last executing test programs: 26m34.913515508s ago: executing program 0 (id=14): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000002700), &(0x7f0000002740)=0x4) 26m34.400147784s ago: executing program 0 (id=17): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) 26m33.989049486s ago: executing program 0 (id=18): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c00028005000100000000000600034000000000080007400000000004000680e7af76141402113fef5816b8d1b425cfbbb74209ad063c6a6809ab73dd22"], 0x70}}, 0x0) 26m33.226857833s ago: executing program 0 (id=21): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x32, 0x4, 0x4, 0x20, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x8000, 0x8, 0x8}}) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 26m32.486289751s ago: executing program 0 (id=23): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x3, 0x7fff0008}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7f9, 0x8, 0x8000, 0x1d8, 0x0, r1}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) close_range(r0, 0xffffffffffffffff, 0x0) 26m32.136111093s ago: executing program 0 (id=25): socket$inet(0x2, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) syz_io_uring_setup(0x2008d6, &(0x7f00000000c0)={0x0, 0x40000000, 0x3010, 0xffffffff, 0x186}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000500020000000500010006000000"], 0x4c}}, 0x40050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x244240) pread64(r2, 0x0, 0x0, 0x10000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a31000000000500010007000000280007800c000180080001401f0101020c00148008000140ac1414100c00028008000140ffffffff532bb8b0a19479a2c861484ebca67c2d5b806eee08dc67cff47f6da6670b2cf53374d9c72cbf982e963fedbdaadcc1f7f3ffb5dab1e0be1f3268bdc3a7bc7486ca157103ffe1e1a06ef0e830842eb1a7f5f15575f2128a5dd11b5d8adfa2abdd7023386f09"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 26m17.062086823s ago: executing program 32 (id=25): socket$inet(0x2, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) syz_io_uring_setup(0x2008d6, &(0x7f00000000c0)={0x0, 0x40000000, 0x3010, 0xffffffff, 0x186}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000500020000000500010006000000"], 0x4c}}, 0x40050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x244240) pread64(r2, 0x0, 0x0, 0x10000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a31000000000500010007000000280007800c000180080001401f0101020c00148008000140ac1414100c00028008000140ffffffff532bb8b0a19479a2c861484ebca67c2d5b806eee08dc67cff47f6da6670b2cf53374d9c72cbf982e963fedbdaadcc1f7f3ffb5dab1e0be1f3268bdc3a7bc7486ca157103ffe1e1a06ef0e830842eb1a7f5f15575f2128a5dd11b5d8adfa2abdd7023386f09"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 24m29.332729571s ago: executing program 5 (id=660): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000280)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) 24m28.422726464s ago: executing program 5 (id=665): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 24m18.479640003s ago: executing program 5 (id=669): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x18) 24m18.020698184s ago: executing program 5 (id=673): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 24m16.447037469s ago: executing program 5 (id=681): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="0000000000000000008a14754b0000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000070000e6ffffff000080000085000000750900009500000006000000dfb6bcf77baf21e93841ac7945a0dc131372df7c682db2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 24m16.191883483s ago: executing program 5 (id=684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x44}}, 0x4004002) 24m0.766313004s ago: executing program 33 (id=684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x44}}, 0x4004002) 13m38.479728991s ago: executing program 4 (id=2835): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000006040)=[{{&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)='6', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r1}, 0x10) 13m38.191676683s ago: executing program 4 (id=2840): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) socket(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x8000000000000001, 0x8000, 0x40, 0xb7, 0x0, 0x2004cb, 0x0, 0xffffffffbfffffff, 0x1005, 0x7ffd, 0x1000202004, 0x1, 0x80000000, 0x0, 0x4], 0x8080000, 0x401}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 13m36.369143249s ago: executing program 4 (id=2842): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000100)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x809, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x1, 0x3, 0x5, 0x3}], 0x10, 0x18d}, 0x94) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) 13m34.365544841s ago: executing program 4 (id=2845): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000004100)=""/4102, 0x1006}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xbf}], 0x1}}, {{&(0x7f0000002540), 0x6e, &(0x7f0000002440)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)=""/210, 0xd2}, {&(0x7f00000002c0)=""/45, 0x2d}, {0x0}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x5, &(0x7f00000024c0)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002980)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000002600)=""/181, 0xb5}, {&(0x7f00000026c0)=""/19, 0x13}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f00000027c0)=""/204, 0xcc}], 0x5, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000005140)=""/4096, 0x1000}], 0x1, &(0x7f0000002c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x6, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 13m32.709569389s ago: executing program 4 (id=2848): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20008850) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$vcsa(&(0x7f0000000340), 0x5, 0x100) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) getdents64(0xffffffffffffffff, &(0x7f0000001f00)=""/4111, 0x100f) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) 13m31.326471276s ago: executing program 4 (id=2849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) recvmmsg(r0, 0x0, 0x0, 0x40, &(0x7f0000000a40)={0x77359400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) syz_emit_vhci(0x0, 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) chdir(0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) 13m16.023497819s ago: executing program 34 (id=2849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) recvmmsg(r0, 0x0, 0x0, 0x40, &(0x7f0000000a40)={0x77359400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) syz_emit_vhci(0x0, 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) chdir(0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) 16.438673561s ago: executing program 3 (id=4975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995af"], 0x14b0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000240)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) 10.446483137s ago: executing program 2 (id=4989): r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) 9.693855965s ago: executing program 3 (id=4990): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) read$hiddev(r3, &(0x7f0000000600)=""/111, 0x6f) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000700)={{0x0, 0xd84, 0x2, 0x4, 0x5, 0xa5, 0x100, 0x4, 0x4, 0x0, 0x10, 0x1, 0x4, 0xc12, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES16=r3], 0x20}}, 0x2404c850) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.64092907s ago: executing program 6 (id=4991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) clock_settime(0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) 9.392070171s ago: executing program 2 (id=4992): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\x1c'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x6}}, './bus\x00'}) epoll_pwait2(r5, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000280), &(0x7f0000000380)={[0x5]}, 0x8) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r7, 0x0, 0x0}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 8.459821946s ago: executing program 6 (id=4993): socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x10001) 7.924829905s ago: executing program 3 (id=4994): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 7.893941573s ago: executing program 6 (id=4995): syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') unshare(0x200) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) 7.012309445s ago: executing program 3 (id=5000): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) pipe2$9p(0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) 4.849251742s ago: executing program 3 (id=5004): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) read$hiddev(r3, &(0x7f0000000600)=""/111, 0x6f) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000700)={{0x0, 0xd84, 0x2, 0x4, 0x5, 0xa5, 0x100, 0x4, 0x4, 0x0, 0x10, 0x1, 0x4, 0xc12, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES16=r3], 0x20}}, 0x2404c850) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.670107853s ago: executing program 2 (id=5006): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 3.516331483s ago: executing program 1 (id=5008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74f7ffa0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.454629754s ago: executing program 2 (id=5009): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) 3.337032862s ago: executing program 7 (id=5010): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 3.28641403s ago: executing program 2 (id=5011): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x2c8a4ed31704d5db, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='cubic', 0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@local, 0x4d5, 0x33}, @in=@broadcast, {0x3}, {0xfffffffffffffffc, 0x0, 0x4000000000000000}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x3, 0xfc, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x20000000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x0, r4}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setuid(0x0) lstat(0x0, &(0x7f0000004440)) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001980)={0x3, 0x0, [{0x8186000, 0x9a, &(0x7f00000000c0)=""/154}, {0x5000, 0x33, &(0x7f0000000000)=""/51}, {0x0, 0x0, 0x0}]}) 3.283768014s ago: executing program 1 (id=5012): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000180)={0x2, 0x6}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x8000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @multicast1}}}}) 3.23290563s ago: executing program 3 (id=5013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r6 = dup(r5) ioctl$FIONCLEX(r6, 0x5450) connect$rds(r6, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r4, &(0x7f0000000040)=')', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 2.454488624s ago: executing program 6 (id=5014): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) pipe2$9p(0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) 2.449695875s ago: executing program 7 (id=5015): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 2.240463256s ago: executing program 2 (id=5016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\x1c'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x6}}, './bus\x00'}) epoll_pwait2(r5, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000280), &(0x7f0000000380)={[0x5]}, 0x8) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r7, 0x0, 0x0}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 2.233458913s ago: executing program 7 (id=5017): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r5, 0x29, 0xce, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601020000000000000000070000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket(0x19, 0x803, 0x1) socket$nl_route(0x10, 0x3, 0x0) 2.02569527s ago: executing program 1 (id=5018): socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x10001) 1.883635227s ago: executing program 1 (id=5019): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}], 0x2}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 1.716543579s ago: executing program 7 (id=5020): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)) 1.660105749s ago: executing program 1 (id=5021): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) 1.643571303s ago: executing program 7 (id=5022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74f7ffa0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.434521349s ago: executing program 1 (id=5023): socket$packet(0x11, 0x2, 0x300) syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x33a, 0xf9, 0xff, 0x8, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0xc) 1.335156635s ago: executing program 7 (id=5024): syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') unshare(0x200) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) 1.271250096s ago: executing program 6 (id=5025): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 0s ago: executing program 6 (id=5026): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x408c5}, 0x2404c054) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x101080) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0xc0984124, 0x40944f9c780000) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r6 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r6, 0x4) syz_socket_connect_nvme_tcp() socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xfd, "0000000000000400f7ff00"}) r7 = syz_open_pts(r0, 0x101000) dup3(r7, r0, 0x0) kernel console output (not intermixed with test programs): 1q: adding VLAN 0 to HW filter on device batadv0 [ 1398.756157][ T5884] rc_core: IR keymap rc-hauppauge not found [ 1398.756173][ T5884] Registered IR keymap rc-empty [ 1398.756288][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1398.770784][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1398.827331][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1399.240803][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input74 [ 1399.818509][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1399.835841][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1399.850466][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1399.871699][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1399.893664][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1399.993335][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1400.010425][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1400.030406][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1400.050378][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1400.070478][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1400.093014][ T5884] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1400.093036][ T5884] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1400.157737][ T5884] usb 2-1: USB disconnect, device number 79 [ 1400.285736][T19348] veth0_vlan: entered promiscuous mode [ 1400.315081][T19348] veth1_vlan: entered promiscuous mode [ 1400.408617][T19880] netlink: 'syz.7.4378': attribute type 10 has an invalid length. [ 1400.909911][T19880] team0: Device ipvlan1 failed to register rx_handler [ 1401.587144][T12223] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1401.601193][T12223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1401.604220][T12223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1401.606687][T12223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1401.636194][T12223] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1401.857551][T19903] loop6: