last executing test programs: 15.66545305s ago: executing program 0 (id=1923): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 14.484060017s ago: executing program 0 (id=1925): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x62, 0x0, &(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xa, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x33, 0x2d, 0x4e, 0x3a, 0x36, 0x2f, 0x34]}}}, 0x4e}]}) 9.400987828s ago: executing program 0 (id=1934): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x62, 0x0, &(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xa, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 9.288658863s ago: executing program 1 (id=1935): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000008c0)={0x6, 0x0, [{0x25000, 0x1000, &(0x7f0000001dc0)=""/4096}, {0xf000, 0x0, 0x0}, {0x26000, 0xcf, &(0x7f0000000400)=""/207}, {0x4000, 0x49, &(0x7f0000000340)=""/73}, {0xeeee0000, 0x31, &(0x7f0000000280)=""/49}, {0x25000, 0x86, &(0x7f00000005c0)=""/134}]}) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8000000000000000) 8.183936517s ago: executing program 3 (id=1936): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$kcm(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7.467922593s ago: executing program 0 (id=1937): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(0xffffffffffffffff, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000000)={0x0, {0x0, 0x0, @ofdm}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 7.426757545s ago: executing program 2 (id=1938): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) 6.768114677s ago: executing program 3 (id=1939): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.725407029s ago: executing program 2 (id=1940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) 6.612784035s ago: executing program 3 (id=1941): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1c, 0x16, &(0x7f0000000740)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0x1, 0x0, 0x0) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r4, 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000001940), 0x0}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) 5.348029417s ago: executing program 3 (id=1942): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x62, 0x0, &(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xa, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x33, 0x2d, 0x4e, 0x3a, 0x36, 0x2f, 0x34]}}}, 0x4e}]}) 4.421207823s ago: executing program 2 (id=1943): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 4.058489821s ago: executing program 2 (id=1944): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) 3.640060071s ago: executing program 2 (id=1945): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x62, 0x0, &(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xa, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 3.582518514s ago: executing program 0 (id=1946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getregs(0xe, r0, 0x9, &(0x7f0000000080)=""/63) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) 3.414219982s ago: executing program 1 (id=1947): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$kcm(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.129460887s ago: executing program 3 (id=1948): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 2.873994989s ago: executing program 3 (id=1949): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1, 0x7f}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000207e050e2000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) 2.64172287s ago: executing program 1 (id=1950): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r2 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000880)=@multiplanar_mmap={0x6, 0x6, 0x4, 0xe000, 0x1000, {}, {0x1, 0x2, 0x4e, 0xc, 0xc, 0xf8, "d66bb72d"}, 0x4, 0x1, {0x0}, 0x889c}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r6, 0x101, 0x5, &(0x7f0000000000)=0x20e, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xd50d195639973afc, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1.493416937s ago: executing program 1 (id=1951): r0 = io_uring_setup(0x7939, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x1, 0x215}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007) r2 = timerfd_create(0x0, 0x80000) read(r2, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000040)=0x8004) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r4}, 0x3f) recvfrom(r4, &(0x7f00000004c0)=""/186, 0xba, 0x10021, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 363.075033ms ago: executing program 1 (id=1952): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 55.810977ms ago: executing program 2 (id=1953): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa6f01, 0x0) setresuid(0x0, 0x0, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, 0x0, 0x0, 0x20000010) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[{}], 0x0, 0x0, 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x322b, &(0x7f0000000540)={0x0, 0xd4bb, 0x504, 0xfffffffd, 0x10010f}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x76, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x140000002}, r3, 0x3, 0x0, 0x1}) listen(r5, 0x5) io_uring_enter(r6, 0x24dc2, 0x4d04, 0x1b, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) socket$inet_udp(0x2, 0x2, 0x0) 17.297209ms ago: executing program 0 (id=1954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(0xffffffffffffffff, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000000)={0x0, {0x0, 0x0, @ofdm}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 0s ago: executing program 1 (id=1955): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000008c0)={0x6, 0x0, [{0x25000, 0x1000, &(0x7f0000001dc0)=""/4096}, {0xf000, 0x0, 0x0}, {0x26000, 