425][T23563] smpboot_thread_fn+0x542/0xa60 [ 1074.420351][T23563] kthread+0x711/0x8a0 [ 1074.424396][T23563] ret_from_fork+0x599/0xb30 [ 1074.428973][T23563] ret_from_fork_asm+0x1a/0x30 [ 1074.433717][T23563] [ 1074.436018][T23563] Memory state around the buggy address: [ 1074.441627][T23563] ffff888079558c00: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb [ 1074.449767][T23563] ffff888079558c80: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 1074.457822][T23563] >ffff888079558d00: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1074.465867][T23563] ^ [ 1074.473040][T23563] ffff888079558d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1074.481080][T23563] ffff888079558e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1074.489118][T23563] ================================================================== [ 1074.498720][T23563] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1074.505931][T23563] CPU: 1 UID: 0 PID: 23563 Comm: syz.2.5021 Not tainted syzkaller #0 PREEMPT(full) [ 1074.515285][T23563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1074.525410][T23563] Call Trace: [ 1074.528678][T23563] [ 1074.531591][T23563] dump_stack_lvl+0x99/0x250 [ 1074.536215][T23563] ? __asan_memcpy+0x40/0x70 [ 1074.540808][T23563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1074.545991][T23563] ? __pfx__printk+0x10/0x10 [ 1074.550565][T23563] vpanic+0x237/0x6d0 [ 1074.554529][T23563] ? __pfx_vpanic+0x10/0x10 [ 1074.559024][T23563] panic+0xb9/0xc0 [ 1074.562727][T23563] ? __pfx_panic+0x10/0x10 [ 1074.567123][T23563] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1074.573004][T23563] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1074.578906][T23563] ? locks_remove_posix+0x10f/0x630 [ 1074.584093][T23563] check_panic_on_warn+0x89/0xb0 [ 1074.589011][T23563] ? locks_remove_posix+0x10f/0x630 [ 1074.594216][T23563] end_report+0x6f/0x140 [ 1074.598449][T23563] kasan_report+0x129/0x150 [ 1074.602962][T23563] ? locks_remove_posix+0x10f/0x630 [ 1074.608150][T23563] locks_remove_posix+0x10f/0x630 [ 1074.613175][T23563] ? __pfx_locks_remove_posix+0x10/0x10 [ 1074.618712][T23563] ? do_raw_spin_unlock+0x122/0x240 [ 1074.623925][T23563] ? dnotify_flush+0x1db/0x5e0 [ 1074.628674][T23563] ? mqueue_flush_file+0x21c/0x270 [ 1074.633772][T23563] ? filp_flush+0xae/0x190 [ 1074.638201][T23563] filp_flush+0x113/0x190 [ 1074.642512][T23563] filp_close+0x1d/0x40 [ 1074.646648][T23563] put_files_struct+0x1ba/0x350 [ 1074.651576][T23563] do_exit+0x67f/0x2310 [ 1074.655718][T23563] ? do_raw_spin_lock+0x121/0x290 [ 1074.660740][T23563] ? __pfx_do_exit+0x10/0x10 [ 1074.665318][T23563] do_group_exit+0x21c/0x2d0 [ 1074.669919][T23563] ? lockdep_hardirqs_on+0x98/0x140 [ 1074.675116][T23563] get_signal+0x1285/0x1340 [ 1074.679630][T23563] arch_do_signal_or_restart+0x9a/0x7a0 [ 1074.685171][T23563] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1074.691429][T23563] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1074.696878][T23563] exit_to_user_mode_loop+0x87/0x4f0 [ 1074.702148][T23563] ? rcu_is_watching+0x15/0xb0 [ 1074.707162][T23563] do_syscall_64+0x2e3/0xf80 [ 1074.711740][T23563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.717796][T23563] ? clear_bhb_loop+0x60/0xb0 [ 1074.722457][T23563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.728394][T23563] RIP: 0033:0x7ff20f98f749 [ 1074.732792][T23563] Code: Unable to access opcode bytes at 0x7ff20f98f71f. [ 1074.739791][T23563] RSP: 002b:00007ff210759038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1074.748189][T23563] RAX: 0000000000000007 RBX: 00007ff20fbe6180 RCX: 00007ff20f98f749 [ 1074.756143][T23563] RDX: 0000000000000136 RSI: 0000000000000001 RDI: 0000200000000780 [ 1074.764182][T23563] RBP: 00007ff20fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1074.772151][T23563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.780111][T23563] R13: 00007ff20fbe6218 R14: 00007ff20fbe6180 R15: 00007fff24fc39f8 [ 1074.788075][T23563] [ 1074.791716][T23563] Kernel Offset: disabled [ 1074.796142][T23563] Rebooting in 86400 seconds..