detected capacity change from 0 to 7 [ 1401.919860][T19904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4383'. [ 1401.960380][ T31] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1402.113536][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1402.113563][ T31] usb 3-1: config 0 has no interface number 0 [ 1402.266970][ T31] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1402.267059][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.267073][ T31] usb 3-1: Product: syz [ 1402.267082][ T31] usb 3-1: Manufacturer: syz [ 1402.267092][ T31] usb 3-1: SerialNumber: syz [ 1402.467180][ C0] blk_print_req_error: 10 callbacks suppressed [ 1402.467265][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.467311][ C0] buffer_io_error: 10 callbacks suppressed [ 1402.467326][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.537441][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.537510][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.540557][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.540586][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.566308][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.566343][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.613037][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.613068][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.613879][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.613943][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.692295][ T31] usb 3-1: config 0 descriptor?? [ 1402.761196][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.761219][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.762422][T19903] ldm_validate_partition_table(): Disk read failed. [ 1402.764106][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.764135][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.766959][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.767033][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.767874][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.767946][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1402.778634][T19903] Dev loop6: unable to read RDB block 0 [ 1402.896151][T19903] loop6: unable to read partition table [ 1402.917357][T19903] loop6: partition table beyond EOD, truncated [ 1402.917398][T19903] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1403.061689][T19895] lo speed is unknown, defaulting to 1000 [ 1403.579165][ T37] audit: type=1326 audit(1773957289.591:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.1.4385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879397c799 code=0x0 [ 1403.680338][T12223] Bluetooth: hci3: command tx timeout [ 1403.841036][ T31] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1404.018766][ T5884] usb 3-1: USB disconnect, device number 92 [ 1405.780478][T12223] Bluetooth: hci3: command tx timeout [ 1406.125140][T19895] chnl_net:caif_netlink_parms(): no params data found [ 1406.458437][T19954] loop6: detected capacity change from 0 to 7 [ 1406.476803][T19954] ldm_validate_partition_table(): Disk read failed. [ 1406.489043][T19954] Dev loop6: unable to read RDB block 0 [ 1406.499208][T19954] loop6: unable to read partition table [ 1406.501192][T19954] loop6: partition table beyond EOD, truncated [ 1406.501606][T19954] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1406.523823][T19954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4394'. [ 1406.950600][T16549] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1407.292667][T16549] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1407.292698][T16549] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1407.292726][T16549] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1407.292741][T16549] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.358288][T16549] usb 8-1: config 0 descriptor?? [ 1407.385124][T16549] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1407.842129][T12223] Bluetooth: hci3: command tx timeout [ 1409.488306][T19895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.490473][T19895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.490661][T19895] bridge_slave_0: entered allmulticast mode [ 1409.498494][T19895] bridge_slave_0: entered promiscuous mode [ 1409.512411][T19895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.512847][T19895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.513529][T19895] bridge_slave_1: entered allmulticast mode [ 1409.525640][T19895] bridge_slave_1: entered promiscuous mode [ 1409.551309][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1409.626352][T19895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.638101][T19895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.680370][T17295] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1409.703367][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1409.703390][ T9] usb 2-1: config 0 has no interface number 0 [ 1409.705980][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1409.705999][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.706013][ T9] usb 2-1: Product: syz [ 1409.706023][ T9] usb 2-1: Manufacturer: syz [ 1409.706033][ T9] usb 2-1: SerialNumber: syz [ 1409.730136][T19895] team0: Port device team_slave_0 added [ 1409.736164][ T9] usb 2-1: config 0 descriptor?? [ 1409.774266][T19895] team0: Port device team_slave_1 added [ 1409.832361][T17295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1409.832382][T17295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1409.832598][T17295] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1409.832614][T17295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.893092][T17295] usb 3-1: config 0 descriptor?? [ 1409.920362][T12223] Bluetooth: hci3: command tx timeout [ 1410.221212][ T5905] usb 8-1: USB disconnect, device number 23 [ 1410.383808][T19895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.383828][T19895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.383860][T19895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.384978][T17295] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 1410.385017][T17295] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 1410.389661][T17295] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 1410.389694][T17295] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 1410.389732][T17295] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 1410.389757][T17295] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 1410.391098][T17295] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 1410.527480][T17295] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1410.547250][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 1410.560698][T17295] arvo 0003:1E7D:30D4.000A: couldn't init struct arvo_device [ 1410.560744][T17295] arvo 0003:1E7D:30D4.000A: couldn't install keyboard [ 1410.647064][T17295] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -32 [ 1410.928801][ T9] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1410.943738][T17295] usb 3-1: USB disconnect, device number 93 [ 1411.245733][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4403'. [ 1411.302849][T19895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.302860][T19895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.302878][T19895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.188718][ T9] usb 2-1: USB disconnect, device number 80 [ 1412.513788][T19895] hsr_slave_0: entered promiscuous mode [ 1412.536298][T19895] hsr_slave_1: entered promiscuous mode [ 1412.537156][T19895] debugfs: 'hsr0' already exists in 'hsr' [ 1412.537179][T19895] Cannot create hsr debugfs directory [ 1412.616502][T13891] bridge_slave_1: left allmulticast mode [ 1412.616528][T13891] bridge_slave_1: left promiscuous mode [ 1412.616736][T13891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.828708][T13891] bridge_slave_0: left allmulticast mode [ 1412.828737][T13891] bridge_slave_0: left promiscuous mode [ 1412.828985][T13891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.068245][T16548] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1415.920776][T16548] usb 3-1: Using ep0 maxpacket: 16 [ 1415.923847][T16548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.923900][T16548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1415.923927][T16548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1415.923947][T16548] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1415.923970][T16548] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1415.925460][T16548] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1415.925489][T16548] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1415.925512][T16548] usb 3-1: Manufacturer: syz [ 1415.935262][T16548] usb 3-1: config 0 descriptor?? [ 1415.993507][T13891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.041337][T13891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.074550][T13891] bond0 (unregistering): Released all slaves [ 1416.320838][T16548] rc_core: IR keymap rc-hauppauge not found [ 1416.320853][T16548] Registered IR keymap rc-empty [ 1416.321332][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.343544][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.361926][T16548] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1416.364208][T16548] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input75 [ 1416.367093][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.382292][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.401191][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.442202][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.460411][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.482157][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.500428][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.520899][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.540427][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.560441][T16548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1416.584300][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4415'. [ 1416.603564][T16548] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1416.603583][T16548] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1416.715902][T16548] usb 3-1: USB disconnect, device number 94 [ 1417.050555][T12223] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 1417.091043][T13891] hsr_slave_0: left promiscuous mode [ 1417.310275][T13891] hsr_slave_1: left promiscuous mode [ 1417.311254][T13891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.251062][T13891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.740297][ T37] audit: type=1326 audit(1773957304.751:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20046 comm="syz.2.4423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af15fc799 code=0x0 [ 1418.821245][T13891] veth1_vlan: left promiscuous mode [ 1418.821455][T13891] veth0_vlan: left promiscuous mode [ 1418.930346][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4425'. [ 1419.430762][T17295] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1419.592607][T17295] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1419.592636][T17295] usb 2-1: config 0 has no interface number 0 [ 1419.594993][T17295] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1419.595025][T17295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.595048][T17295] usb 2-1: Product: syz [ 1419.595065][T17295] usb 2-1: Manufacturer: syz [ 1419.595082][T17295] usb 2-1: SerialNumber: syz [ 1419.602699][T17295] usb 2-1: config 0 descriptor?? [ 1420.264539][T17295] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1420.527429][T17295] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1420.527749][T17295] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1420.527798][T17295] usb 2-1: media controller created [ 1420.597746][T17295] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1420.831515][T13891] team0 (unregistering): Port device team_slave_1 removed [ 1420.914452][T13891] team0 (unregistering): Port device team_slave_0 removed [ 1421.106335][T12223] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 1421.760715][T17295] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1422.658852][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'. [ 1423.049213][T16549] usb 2-1: USB disconnect, device number 81 [ 1423.068924][ T37] audit: type=1326 audit(1773957309.081:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20092 comm="syz.7.4437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55bafac799 code=0x0 [ 1424.239828][T20103] netlink: 'syz.1.4440': attribute type 72 has an invalid length. [ 1424.288386][T20104] loop6: detected capacity change from 0 to 7 [ 1424.289024][ C1] blk_print_req_error: 30 callbacks suppressed [ 1424.289082][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.289110][ C1] buffer_io_error: 30 callbacks suppressed [ 1424.289122][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.289626][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.289653][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.290091][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.290118][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.323838][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.323891][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.329759][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.329805][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.330736][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.330824][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.339786][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4439'. [ 1424.350021][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.350050][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.350103][T20104] ldm_validate_partition_table(): Disk read failed. [ 1424.354403][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.354454][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.360311][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.360340][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.362105][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1424.362133][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1424.362595][T20104] Dev loop6: unable to read RDB block 0 [ 1424.364807][T20104] loop6: unable to read partition table [ 1424.366460][T20104] loop6: partition table beyond EOD, truncated [ 1424.366557][T20104] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1425.089100][T12223] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 1425.708087][T20125] netlink: 'syz.7.4445': attribute type 1 has an invalid length. [ 1426.309898][T20124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1427.374591][ T808] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1427.531856][ T808] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1427.531885][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.531903][ T808] usb 3-1: Product: syz [ 1427.531918][ T808] usb 3-1: Manufacturer: syz [ 1427.531932][ T808] usb 3-1: SerialNumber: syz [ 1427.582148][ T808] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1427.626140][T17295] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1427.864254][T12223] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 1427.880959][T20148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.893471][T20148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.927704][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.927812][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.157216][T16549] usb 