0xcf, &(0x7f0000000400)=""/207}, {0x4000, 0x49, &(0x7f0000000340)=""/73}, {0xeeee0000, 0x31, &(0x7f0000000280)=""/49}, {0x25000, 0x86, &(0x7f00000005c0)=""/134}]}) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8000000000000000) kernel console output (not intermixed with test programs): ernal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 101.673615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.682651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.697284][ T5774] Bluetooth: hci2: failed to register connection device [ 102.147828][ T5855] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 102.333146][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 103.108434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.561786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.571083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.719233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.423770][ T5867] syz.1.7[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.632185][ T5868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 104.639761][ T5868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.651605][ T5868] vhci_hcd vhci_hcd.0: Device attached [ 105.911930][ T5869] vhci_hcd: connection closed [ 105.981161][ T4450] vhci_hcd: stop threads [ 106.019661][ T4450] vhci_hcd: release socket [ 106.158778][ T5834] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 106.376795][ T5876] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.416792][ T4450] vhci_hcd: disconnect device [ 106.964735][ T5891] capability: warning: `syz.1.12' uses deprecated v2 capabilities in a way that may be insecure [ 108.288156][ C1] sched: RT throttling activated [ 110.661012][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 110.672476][ T5780] CPU: 1 PID: 5780 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 110.680176][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.690460][ T5780] Workqueue: hci3 hci_rx_work [ 110.695444][ T5780] Call Trace: [ 110.699057][ T5780] [ 110.702350][ T5780] dump_stack_lvl+0x18c/0x250 [ 110.707268][ T5780] ? show_regs_print_info+0x20/0x20 [ 110.712687][ T5780] ? load_image+0x400/0x400 [ 110.717687][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 110.723011][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 110.727909][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 110.733327][ T5780] kobject_add_internal+0x61c/0xcc0 [ 110.738633][ T5780] kobject_add+0x164/0x240 [ 110.743195][ T5780] ? __rwlock_init+0x150/0x150 [ 110.748184][ T5780] ? kobject_init+0x1e0/0x1e0 [ 110.753279][ T5780] ? _raw_spin_unlock+0x28/0x40 [ 110.758174][ T5780] ? get_device_parent+0x366/0x390 [ 110.763421][ T5780] device_add+0x408/0xc20 [ 110.767997][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 110.773090][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 110.778641][ T5780] ? hci_event_packet+0x4cb/0x1270 [ 110.783862][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 110.790444][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 110.796227][ T5780] ? skb_pull_data+0xfb/0x200 [ 110.801188][ T5780] hci_le_conn_complete_evt+0x187/0x440 [ 110.806962][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 110.813327][ T5780] hci_event_packet+0x7ba/0x1270 [ 110.818670][ T5780] ? bis_list+0x290/0x290 [ 110.823123][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 110.828570][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 110.834208][ T5780] hci_rx_work+0x43a/0xd60 [ 110.838870][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 110.844643][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 110.850512][ T5780] ? worker_attach_to_pool+0x380/0x380 [ 110.856232][ T5780] ? assign_work+0x3d2/0x5d0 [ 110.861155][ T5780] worker_thread+0xa55/0xfc0 [ 110.865823][ T5780] kthread+0x2fa/0x390 [ 110.869934][ T5780] ? pr_cont_work+0x560/0x560 [ 110.874979][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 110.879916][ T5780] ret_from_fork+0x48/0x80 [ 110.885362][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 110.890119][ T5780] ret_from_fork_asm+0x11/0x20 [ 110.895043][ T5780] [ 111.413088][ T5909] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 111.434438][ T5834] vhci_hcd: vhci_device speed not set [ 111.486827][ T5780] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 111.501588][ T5780] Bluetooth: hci3: failed to register connection device [ 111.755874][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 113.064147][ T5918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16'. [ 113.724901][ T5921] dns_resolver: Unsupported content type (152) [ 114.341136][ T5930] overlayfs: missing 'lowerdir' [ 115.747619][ T5948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.28'. [ 115.841966][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 115.877491][ T5780] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 116.579213][ T5949] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 116.965258][ T5962] overlayfs: missing 'lowerdir' [ 117.036217][ T5958] dns_resolver: Unsupported content type (152) [ 119.697610][ T5984] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 119.850428][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 119.871491][ T5780] CPU: 1 PID: 5780 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 119.879296][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.889772][ T5780] Workqueue: hci1 hci_rx_work [ 119.894713][ T5780] Call Trace: [ 119.898141][ T5780] [ 119.901173][ T5780] dump_stack_lvl+0x18c/0x250 [ 119.906105][ T5780] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 119.912018][ T5780] ? show_regs_print_info+0x20/0x20 [ 119.917299][ T5780] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 119.923223][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 