3-1: USB disconnect, device number 95 [ 1428.542114][T19895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1428.592612][T19895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1428.720510][T17295] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1428.720691][T17295] ath9k_htc: Failed to initialize the device [ 1428.829132][T20167] netlink: 'syz.1.4457': attribute type 1 has an invalid length. [ 1429.082333][T16549] usb 3-1: ath9k_htc: USB layer deinitialized [ 1429.203063][T19895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1429.922010][T19895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1430.432401][T20171] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1430.432417][T20171] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1430.918158][T20188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.336281][T19895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.347721][ T5884] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1431.400684][T12223] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 1431.415688][T19895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.498554][T13891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.498693][T13891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.546688][ T5884] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1431.546718][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.546738][ T5884] usb 8-1: Product: syz [ 1431.546752][ T5884] usb 8-1: Manufacturer: syz [ 1431.546767][ T5884] usb 8-1: SerialNumber: syz [ 1431.610853][ T5884] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1431.657239][ T31] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1431.658959][ T1536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.659114][ T1536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.897355][T20201] netlink: 'syz.6.4467': attribute type 1 has an invalid length. [ 1432.964661][ T31] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1432.967432][ T31] ath9k_htc: Failed to initialize the device [ 1433.970396][T17295] usb 8-1: USB disconnect, device number 24 [ 1434.131289][T17295] usb 8-1: ath9k_htc: USB layer deinitialized [ 1434.704696][T20219] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4471'. [ 1434.704713][T20219] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1435.180560][T19895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.678316][T12223] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 1435.816912][T19895] veth0_vlan: entered promiscuous mode [ 1435.874355][T19895] veth1_vlan: entered promiscuous mode [ 1436.203572][T20248] netlink: 'syz.1.4478': attribute type 1 has an invalid length. [ 1436.334777][T19895] veth0_macvtap: entered promiscuous mode [ 1436.350111][T19895] veth1_macvtap: entered promiscuous mode [ 1436.375178][T20251] netlink: 'syz.7.4479': attribute type 10 has an invalid length. [ 1436.375194][T20251] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4479'. [ 1436.488082][T19895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.513114][T19895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.456616][ T1536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.457123][ T1536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.461647][ T1536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.462744][ T1536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.513787][T20255] Bluetooth: MGMT ver 1.23 [ 1437.871965][T20264] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4482'. [ 1437.872017][T20264] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1438.975381][T20277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.977574][T20277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.187695][T20279] netlink: 'syz.2.4489': attribute type 1 has an invalid length. [ 1439.282329][T10148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.282346][T10148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.481328][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.481348][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.335776][T20298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1441.860543][T20306] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4496'. [ 1441.860766][T20306] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1443.195815][T20322] CIFS mount error: No usable UNC path provided in device string! [ 1443.195815][T20322] [ 1443.195837][T20322] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1444.510055][ T37] audit: type=1326 audit(1773957330.521:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20325 comm="syz.2.4504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af15fc799 code=0x0 [ 1444.611518][T15507] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1444.630523][T15507] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1444.632037][T15507] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1444.635351][T15507] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1444.637595][T15507] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1444.811084][T20331] lo speed is unknown, defaulting to 1000 [ 1445.122087][T20336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1446.732048][T12223] Bluetooth: hci4: command tx timeout [ 1446.753310][T20349] openvswitch: netlink: Flow key attr not present in new flow. [ 1448.342987][T20351] input: syz1 as /devices/virtual/input/input76 [ 1448.811157][T12223] Bluetooth: hci4: command tx timeout [ 1449.050335][ T37] audit: type=1326 audit(1773957335.061:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20363 comm="syz.1.4515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879397c799 code=0x0 [ 1449.342841][T20371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1450.891055][T12223] Bluetooth: hci4: command tx timeout [ 1451.079337][T20391] input: syz1 as /devices/virtual/input/input77 [ 1452.960334][T12223] Bluetooth: hci4: command tx timeout [ 1455.677148][T20331] chnl_net:caif_netlink_parms(): no params data found [ 1455.929584][T20412] netlink: 'syz.7.4526': attribute type 10 has an invalid length. [ 1456.021200][ T37] audit: type=1326 audit(1773957342.041:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20409 comm="syz.2.4527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af15fc799 code=0x0 [ 1456.543497][T20412] team0: Device ipvlan1 failed to register rx_handler [ 1456.804871][T20423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1456.935721][T20331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.935843][T20331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.935986][T20331] bridge_slave_0: entered allmulticast mode [ 1456.949167][T20331] bridge_slave_0: entered promiscuous mode [ 1457.010716][T20331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.010787][T20331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.010901][T20331] bridge_slave_1: entered allmulticast mode [ 1457.055275][T20331] bridge_slave_1: entered promiscuous mode [ 1457.144379][T20430] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1457.928606][T20331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.957568][T20331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.537893][ T7367] bridge_slave_1: left allmulticast mode [ 1458.537913][ T7367] bridge_slave_1: left promiscuous mode [ 1458.538083][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.680940][ T7367] bridge_slave_0: left allmulticast mode [ 1458.680974][ T7367] bridge_slave_0: left promiscuous mode [ 1458.681238][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.078840][ T37] audit: type=1326 audit(1773957345.091:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20445 comm="syz.2.4539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af15fc799 code=0x0 [ 1459.862003][ T7367] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1460.520935][ T7367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.604727][ T7367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.666229][ T7367] bond0 (unregistering): (slave ): Releasing backup interface [ 1460.702109][ T7367] bond0 (unregistering): Released all slaves [ 1460.710081][ T7367] bond1 (unregistering): Released all slaves [ 1460.743726][ T7367] bond2 (unregistering): Released all slaves [ 1460.828253][ T7367] bond3 (unregistering): Released all slaves [ 1460.893145][ T7367] bond4 (unregistering): Released all slaves [ 1460.936822][ T7367] bond5 (unregistering): Released all slaves [ 1461.021543][ T7367] bond6 (unregistering): Released all slaves [ 1461.063096][T20466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1461.103754][T20331] team0: Port device team_slave_0 added [ 1461.160433][T16549] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1461.273754][T20331] team0: Port device team_slave_1 added [ 1463.372503][T16549] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.372530][T16549] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1463.372565][T16549] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1463.372586][T16549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.492785][T16549] usb 4-1: config 0 descriptor?? [ 1463.508091][ T7367] tipc: Left network mode [ 1463.586889][T20473] binder_alloc: 20472: binder_alloc_buf, no vma [ 1463.588453][T20331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.588467][T20331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.588494][T20331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.621135][T20331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.621161][T20331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.621189][T20331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.747981][T16549] usb 4-1: string descriptor 0 read error: -71 [ 1463.807720][T16549] usb 4-1: USB disconnect, device number 94 [ 1464.779440][T20331] hsr_slave_0: entered promiscuous mode [ 1464.792295][T20331] hsr_slave_1: entered promiscuous mode [ 1464.793259][T20331] debugfs: 'hsr0' already exists in 'hsr' [ 1464.793286][T20331] Cannot create hsr debugfs directory [ 1465.550159][ T37] audit: type=1326 audit(1773957351.561:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20485 comm="syz.3.4550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe3bac799 code=0x0 [ 1465.886410][T20497] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1466.145189][T20495] loop6: detected capacity change from 0 to 7 [ 1466.158766][ C0] blk_print_req_error: 10 callbacks suppressed [ 1466.158788][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.158817][ C0] buffer_io_error: 10 callbacks suppressed [ 1466.158830][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.163792][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.163843][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.186146][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4552'. [ 1466.189926][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.189977][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.191032][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.191100][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.192620][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.192666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.193306][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.193370][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.194067][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.194123][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.194207][T20495] ldm_validate_partition_table(): Disk read failed. [ 1466.194890][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.194922][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.195533][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.195607][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.196244][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1466.196305][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1466.196860][T20495] Dev loop6: unable to read RDB block 0 [ 1466.208604][T20495] loop6: unable to read partition table [ 1466.210025][T20495] loop6: partition table beyond EOD, truncated [ 1466.210146][T20495] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1467.624242][T20511] mac80211_hwsim hwsim29 : renamed from wlan1 (while UP) [ 1468.257416][T20517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1468.336946][T20520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1468.590373][T16541] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1468.765896][T16541] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1468.765925][T16541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.765945][T16541] usb 4-1: Product: syz [ 1468.765959][T16541] usb 4-1: Manufacturer: syz [ 1468.765973][T16541] usb 4-1: SerialNumber: syz [ 1468.792416][T16541] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1468.876457][T16549] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1469.002147][ T7367] hsr_slave_0: left promiscuous mode [ 1469.051871][ T7367] hsr_slave_1: left promiscuous mode [ 1469.055725][ T7367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.071697][T16549] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1470.071887][T16549] ath9k_htc: Failed to initialize the device [ 1470.101062][ T7367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.072176][T16548] usb 4-1: USB disconnect, device number 95 [ 1472.096126][T16548] usb 4-1: ath9k_htc: USB layer deinitialized [ 1472.100799][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1472.720410][T16548] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1472.890344][T16548] usb 4-1: Using ep0 maxpacket: 8 [ 1472.896017][T16548] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1472.896045][T16548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.896065][T16548] usb 4-1: Product: syz [ 1472.896079][T16548] usb 4-1: Manufacturer: syz [ 1472.896093][T16548] usb 4-1: SerialNumber: syz [ 1472.953661][T16548] usb 4-1: config 0 descriptor?? [ 1473.012734][ T37] audit: type=1326 audit(1773957359.031:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20531 comm="syz.1.4561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879397c799 code=0x0 [ 1473.171056][T16548] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1473.175211][ T7367] team0 (unregistering): Port device team_slave_1 removed [ 1473.241975][ T7367] team0 (unregistering): Port device team_slave_0 removed [ 1474.475158][T16548] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1475.616120][T20548] loop6: detected capacity change from 0 to 7 [ 1475.631741][ C0] blk_print_req_error: 10 callbacks suppressed [ 1475.631781][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.631848][ C0] buffer_io_error: 10 callbacks suppressed [ 1475.631861][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.632511][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.632541][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.633669][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.633731][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.634261][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.634290][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.636684][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.636751][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.637681][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.637711][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.639487][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.639543][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.639621][T20548] ldm_validate_partition_table(): Disk read failed. [ 1475.640320][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.640366][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.642524][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.642555][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.644490][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1475.644584][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1475.645272][T20548] Dev loop6: unable to read RDB block 0 [ 1475.650917][T20548] loop6: unable to read partition table [ 1475.653206][T20548] loop6: partition table beyond EOD, truncated [ 1475.653504][T20548] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1475.675920][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4565'. [ 1476.175601][ T808] usb 4-1: USB disconnect, device number 96 [ 1478.523399][ T37] audit: type=1326 audit(1773957364.531:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.4572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe3bac799 code=0x0 [ 1479.506248][T20588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1479.657900][ T7367] IPVS: stop unused estimator thread 0... [ 1479.676827][T20589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1479.692429][T20331] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1479.746432][T20331] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1479.831779][T20331] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1479.905750][T20331] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1481.009445][T20331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.050522][ T808] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1481.106327][T20331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.151859][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.152577][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.200331][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 1481.205061][ T808] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1481.205094][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.205117][ T808] usb 4-1: Product: syz [ 1481.205134][ T808] usb 4-1: Manufacturer: syz [ 1481.205151][ T808] usb 4-1: SerialNumber: syz [ 1481.220021][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.237241][ T7367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.263069][ T808] usb 4-1: config 0 descriptor?? [ 1481.356692][T20613] loop6: detected capacity change from 0 to 7 [ 1481.425552][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1481.432259][ C0] blk_print_req_error: 10 callbacks suppressed [ 1481.432307][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.432377][ C0] buffer_io_error: 10 callbacks suppressed [ 1481.432390][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.560351][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.561122][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.645997][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.646047][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.673376][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.673446][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.701287][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.701343][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.706258][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.706288][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.707199][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.707262][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.707353][T20613] ldm_validate_partition_table(): Disk read failed. [ 1481.737455][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.737502][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.739914][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.739979][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.888306][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1481.888356][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.905398][T20613] Dev loop6: unable to read RDB block 0 [ 1481.912260][T20613] loop6: unable to read partition table [ 1481.914772][T20613] loop6: partition table beyond EOD, truncated [ 1481.914962][T20613] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1482.087614][ T808] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1484.106521][ T808] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1484.180711][T20331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.323294][T17295] usb 4-1: USB disconnect, device number 97 [ 1484.765843][T20643] netlink: 'syz.3.4581': attribute type 10 has an invalid length. [ 1484.786895][T20643] team0: Device ipvlan1 failed to register rx_handler [ 1484.944187][ T37] audit: type=1326 audit(1773957370.961:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20642 comm="syz.1.4582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879397c799 code=0x0 [ 1485.077368][T20651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4583'. [ 1486.917270][T20331] veth0_vlan: entered promiscuous mode [ 1486.948856][T20331] veth1_vlan: entered promiscuous mode [ 1487.068904][T20331] veth0_macvtap: entered promiscuous mode [ 1487.114338][T20331] veth1_macvtap: entered promiscuous mode [ 1487.238652][T20331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1487.240833][T17295] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1487.286671][T20331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.333790][T10150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.351850][T10150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.351909][T10150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.351945][T10150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.400891][T17295] usb 3-1: Using ep0 maxpacket: 8 [ 1487.407429][T17295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.407453][T17295] usb 3-1: config 0 has no interfaces? [ 1487.407481][T17295] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1487.407504][T17295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.482479][T17295] usb 3-1: config 0 descriptor?? [ 1487.784939][T20687] loop6: detected capacity change from 0 to 7 [ 1487.804214][ C1] blk_print_req_error: 10 callbacks suppressed [ 1487.804230][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.804259][ C1] buffer_io_error: 10 callbacks suppressed [ 1487.804270][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.807036][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.807089][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.853760][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4588'. [ 1487.864616][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.874441][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.875151][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.875184][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.877626][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.877669][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.888197][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.888263][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.891152][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.891183][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.891245][T20687] ldm_validate_partition_table(): Disk read failed. [ 1487.892743][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.892808][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.893816][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.893885][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.896357][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1487.896428][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.898844][T20687] Dev loop6: unable to read RDB block 0 [ 1488.003234][T20687] loop6: unable to read partition table [ 1488.004672][T20687] loop6: partition table beyond EOD, truncated [ 1488.004742][T20687] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1488.700298][ T1536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.700318][ T1536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.841460][ T1536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.841480][ T1536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.910395][ T808] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1489.089418][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 1489.115349][ T808] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1489.115382][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.115406][ T808] usb 4-1: Product: syz [ 1489.115422][ T808] usb 4-1: Manufacturer: syz [ 1489.115439][ T808] usb 4-1: SerialNumber: syz [ 1489.832091][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.832159][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.870047][ T808] usb 4-1: config 0 descriptor?? [ 1490.072168][ T9] usb 3-1: USB disconnect, device number 96 [ 1492.048216][ T808] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1492.114302][T20713] netlink: 'syz.6.4500': attribute type 1 has an invalid length. [ 1492.422757][T20706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4593'. [ 1492.775085][ T37] audit: type=1326 audit(1773957378.791:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20723 comm="syz.6.4594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d6dac799 code=0x0 [ 1493.121513][ T808] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1493.668254][T20741] netlink: 'syz.2.4599': attribute type 11 has an invalid length. [ 1493.668270][T20741] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4599'. [ 1494.725367][T17295] usb 4-1: USB disconnect, device number 98 [ 1495.759483][T20768] netlink: 'syz.2.4604': attribute type 1 has an invalid length. [ 1497.181980][ T37] audit: type=1326 audit(1773957383.091:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20777 comm="syz.7.4607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55bafac799 code=0x0 [ 1499.367884][T20809] mac80211_hwsim hwsim34 : renamed from wlan1 (while UP) [ 1499.490314][ T5884] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1499.544989][T20811] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4613'. [ 1499.545007][T20811] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1499.678508][ T5884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.680685][ T5884] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1499.680728][ T5884] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1499.680750][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.751657][ T5884] usb 8-1: config 0 descriptor?? [ 1499.757493][ T5884] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1499.828254][T20815] netlink: 'syz.3.4615': attribute type 1 has an invalid length. [ 1502.628377][ T808] usb 8-1: USB disconnect, device number 25 [ 1502.792844][ T37] audit: type=1326 audit(1773957388.801:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20840 comm="syz.3.4621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe3bac799 code=0x0 [ 1503.182722][T20854] netlink: 'syz.6.4626': attribute type 10 has an invalid length. [ 1503.182759][T20854] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4626'. [ 1503.182821][T20854] batadv0: entered promiscuous mode [ 1503.182856][T20854] batadv0: entered allmulticast mode [ 1503.220994][ T808] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1503.448829][T20849] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1503.448844][T20849] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1503.474715][T20854] bridge0: port 3(batadv0) entered blocking state [ 1503.484597][T20854] bridge0: port 3(batadv0) entered disabled state [ 1503.498360][T20854] bridge0: port 3(batadv0) entered blocking state [ 1503.513586][T20854] bridge0: port 3(batadv0) entered forwarding state [ 1503.571467][ T808] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1503.572991][ T808] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1503.603896][ T808] usb 8-1: string descriptor 0 read error: -22 [ 1503.604027][ T808] usb 8-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 1503.604059][ T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.677217][ T45] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1503.677232][ T45] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1503.804782][T20860] mac80211_hwsim hwsim27 : renamed from wlan1 (while UP) [ 1504.050323][ T5884] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1504.164603][ T808] usbhid 8-1:1.0: can't add hid device: -32 [ 1504.164733][ T808] usbhid 8-1:1.0: probe with driver usbhid failed with error -32 [ 1504.190847][ T808] usb 8-1: USB disconnect, device number 26 [ 1504.206582][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 1504.208956][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.209006][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1504.209035][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1504.209057][ T5884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1504.209080][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1505.143206][ T5884] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1505.143241][ T5884] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1505.143263][ T5884] usb 2-1: Manufacturer: syz [ 1505.208526][ T5884] usb 2-1: config 0 descriptor?? [ 1505.560273][ T5884] rc_core: IR keymap rc-hauppauge not found [ 1505.560293][ T5884] Registered IR keymap rc-empty [ 1505.560426][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.580367][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.602134][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1505.605735][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input78 [ 1505.803994][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.820641][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.855287][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.870605][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.910501][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.930358][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.950384][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.970606][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1505.991015][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1506.010392][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1506.035663][ T5884] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1506.035725][ T5884] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1506.091572][ T5884] usb 2-1: USB disconnect, device number 82 [ 1506.174009][ T37] audit: type=1326 audit(1773957392.181:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.4632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55bafac799 code=0x0 [ 1506.710119][ T31] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1507.600321][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1507.600348][ T31] usb 4-1: config 0 has no interface number 0 [ 1507.611497][ T31] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1507.611573][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.611619][ T31] usb 4-1: Product: syz [ 1507.611654][ T31] usb 4-1: Manufacturer: syz [ 1507.611678][ T31] usb 4-1: SerialNumber: syz [ 1507.672791][ T31] usb 4-1: config 0 descriptor?? [ 1508.533190][T20891] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4637'. [ 1508.533208][T20891] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1508.610620][ T37] audit: type=1326 audit(1773957394.631:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20893 comm="syz.7.4639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55bafac799 code=0x0 [ 1508.718478][ T31] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1508.735698][ T31] usb 4-1: USB disconnect, device number 99 [ 1509.340331][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1509.866197][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1509.866235][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1509.866280][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1509.866305][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.212763][ T9] usb 2-1: config 0 descriptor?? [ 1511.192253][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1511.192394][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1511.231640][ T9] usb 2-1: USB disconnect, device number 83 [ 1513.180338][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1513.331306][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1513.333039][ T9] usb 8-1: config 139 has an invalid interface number: 49 but max is 0 [ 1513.333063][ T9] usb 8-1: config 139 has no interface number 0 [ 1513.333095][ T9] usb 8-1: config 139 interface 49 has no altsetting 0 [ 1513.336128][ T9] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1513.336165][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.336180][ T9] usb 8-1: Product: syz [ 1513.336191][ T9] usb 8-1: Manufacturer: syz [ 1513.336203][ T9] usb 8-1: SerialNumber: syz [ 1513.609874][T20927] binder: 20922:20927 ioctl 4018620d 0 returned -22 [ 1513.626234][T20927] binder: 20922:20927 ioctl c0306201 0 returned -14 [ 1515.420569][T20939] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4650'. [ 1515.420609][T20939] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1515.559986][ T9] radio-usb-si4713 8-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1515.590540][ T9] radio-usb-si4713 8-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1515.591080][ T9] usbhid 8-1:139.49: couldn't find an input interrupt endpoint [ 1515.599077][ T9] usb 8-1: USB disconnect, device number 27 [ 1516.027851][ T37] audit: type=1326 audit(1773957402.041:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20944 comm="syz.2.4653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af15fc799 code=0x0 [ 1516.270270][ T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1517.267405][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1517.267426][ T9] usb 8-1: config 0 has no interface number 0 [ 1517.271306][ T9] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1517.271331][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.271346][ T9] usb 8-1: Product: syz [ 1517.271357][ T9] usb 8-1: Manufacturer: syz [ 1517.271368][ T9] usb 8-1: SerialNumber: syz [ 1517.381120][ T9] usb 8-1: config 0 descriptor?? [ 1517.457929][T20957] netlink: 'syz.2.4655': attribute type 10 has an invalid length. [ 1517.457952][T20957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4655'. [ 1517.457988][T20957] batadv0: entered promiscuous mode [ 1517.458009][T20957] batadv0: entered allmulticast mode [ 1517.531060][T20957] bond0: (slave batadv0): Releasing backup interface [ 1517.612407][T20957] bridge0: port 3(batadv0) entered blocking state [ 1517.613716][T20957] bridge0: port 3(batadv0) entered disabled state [ 1517.812081][ T1150] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1517.812100][ T1150] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1518.115709][ T9] dvb_usb_ec168 8-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1518.140010][ T9] usb 8-1: USB disconnect, device number 28 [ 1521.530312][ T808] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1521.680345][ T808] usb 8-1: Using ep0 maxpacket: 32 [ 1521.682176][ T808] usb 8-1: config 139 has an invalid interface number: 49 but max is 0 [ 1521.682199][ T808] usb 8-1: config 139 has no interface number 0 [ 1521.682229][ T808] usb 8-1: config 139 interface 49 has no altsetting 0 [ 1521.692512][ T808] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1521.692538][ T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.692558][ T808] usb 8-1: Product: syz [ 1521.692572][ T808] usb 8-1: Manufacturer: syz [ 1521.692586][ T808] usb 8-1: SerialNumber: syz [ 1522.099173][T20987] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4664'. [ 1522.099189][T20987] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1522.304468][ T37] audit: type=1326 audit(1773957408.321:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20988 comm="syz.1.4665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879397c799 code=0x0 [ 1524.124858][ T808] radio-usb-si4713 8-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1524.156138][ T808] radio-usb-si4713 8-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1524.156759][ T808] usbhid 8-1:139.49: couldn't find an input interrupt endpoint [ 1524.170965][T20997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1524.192668][ T808] usb 8-1: USB disconnect, device number 29 [ 1524.312792][T21004] fuse: Bad value for 'fd' [ 1524.460319][T17295] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1525.440284][T17295] usb 4-1: Using ep0 maxpacket: 8 [ 1525.461365][T17295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.461399][T17295] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1525.461415][T17295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.548628][T17295] usb 4-1: config 0 descriptor?? [ 1525.578132][T17295] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 1527.362894][T15507] Bluetooth: hci3: command 0x0406 tx timeout [ 1527.440932][ T31] usb 4-1: USB disconnect, device number 100 [ 1528.376103][T21038] mac80211_hwsim hwsim32 : renamed from wlan1 (while UP) [ 1528.392049][T21036] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4677'. [ 1528.392064][T21036] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1529.758712][ T37] audit: type=1326 audit(1773957415.771:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.4680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d6dac799 code=0x0 [ 1530.022386][T21050] fuse: Bad value for 'fd' [ 1530.240863][T17295] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1530.390367][T17295] usb 8-1: Using ep0 maxpacket: 32 [ 1530.406605][T17295] usb 8-1: config 139 has an invalid interface number: 49 but max is 0 [ 1530.406622][T17295] usb 8-1: config 139 has no interface number 0 [ 1530.406648][T17295] usb 8-1: config 139 interface 49 has no altsetting 0 [ 1530.484217][T17295] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1530.484236][T17295] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.484249][T17295] usb 8-1: Product: syz [ 1530.484258][T17295] usb 8-1: Manufacturer: syz [ 1530.484268][T17295] usb 8-1: SerialNumber: syz [ 1532.821409][T17295] radio-usb-si4713 8-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1532.828773][T17295] radio-usb-si4713 8-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1532.829105][T17295] usbhid 8-1:139.49: couldn't find an input interrupt endpoint [ 1532.859109][T17295] usb 8-1: USB disconnect, device number 30 [ 1532.898806][T20709] udevd[20709]: setting mode of /dev/bus/usb/008/030 to 020664 failed: No such file or directory [ 1532.898985][T20709] udevd[20709]: setting owner of /dev/bus/usb/008/030 to uid=0, gid=0 failed: No such file or directory [ 1534.311620][T21075] netlink: 'syz.7.4688': attribute type 10 has an invalid length. [ 1534.313117][T21075] team0: Device ipvlan1 failed to register rx_handler [ 1534.749503][T21077] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4690'. [ 1534.749518][T21077] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1535.028689][ T37] audit: type=1326 audit(1773957421.041:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21083 comm="syz.1.4693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879397c799 code=0x0 [ 1535.087060][T21086] fuse: Invalid rootmode [ 1540.244395][T21122] fuse: Invalid rootmode [ 1541.514175][T21125] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1541.514192][T21125] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1543.276828][T21147] netlink: 'syz.3.4709': attribute type 10 has an invalid length. [ 1543.284636][T21147] team0: Device ipvlan1 failed to register rx_handler [ 1545.748212][T21167] fuse: Invalid rootmode [ 1545.750278][ T5884] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1546.081847][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 1546.083903][ T5884] usb 3-1: config 139 has an invalid interface number: 49 but max is 0 [ 1546.083928][ T5884] usb 3-1: config 139 has no interface number 0 [ 1546.083959][ T5884] usb 3-1: config 139 interface 49 has no altsetting 0 [ 1546.086626][ T5884] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1546.086649][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.086668][ T5884] usb 3-1: Product: syz [ 1546.086680][ T5884] usb 3-1: Manufacturer: syz [ 1546.086693][ T5884] usb 3-1: SerialNumber: syz [ 1547.300339][T16548] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1547.451635][T16548] usb 8-1: Using ep0 maxpacket: 8 [ 1547.455291][T16548] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.455346][T16548] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1547.455952][T16548] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1547.455977][T16548] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.557174][T16548] usb 8-1: config 0 descriptor?? [ 1547.578987][T16548] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 1548.460928][ T5884] radio-usb-si4713 3-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1548.499874][ T5884] radio-usb-si4713 3-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1548.509870][ T5884] usbhid 3-1:139.49: couldn't find an input interrupt endpoint [ 1548.543795][ T5884] usb 3-1: USB disconnect, device number 97 [ 1549.591429][ T5884] usb 8-1: USB disconnect, device number 31 [ 1549.693617][T21192] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4722'. [ 1549.693653][T21192] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1550.661153][T21206] fuse: Bad value for 'rootmode' [ 1550.808115][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.808178][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.802004][T21221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1553.380262][T21174] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1553.538164][T21174] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1553.538186][T21174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.538201][T21174] usb 2-1: Product: syz [ 1553.538211][T21174] usb 2-1: Manufacturer: syz [ 1553.538221][T21174] usb 2-1: SerialNumber: syz [ 1553.560815][T17295] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1553.634915][T21174] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1553.710316][T16548] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1553.720628][T17295] usb 3-1: Using ep0 maxpacket: 32 [ 1553.722710][T17295] usb 3-1: config 139 has an invalid interface number: 49 but max is 0 [ 1553.722735][T17295] usb 3-1: config 139 has no interface number 0 [ 1553.722766][T17295] usb 3-1: config 139 interface 49 has no altsetting 0 [ 1553.764181][T17295] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1553.764208][T17295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.764228][T17295] usb 3-1: Product: syz [ 1553.764242][T17295] usb 3-1: Manufacturer: syz [ 1553.764255][T17295] usb 3-1: SerialNumber: syz [ 1555.323589][T16548] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1555.323773][T16548] ath9k_htc: Failed to initialize the device [ 1555.326955][ T808] usb 2-1: USB disconnect, device number 84 [ 1555.510573][ T808] usb 2-1: ath9k_htc: USB layer deinitialized [ 1555.713379][T17295] radio-usb-si4713 3-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1555.728481][T17295] radio-usb-si4713 3-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1555.729688][T17295] usbhid 3-1:139.49: couldn't find an input interrupt endpoint [ 1555.750354][T17295] usb 3-1: USB disconnect, device number 98 [ 1556.044811][T21230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1556.061071][T21230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1556.290566][T17295] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1556.560314][T17295] usb 3-1: Using ep0 maxpacket: 8 [ 1556.568888][T17295] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1556.568916][T17295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.568947][T17295] usb 3-1: Product: syz [ 1556.568960][T17295] usb 3-1: Manufacturer: syz [ 1556.568974][T17295] usb 3-1: SerialNumber: syz [ 1556.621704][T17295] usb 3-1: config 0 descriptor?? [ 1556.725815][T21239] netlink: 'syz.3.4735': attribute type 10 has an invalid length. [ 1556.748019][T21239] team0: Device ipvlan1 failed to register rx_handler [ 1556.829733][T17295] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1558.186354][T21247] fuse: Bad value for 'rootmode' [ 1558.416214][T17295] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1558.440517][T17295] usb 3-1: USB disconnect, device number 99 [ 1559.706946][T16548] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1559.940263][T16548] usb 2-1: Using ep0 maxpacket: 32 [ 1559.949621][T16548] usb 2-1: config 139 has an invalid interface number: 49 but max is 0 [ 1559.949647][T16548] usb 2-1: config 139 has no interface number 0 [ 1559.949678][T16548] usb 2-1: config 139 interface 49 has no altsetting 0 [ 1559.952421][T16548] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1559.952465][T16548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.952495][T16548] usb 2-1: Product: syz [ 1559.952510][T16548] usb 2-1: Manufacturer: syz [ 1559.952526][T16548] usb 2-1: SerialNumber: syz [ 1560.169437][T21275] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4744'. [ 1560.169461][T21275] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1560.213885][T21274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1560.315138][T21278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1561.331202][T21291] netlink: 'syz.3.4748': attribute type 10 has an invalid length. [ 1561.336937][T21291] team0: Device ipvlan1 failed to register rx_handler [ 1561.627163][T16548] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1561.683464][T16548] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1561.685952][T16548] usbhid 2-1:139.49: couldn't find an input interrupt endpoint [ 1561.771684][T16548] usb 2-1: USB disconnect, device number 85 [ 1561.799584][T21293] fuse: Bad value for 'rootmode' [ 1565.803376][T16541] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1566.280266][T16541] usb 3-1: Using ep0 maxpacket: 8 [ 1566.310324][T16541] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1566.310367][T16541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.310393][T16541] usb 3-1: Product: syz [ 1566.310409][T16541] usb 3-1: Manufacturer: syz [ 1566.310423][T16541] usb 3-1: SerialNumber: syz [ 1566.375286][T16541] usb 3-1: config 0 descriptor?? [ 1567.050801][T16541] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1568.540897][T12223] Bluetooth: hci4: command 0x0406 tx timeout [ 1568.700291][T16548] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1568.741013][T21332] fuse: Unknown parameter 'use00000000000000000000' [ 1568.850519][T16548] usb 2-1: Using ep0 maxpacket: 32 [ 1568.857181][T16548] usb 2-1: config 139 has an invalid interface number: 49 but max is 0 [ 1568.857199][T16548] usb 2-1: config 139 has no interface number 0 [ 1568.857218][T16548] usb 2-1: config 139 interface 49 has no altsetting 0 [ 1568.863612][T16548] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1568.863656][T16548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.865237][T16548] usb 2-1: Product: syz [ 1568.867130][T16548] usb 2-1: Manufacturer: syz [ 1568.867177][T16548] usb 2-1: SerialNumber: syz [ 1569.926397][T16541] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1570.085260][T16541] usb 3-1: USB disconnect, device number 100 [ 1570.387272][T21343] ./cgroup: Can't lookup blockdev [ 1570.459125][T21346] netlink: 'syz.2.4767': attribute type 10 has an invalid length. [ 1570.459147][T21346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4767'. [ 1570.608502][T21348] random: crng reseeded on system resumption [ 1570.661945][T16548] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1570.674933][T16548] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1570.675477][T16548] usbhid 2-1:139.49: couldn't find an input interrupt endpoint [ 1570.682327][T16548] usb 2-1: USB disconnect, device number 86 [ 1572.714172][T21370] netlink: 'syz.6.4772': attribute type 10 has an invalid length. [ 1572.722400][T21370] team0: Device ipvlan1 failed to register rx_handler [ 1573.404395][T21373] fuse: Unknown parameter 'use00000000000000000000' [ 1574.440359][T16548] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1574.730249][T16548] usb 3-1: Using ep0 maxpacket: 8 [ 1574.770306][T16548] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1574.770341][T16548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.770366][T16548] usb 3-1: Product: syz [ 1574.770383][T16548] usb 3-1: Manufacturer: syz [ 1574.770401][T16548] usb 3-1: SerialNumber: syz [ 1574.814504][T16548] usb 3-1: config 0 descriptor?? [ 1575.018150][T21387] netlink: 'syz.3.4778': attribute type 10 has an invalid length. [ 1575.018186][T21387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4778'. [ 1575.043033][T21387] batadv0: entered promiscuous mode [ 1575.043184][T21387] batadv0: entered allmulticast mode [ 1575.045487][T21387] bridge0: port 3(batadv0) entered blocking state [ 1575.046584][T21387] bridge0: port 3(batadv0) entered disabled state [ 1575.115063][T16548] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1575.134910][T21387] bridge0: port 3(batadv0) entered blocking state [ 1575.147346][T21387] bridge0: port 3(batadv0) entered forwarding state [ 1575.483554][T20404] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1575.483575][T20404] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1575.607959][T21391] ./cgroup: Can't lookup blockdev [ 1577.292054][T16548] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1577.319310][T16548] usb 3-1: USB disconnect, device number 101 [ 1582.528234][T21432] binder: 21431:21432 ioctl 4018620d 0 returned -22 [ 1582.559837][T21433] ./cgroup: Can't lookup blockdev [ 1584.020268][T17295] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1584.170325][ T5905] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1584.188816][T17295] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1584.188851][T17295] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1584.188879][T17295] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1584.188895][T17295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.243186][T17295] usb 4-1: config 0 descriptor?? [ 1584.266533][T17295] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1584.324944][ T5905] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1584.324965][ T5905] usb 8-1: config 0 has no interface number 0 [ 1584.327136][ T5905] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1584.327154][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.327167][ T5905] usb 8-1: Product: syz [ 1584.327176][ T5905] usb 8-1: Manufacturer: syz [ 1584.327186][ T5905] usb 8-1: SerialNumber: syz [ 1584.380592][ T5905] usb 8-1: config 0 descriptor?? [ 1585.388776][ T5905] dvb_usb_ec168 8-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1585.414136][ T5905] usb 8-1: USB disconnect, device number 32 [ 1586.864638][T21473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1586.950083][T16548] usb 4-1: USB disconnect, device number 101 [ 1587.201375][T16541] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1587.817278][T21483] binder: 21482:21483 ioctl 4018620d 0 returned -22 [ 1587.846537][T16541] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1587.846566][T16541] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.846585][T16541] usb 8-1: Product: syz [ 1587.846598][T16541] usb 8-1: Manufacturer: syz [ 1587.846612][T16541] usb 8-1: SerialNumber: syz [ 1587.846799][T21485] ./cgroup: Can't lookup blockdev [ 1588.068212][T16541] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1588.108498][T16549] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1590.205198][T16549] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1590.205394][T16549] ath9k_htc: Failed to initialize the device [ 1590.358696][T17295] usb 8-1: USB disconnect, device number 33 [ 1590.375000][T17295] usb 8-1: ath9k_htc: USB layer deinitialized [ 1591.530331][ T5905] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1592.012696][ T5905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1592.012726][ T5905] usb 3-1: config 0 has no interface number 0 [ 1592.019867][ T5905] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1592.019897][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.019918][ T5905] usb 3-1: Product: syz [ 1592.019933][ T5905] usb 3-1: Manufacturer: syz [ 1592.019947][ T5905] usb 3-1: SerialNumber: syz [ 1592.085859][ T5905] usb 3-1: config 0 descriptor?? [ 1594.448782][ T5905] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1595.370331][T16549] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1595.476158][T16548] usb 3-1: USB disconnect, device number 102 [ 1595.559047][T21537] ./cgroup: Can't lookup blockdev [ 1595.646818][T16549] usb 4-1: Using ep0 maxpacket: 32 [ 1595.649505][T16549] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.649529][T16549] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1595.649565][T16549] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1595.649589][T16549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.800899][T16549] usb 4-1: config 0 descriptor?? [ 1597.476123][T21546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1597.843529][T21174] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1598.078791][T21174] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1598.078816][T21174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.078829][T21174] usb 8-1: Product: syz [ 1598.078839][T21174] usb 8-1: Manufacturer: syz [ 1598.078849][T21174] usb 8-1: SerialNumber: syz [ 1598.169906][T21174] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1598.273850][T16548] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1599.790270][T16548] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1599.790417][T16548] ath9k_htc: Failed to initialize the device [ 1599.860293][ T9] usb 8-1: USB disconnect, device number 34 [ 1599.867384][ T9] usb 8-1: ath9k_htc: USB layer deinitialized [ 1599.869999][ C1] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 1601.866946][T21571] netlink: 'syz.2.4831': attribute type 10 has an invalid length. [ 1601.882251][T21571] team0: Device ipvlan1 failed to register rx_handler [ 1603.350264][T16547] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1603.370266][ T5905] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1603.539294][T16547] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1603.539344][T16547] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1603.539368][T16547] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.557574][ T5905] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1603.557619][ T5905] usb 2-1: config 0 has no interface number 0 [ 1603.594923][ T5905] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1603.594955][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.594979][ T5905] usb 2-1: Product: syz [ 1603.594996][ T5905] usb 2-1: Manufacturer: syz [ 1603.595012][ T5905] usb 2-1: SerialNumber: syz [ 1603.599256][T16547] usb 8-1: config 0 descriptor?? [ 1603.634577][ T5905] usb 2-1: config 0 descriptor?? [ 1603.658530][T16547] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1604.031373][ T10] usb 4-1: USB disconnect, device number 102 [ 1604.074526][ T5905] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1604.096953][ T5905] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1604.097300][ T5905] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1604.097351][ T5905] usb 2-1: media controller created [ 1604.170035][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1605.148463][ T5905] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1605.905022][ T5905] usb 2-1: USB disconnect, device number 87 [ 1606.217777][T16548] usb 8-1: USB disconnect, device number 35 [ 1606.840371][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1607.620217][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1607.622238][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.622285][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1607.622312][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1607.622333][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1607.622355][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1607.623464][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1607.623491][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1607.623511][ T10] usb 4-1: Manufacturer: syz [ 1607.731128][ T10] usb 4-1: config 0 descriptor?? [ 1608.104948][ T10] rc_core: IR keymap rc-hauppauge not found [ 1608.104970][ T10] Registered IR keymap rc-empty [ 1608.105127][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.128310][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.144267][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1608.150084][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input79 [ 1608.468898][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.496458][ C0] rc rc0: IR event FIFO is full! [ 1608.496478][ C0] rc rc0: IR event FIFO is full! [ 1608.496494][ C0] rc rc0: IR event FIFO is full! [ 1608.496507][ C0] rc rc0: IR event FIFO is full! [ 1608.496521][ C0] rc rc0: IR event FIFO is full! [ 1608.496535][ C0] rc rc0: IR event FIFO is full! [ 1608.496547][ C0] rc rc0: IR event FIFO is full! [ 1608.496560][ C0] rc rc0: IR event FIFO is full! [ 1608.496780][ C0] rc rc0: IR event FIFO is full! [ 1608.496795][ C0] rc rc0: IR event FIFO is full! [ 1608.496808][ C0] rc rc0: IR event FIFO is full! [ 1608.496821][ C0] rc rc0: IR event FIFO is full! [ 1608.496833][ C0] rc rc0: IR event FIFO is full! [ 1608.496926][T21625] rc rc0: two consecutive events of type space [ 1608.732087][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.750322][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.770582][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.800319][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.850281][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.878398][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.936651][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.950797][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.974035][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1608.990620][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1609.013319][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 51 [ 1609.013343][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1609.080304][ T10] usb 4-1: USB disconnect, device number 103 [ 1609.450356][ T5905] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1609.600525][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 1609.607604][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.607632][ T5905] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1609.607673][ T5905] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1609.607700][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.648237][ T5905] usb 2-1: config 0 descriptor?? [ 1609.710277][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1609.740330][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1609.864462][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1609.864491][ T9] usb 3-1: config 0 has no interface number 0 [ 1609.868026][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1609.868053][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.868074][ T9] usb 3-1: Product: syz [ 1609.868088][ T9] usb 3-1: Manufacturer: syz [ 1609.868102][ T9] usb 3-1: SerialNumber: syz [ 1609.900196][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1609.948647][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1609.948674][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.948694][ T10] usb 4-1: Product: syz [ 1609.948708][ T10] usb 4-1: Manufacturer: syz [ 1609.948722][ T10] usb 4-1: SerialNumber: syz [ 1609.960071][ T9] usb 3-1: config 0 descriptor?? [ 1609.973948][ T10] usb 4-1: config 0 descriptor?? [ 1610.448926][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1610.825018][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1610.851020][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1610.851982][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1610.852079][ T9] usb 3-1: media controller created [ 1610.907682][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1611.069679][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1611.176600][ T9] usb 3-1: USB disconnect, device number 103 [ 1611.964768][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1611.990412][ T10] usb 4-1: USB disconnect, device number 104 [ 1612.590680][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.590744][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1619.467844][ T5905] usb 2-1: USB disconnect, device number 88 [ 1619.520700][ T10] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1619.623350][T21689] binder: BINDER_SET_CONTEXT_MGR already set [ 1619.623364][T21689] binder: 21687:21689 ioctl 4018620d 200000000040 returned -16 [ 1619.673452][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1619.673479][ T10] usb 8-1: config 0 has no interface number 0 [ 1619.676067][ T10] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1619.676093][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.676113][ T10] usb 8-1: Product: syz [ 1619.676141][ T10] usb 8-1: Manufacturer: syz [ 1619.676152][ T10] usb 8-1: SerialNumber: syz [ 1619.872417][ T10] usb 8-1: config 0 descriptor?? [ 1620.167831][T15507] Bluetooth: hci4: unexpected event for opcode 0x0c14 [ 1621.005616][T17295] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1621.007744][ T10] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1621.096836][ T10] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1621.097138][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1621.097181][ T10] usb 8-1: media controller created [ 1621.141344][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.170249][T17295] usb 3-1: Using ep0 maxpacket: 8 [ 1621.177348][T17295] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1621.177366][T17295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.177379][T17295] usb 3-1: Product: syz [ 1621.177388][T17295] usb 3-1: Manufacturer: syz [ 1621.177397][T17295] usb 3-1: SerialNumber: syz [ 1621.232846][T17295] usb 3-1: config 0 descriptor?? [ 1621.459478][T17295] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1621.510928][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1621.615263][T21707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.636651][T21707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.693821][ T10] usb 8-1: USB disconnect, device number 36 [ 1624.571501][T17295] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1625.260286][T16548] usb 3-1: USB disconnect, device number 104 [ 1625.684359][T15507] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 1626.140277][ T808] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1626.400871][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 1626.405955][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.405974][ T808] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1626.406001][ T808] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1626.406019][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.425320][ T808] usb 4-1: config 0 descriptor?? [ 1627.700637][ T808] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1627.863325][ T808] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1627.863353][ T808] usb 8-1: config 0 has no interface number 0 [ 1627.890590][ T808] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1627.890620][ T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.890641][ T808] usb 8-1: Product: syz [ 1627.890654][ T808] usb 8-1: Manufacturer: syz [ 1627.890669][ T808] usb 8-1: SerialNumber: syz [ 1627.951812][ T808] usb 8-1: config 0 descriptor?? [ 1628.860184][T16547] usb 4-1: USB disconnect, device number 105 [ 1628.976239][ T808] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1628.996685][T21771] netlink: 'syz.2.4883': attribute type 10 has an invalid length. [ 1628.998948][T21771] team0: Device ipvlan1 failed to register rx_handler [ 1629.064465][ T808] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1629.064920][ T808] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1629.064975][ T808] usb 8-1: media controller created [ 1629.116072][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1629.462471][T17295] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1629.651089][T17295] usb 4-1: Using ep0 maxpacket: 8 [ 1629.686688][T17295] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1629.686720][T17295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.686742][T17295] usb 4-1: Product: syz [ 1629.686757][T17295] usb 4-1: Manufacturer: syz [ 1629.686825][T17295] usb 4-1: SerialNumber: syz [ 1629.753757][T17295] usb 4-1: config 0 descriptor?? [ 1629.986578][T17295] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1630.240840][ T808] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1631.750200][T16549] usb 8-1: USB disconnect, device number 37 [ 1631.773916][T17295] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1631.794712][T17295] usb 4-1: USB disconnect, device number 106 [ 1631.891424][T21779] fuse: Bad value for 'fd' [ 1636.545509][T15507] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 1637.270484][ T37] audit: type=1326 audit(1773957523.279:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21799 comm="syz.1.4892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879397c799 code=0x0 [ 1637.803694][T21174] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1638.011753][T21174] usb 4-1: Using ep0 maxpacket: 8 [ 1638.135323][T21174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1638.135377][T21174] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1638.135404][T21174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.181284][T21174] usb 4-1: config 0 descriptor?? [ 1638.396373][T21174] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1638.424469][T21819] fuse: Bad value for 'fd' [ 1638.550250][ T5905] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1638.755686][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4900'. [ 1640.128626][ T5905] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1640.128786][ T5905] usb 8-1: config 0 has no interface number 0 [ 1640.317391][ T5905] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1640.317556][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.317606][ T5905] usb 8-1: Product: syz [ 1640.317764][ T5905] usb 8-1: Manufacturer: syz [ 1640.317779][ T5905] usb 8-1: SerialNumber: syz [ 1641.889729][ T5905] usb 8-1: config 0 descriptor?? [ 1642.116244][ T5905] usb 8-1: can't set config #0, error -71 [ 1642.125368][ T5905] usb 8-1: USB disconnect, device number 38 [ 1642.179581][T21174] usb 4-1: USB disconnect, device number 107 [ 1642.996188][T21839] netlink: 'syz.3.4904': attribute type 10 has an invalid length. [ 1642.998594][T21839] team0: Device ipvlan1 failed to register rx_handler [ 1643.321095][T16547] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1643.561098][T16547] usb 3-1: Using ep0 maxpacket: 16 [ 1643.653312][T16547] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.653349][T16547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1643.653369][T16547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1643.653383][T16547] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1643.653399][T16547] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1643.661009][T16547] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1643.661036][T16547] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1643.661057][T16547] usb 3-1: Manufacturer: syz [ 1643.788060][T16547] usb 3-1: config 0 descriptor?? [ 1645.007517][ T37] audit: type=1326 audit(1773957531.019:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21852 comm="syz.6.4908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d6dac799 code=0x0 [ 1645.020229][T16547] rc_core: IR keymap rc-hauppauge not found [ 1645.020248][T16547] Registered IR keymap rc-empty [ 1645.020418][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.050941][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.071682][T16547] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1645.074508][T16547] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input80 [ 1645.081109][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.102481][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.140291][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.159465][T21857] fuse: Unknown parameter '0x0000000000000003' [ 1645.269731][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.300294][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.320278][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.340414][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.370546][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.390332][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.410424][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1645.439147][T16547] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1645.439299][T16547] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1645.515111][ T10] usb 3-1: USB disconnect, device number 105 [ 1646.470031][T21877] netlink: 'syz.6.4914': attribute type 10 has an invalid length. [ 1646.473364][T21877] team0: Device ipvlan1 failed to register rx_handler [ 1646.590278][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1647.082475][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1647.082502][ T10] usb 2-1: config 0 has no interface number 0 [ 1647.085222][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1647.085252][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.085275][ T10] usb 2-1: Product: syz [ 1647.085682][ T10] usb 2-1: Manufacturer: syz [ 1647.085702][ T10] usb 2-1: SerialNumber: syz [ 1647.096479][ T10] usb 2-1: config 0 descriptor?? [ 1647.247893][T21880] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4916'. [ 1647.247912][T21880] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4916'. [ 1647.247923][T21880] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4916'. [ 1647.480735][T21883] bridge1: entered promiscuous mode [ 1647.480845][T21883] bridge1: entered allmulticast mode [ 1648.565906][T21893] tmpfs: Unknown parameter 'usrquotañléW{' [ 1649.271314][ T10] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1650.068709][T21895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1650.410174][T16547] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1650.570293][T16547] usb 3-1: Using ep0 maxpacket: 16 [ 1650.572085][T16547] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.572131][T16547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1650.572157][T16547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1650.572178][T16547] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1650.572193][T16547] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1650.573714][T16547] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1650.573737][T16547] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1650.573756][T16547] usb 3-1: Manufacturer: syz [ 1650.698975][T16547] usb 3-1: config 0 descriptor?? [ 1651.301082][T16547] rc_core: IR keymap rc-hauppauge not found [ 1651.301097][T16547] Registered IR keymap rc-empty [ 1651.301190][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.335425][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.352391][T16547] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1651.376161][T16547] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input81 [ 1651.405199][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.420414][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.452289][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.470266][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.490242][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.510263][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.530330][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.550334][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.570303][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.590270][T16547] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.684388][T16547] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1651.684413][T16547] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1651.795267][T16547] usb 3-1: USB disconnect, device number 106 [ 1652.032636][T16541] usb 2-1: USB disconnect, device number 89 [ 1652.828531][T21918] CIFS mount error: No usable UNC path provided in device string! [ 1652.828531][T21918] [ 1652.828553][T21918] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1653.321756][ T37] audit: type=1326 audit(1773957539.339:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21923 comm="syz.2.4928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af15fc799 code=0x0 [ 1653.771590][T21931] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4930'. [ 1653.771968][T21931] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4930'. [ 1653.772250][T21931] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4930'. [ 1656.055126][T21958] netlink: 'syz.1.4934': attribute type 11 has an invalid length. [ 1656.055142][T21958] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1656.988680][ T37] audit: type=1326 audit(1773957543.001:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21973 comm="syz.1.4943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879397c799 code=0x0 [ 1657.159984][T21975] CIFS mount error: No usable UNC path provided in device string! [ 1657.159984][T21975] [ 1657.160004][T21975] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1657.500703][ T5905] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1658.380679][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1658.402701][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.402767][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1658.402798][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1658.402823][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1658.402849][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1658.405740][ T5905] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1658.405781][ T5905] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1658.405803][ T5905] usb 3-1: Manufacturer: syz [ 1658.509168][ T5905] usb 3-1: config 0 descriptor?? [ 1658.945539][T21981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1659.060510][ T5905] rc_core: IR keymap rc-hauppauge not found [ 1659.060582][ T5905] Registered IR keymap rc-empty [ 1659.061026][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.090705][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.091713][T21987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4945'. [ 1659.145354][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1659.190794][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input82 [ 1659.240348][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.293529][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.313596][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.513416][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.533388][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.567108][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.634635][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.660502][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.681352][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1659.700913][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1660.006419][ T5905] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1660.006478][ T5905] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1660.259957][ T5905] usb 3-1: USB disconnect, device number 107 [ 1660.915906][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1661.094631][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1661.118639][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.118766][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1661.118807][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1661.118861][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1661.118925][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1661.146698][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1661.146752][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1661.146803][ T9] usb 4-1: Manufacturer: syz [ 1661.473912][ T9] usb 4-1: config 0 descriptor?? [ 1662.865571][T22000] fuse: Unknown parameter '0x0000000000000003' [ 1662.911871][ T9] rc_core: IR keymap rc-hauppauge not found [ 1662.911973][ T9] Registered IR keymap rc-empty [ 1662.914077][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1662.963121][T22002] tmpfs: Unknown parameter 'usrquotañléW{' [ 1663.003824][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1663.741678][ T9] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1663.744884][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input83 [ 1663.792380][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1663.820267][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1663.847354][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1663.871505][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1663.890381][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1663.910288][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1663.942135][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1663.974737][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1663.991765][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1664.012825][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1664.043466][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1664.043490][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1664.077301][ T9] usb 4-1: USB disconnect, device number 108 [ 1664.572985][T22014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1665.290428][ T5905] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1665.341808][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4951'. [ 1665.450288][ T5905] usb 8-1: Using ep0 maxpacket: 16 [ 1665.568502][ T5905] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.568590][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1665.568618][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1665.568640][ T5905] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1665.568662][ T5905] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1665.570917][ T5905] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1665.570944][ T5905] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1665.570963][ T5905] usb 8-1: Manufacturer: syz [ 1665.727342][T22024] CIFS mount error: No usable UNC path provided in device string! [ 1665.727342][T22024] [ 1665.727363][T22024] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1666.495799][ T5905] usb 8-1: config 0 descriptor?? [ 1666.857727][ T37] audit: type=1326 audit(1773957552.872:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22029 comm="syz.6.4955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d6dac799 code=0x0 [ 1667.020279][ T5905] rc_core: IR keymap rc-hauppauge not found [ 1667.020312][ T5905] Registered IR keymap rc-empty [ 1667.020448][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.043048][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.071321][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1667.082328][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input84 [ 1667.123059][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.140395][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.160487][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.609038][T22036] input: syz1 as /devices/virtual/input/input85 [ 1667.626664][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.642942][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.670324][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.700601][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.720302][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.750308][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.780490][ T5905] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1667.813320][ T5905] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1667.813345][ T5905] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1667.886912][ T5905] usb 8-1: USB disconnect, device number 39 [ 1668.375209][T22039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1668.859180][T22050] fuse: Unknown parameter '0x0000000000000003' [ 1668.920345][T16548] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1669.070991][T16548] usb 4-1: Using ep0 maxpacket: 16 [ 1669.073169][T16548] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.073228][T16548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1669.073256][T16548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1669.073277][T16548] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1669.073300][T16548] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1669.074528][T16548] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1669.074553][T16548] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1669.074573][T16548] usb 4-1: Manufacturer: syz [ 1669.243712][T16548] usb 4-1: config 0 descriptor?? [ 1672.721350][T22062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1672.871850][T16548] rc_core: IR keymap rc-hauppauge not found [ 1672.871870][T16548] Registered IR keymap rc-empty [ 1672.872005][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1672.891652][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1672.911640][T16548] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1672.914447][T16548] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input86 [ 1672.955312][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1672.970235][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1672.990243][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1673.010227][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1673.031811][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1673.050283][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1673.072596][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1673.090300][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1673.110296][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1673.130268][T16548] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1673.153174][T16548] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1673.153198][T16548] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1673.182516][T16548] usb 4-1: USB disconnect, device number 109 [ 1673.254020][ T37] audit: type=1326 audit(1773957559.277:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22068 comm="syz.3.4967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe3bac799 code=0x0 [ 1673.422452][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4966'. [ 1673.726991][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.727066][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.844793][T22099] fuse: Unknown parameter '0x0000000000000003' [ 1676.151670][T22076] netlink: 'syz.2.4968': attribute type 11 has an invalid length. [ 1676.151691][T22076] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4968'. [ 1677.486123][T22110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1677.880012][T22120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1678.726359][ T9] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1678.890198][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1678.893089][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.893137][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1678.893164][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1678.893186][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1678.893208][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1678.894352][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1678.894377][ T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1678.894398][ T9] usb 8-1: Manufacturer: syz [ 1678.899454][ T9] usb 8-1: config 0 descriptor?? [ 1680.370232][ T9] rc_core: IR keymap rc-hauppauge not found [ 1680.370252][ T9] Registered IR keymap rc-empty [ 1680.370384][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.405200][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.432127][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1680.454046][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input87 [ 1680.499130][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.521989][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.540760][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.570674][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.593674][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.610272][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.631458][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.650362][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.670318][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.700413][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1680.733828][ T9] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1680.733843][ T9] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1680.770745][ T9] usb 8-1: USB disconnect, device number 40 [ 1681.148148][T22138] fuse: Unknown parameter '0x0000000000000003' [ 1682.251221][T22151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4987'. [ 1684.391915][T22166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1684.650312][T16548] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1684.687194][T22173] netlink: 'syz.7.4988': attribute type 11 has an invalid length. [ 1684.687213][T22173] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4988'. [ 1684.808646][T16548] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1684.808688][T16548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.808708][T16548] usb 3-1: Product: syz [ 1684.808722][T16548] usb 3-1: Manufacturer: syz [ 1684.808736][T16548] usb 3-1: SerialNumber: syz [ 1684.874766][T16548] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1684.918289][T16548] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1684.958763][T22178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1685.082338][T22180] fuse: Unknown parameter 'fd0x0000000000000003' [ 1685.527624][T22187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.544795][T22187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1686.024786][T16548] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1686.025120][T16548] ath9k_htc: Failed to initialize the device [ 1686.156271][T16548] usb 3-1: ath9k_htc: USB layer deinitialized [ 1686.207590][T22192] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5001'. [ 1686.281433][T16541] usb 3-1: USB disconnect, device number 108 [ 1688.921808][T22221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5008'. [ 1689.043663][T22223] fuse: Unknown parameter 'fd0x0000000000000003' [ 1689.985300][T22240] netlink: 'syz.7.5015': attribute type 10 has an invalid length. [ 1689.985327][T22240] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5015'. [ 1690.145917][T22241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.162698][T22241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.363068][T22248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5017'. [ 1690.408536][T22249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1690.670247][ T10] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1690.825698][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1690.825731][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.825754][ T10] usb 3-1: Product: syz [ 1690.825771][ T10] usb 3-1: Manufacturer: syz [ 1690.825787][ T10] usb 3-1: SerialNumber: syz [ 1690.842120][T22265] fuse: Unknown parameter 'fd0x0000000000000003' [ 1690.873528][T22266] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5022'. [ 1690.879302][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1690.911767][ T5905] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1692.345814][ T5905] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1692.346018][ T5905] ath9k_htc: Failed to initialize the device [ 1692.351608][ T10] usb 3-1: USB disconnect, device number 109 [ 1692.432801][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 1692.600829][ T10] ================================================================== [ 1692.600848][ T10] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1692.601010][ T10] Read of size 8 at addr ffffc9000f7fc008 by task kworker/0:1/10 [ 1692.601031][ T10] [ 1692.601061][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1692.601092][ T10] Tainted: [L]=SOFTLOCKUP [ 1692.601101][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1692.601117][ T10] Workqueue: usb_hub_wq hub_event [ 1692.601206][ T10] Call Trace: [ 1692.601216][ T10] [ 1692.601228][ T10] dump_stack_lvl+0xe8/0x150 [ 1692.601286][ T10] print_report+0xba/0x230 [ 1692.601326][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1692.601350][ T10] kasan_report+0x117/0x150 [ 1692.601433][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1692.601460][ T10] __list_add_valid_or_report+0x4e/0x130 [ 1692.601486][ T10] kcov_remote_stop+0x457/0x680 [ 1692.601521][ T10] hub_event+0x49d8/0x4f60 [ 1692.601568][ T10] ? __pfx_hub_event+0x10/0x10 [ 1692.601601][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1692.601647][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1692.601677][ T10] process_scheduled_works+0xb6e/0x18c0 [ 1692.601721][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1692.601752][ T10] ? assign_work+0x3d5/0x5e0 [ 1692.601798][ T10] worker_thread+0xa53/0xfc0 [ 1692.601843][ T10] kthread+0x388/0x470 [ 1692.601867][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1692.601897][ T10] ? __pfx_kthread+0x10/0x10 [ 1692.601919][ T10] ret_from_fork+0x51e/0xb90 [ 1692.601961][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1692.601989][ T10] ? __switch_to+0xc7d/0x1450 [ 1692.602033][ T10] ? __pfx_kthread+0x10/0x10 [ 1692.602055][ T10] ret_from_fork_asm+0x1a/0x30 [ 1692.602085][ T10] [ 1692.602093][ T10] [ 1692.602099][ T10] The buggy address belongs to a vmalloc virtual mapping [ 1692.602118][ T10] Memory state around the buggy address: [ 1692.602135][ T10] ffffc9000f7fbf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1692.602150][ T10] ffffc9000f7fbf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1692.602165][ T10] >ffffc9000f7fc000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1692.602177][ T10] ^ [ 1692.602188][ T10] ffffc9000f7fc080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1692.602204][ T10] ffffc9000f7fc100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1692.602216][ T10] ================================================================== [ 1692.602321][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1692.602341][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1692.602370][ T10] Tainted: [L]=SOFTLOCKUP [ 1692.602379][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1692.602393][ T10] Workqueue: usb_hub_wq hub_event [ 1692.602416][ T10] Call Trace: [ 1692.602425][ T10] [ 1692.602434][ T10] vpanic+0x56c/0xa60 [ 1692.602468][ T10] ? __pfx_vpanic+0x10/0x10 [ 1692.602500][ T10] ? __pfx___schedule+0x10/0x10 [ 1692.602637][ T10] panic+0xc5/0xd0 [ 1692.602668][ T10] ? __pfx_panic+0x10/0x10 [ 1692.602700][ T10] ? preempt_schedule_thunk+0x16/0x30 [ 1692.602731][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1692.602756][ T10] check_panic_on_warn+0x89/0xb0 [ 1692.602787][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1692.602812][ T10] end_report+0x73/0x180 [ 1692.602831][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1692.602856][ T10] kasan_report+0x128/0x150 [ 1692.602876][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1692.602905][ T10] __list_add_valid_or_report+0x4e/0x130 [ 1692.602932][ T10] kcov_remote_stop+0x457/0x680 [ 1692.602961][ T10] hub_event+0x49d8/0x4f60 [ 1692.603011][ T10] ? __pfx_hub_event+0x10/0x10 [ 1692.603039][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1692.603068][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1692.603109][ T10] process_scheduled_works+0xb6e/0x18c0 [ 1692.603152][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1692.603183][ T10] ? assign_work+0x3d5/0x5e0 [ 1692.603212][ T10] worker_thread+0xa53/0xfc0 [ 1692.603253][ T10] kthread+0x388/0x470 [ 1692.603273][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1692.603300][ T10] ? __pfx_kthread+0x10/0x10 [ 1692.603322][ T10] ret_from_fork+0x51e/0xb90 [ 1692.603350][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1692.603378][ T10] ? __switch_to+0xc7d/0x1450 [ 1692.603402][ T10] ? __pfx_kthread+0x10/0x10 [ 1692.603424][ T10] ret_from_fork_asm+0x1a/0x30 [ 1692.603451][ T10] [ 1692.604047][ T10] Kernel Offset: disabled