119.928408][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 119.933254][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 119.938549][ T5780] kobject_add_internal+0x61c/0xcc0 [ 119.943891][ T5780] kobject_add+0x164/0x240 [ 119.948484][ T5780] ? __rwlock_init+0x150/0x150 [ 119.953423][ T5780] ? kobject_init+0x1e0/0x1e0 [ 119.958792][ T5780] ? _raw_spin_unlock+0x28/0x40 [ 119.963991][ T5780] ? get_device_parent+0x366/0x390 [ 119.969375][ T5780] device_add+0x408/0xc20 [ 119.974094][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 119.979288][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 119.984843][ T5780] ? hci_event_packet+0x4cb/0x1270 [ 119.990313][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 119.996788][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 120.002603][ T5780] ? skb_pull_data+0xfb/0x200 [ 120.007622][ T5780] hci_le_conn_complete_evt+0x187/0x440 [ 120.013444][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 120.019584][ T5780] hci_event_packet+0x7ba/0x1270 [ 120.024724][ T5780] ? bis_list+0x290/0x290 [ 120.029158][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 120.034688][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 120.040129][ T5780] hci_rx_work+0x43a/0xd60 [ 120.044681][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 120.050486][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 120.056304][ T5780] ? worker_attach_to_pool+0x380/0x380 [ 120.061914][ T5780] ? assign_work+0x3d2/0x5d0 [ 120.066590][ T5780] worker_thread+0xa55/0xfc0 [ 120.071299][ T5780] kthread+0x2fa/0x390 [ 120.075746][ T5780] ? pr_cont_work+0x560/0x560 [ 120.080613][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 120.085554][ T5780] ret_from_fork+0x48/0x80 [ 120.090095][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 120.095240][ T5780] ret_from_fork_asm+0x11/0x20 [ 120.100159][ T5780] [ 120.130248][ T5780] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.144965][ T5780] Bluetooth: hci1: failed to register connection device [ 120.615639][ T5992] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 121.000349][ T6000] overlayfs: missing 'lowerdir' [ 121.403672][ T6009] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 121.410739][ T6009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.418712][ T6009] vhci_hcd vhci_hcd.0: Device attached [ 121.706955][ T6008] dns_resolver: Unsupported content type (152) [ 122.471941][ T6010] vhci_hcd: connection closed [ 122.720228][ T4441] vhci_hcd: stop threads [ 122.746081][ T4441] vhci_hcd: release socket [ 122.779097][ T4441] vhci_hcd: disconnect device [ 122.838241][ T9] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 122.876818][ T9] usb 35-1: enqueue for inactive port 0 [ 122.988306][ T9] vhci_hcd: vhci_device speed not set [ 124.348615][ T5780] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 125.901014][ T6042] overlayfs: missing 'lowerdir' [ 126.138920][ T6052] dns_resolver: Unsupported content type (152) [ 128.821695][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 129.051665][ T6079] overlayfs: missing 'lowerdir' [ 129.396544][ T6088] dns_resolver: Unsupported content type (152) [ 129.774152][ T6093] Bluetooth: MGMT ver 1.22 [ 131.181375][ T6111] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.211197][ T6111] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.524337][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 132.681899][ T6125] dns_resolver: Unsupported content type (152) [ 133.298681][ T6136] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 133.326985][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.335827][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.356140][ T6136] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 134.428486][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 136.595535][ T5780] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 137.089763][ T6166] dns_resolver: Unsupported content type (152) [ 137.420134][ T6175] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 137.444488][ T6175] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 137.579132][ T6180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.98'. [ 138.391283][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 138.401729][ T5780] CPU: 1 PID: 5780 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 138.409892][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.420283][ T5780] Workqueue: hci0 hci_rx_work [ 138.425651][ T5780] Call Trace: [ 138.429276][ T5780] [ 138.432719][ T5780] dump_stack_lvl+0x18c/0x250 [ 138.438012][ T5780] ? show_regs_print_info+0x20/0x20 [ 138.443739][ T5780] ? load_image+0x400/0x400 [ 138.448507][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 138.454922][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 138.459847][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 138.465306][ T5780] kobject_add_internal+0x61c/0xcc0 [ 138.470784][ T5780] kobject_add+0x164/0x240 [ 138.475708][ T5780] ? kobject_init+0x1e0/0x1e0 [ 138.480549][ T5780] ? _raw_spin_unlock+0x3a/0x40 [ 138.485633][ T5780] ? get_device_parent+0x366/0x390 [ 138.490829][ T5780] device_add+0x408/0xc20 [ 138.495444][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 138.500727][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 138.506524][ T5780] ? hci_event_packet+0x4cb/0x1270 [ 138.511891][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 138.518479][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 138.524621][ T5780] ? skb_pull_data+0xfb/0x200 [ 138.529636][ T5780] hci_le_conn_complete_evt+0x187/0x440 [ 138.535740][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 138.542241][ T5780] hci_event_packet+0x7ba/0x1270 [ 138.547431][ T5780] ? bis_list+0x290/0x290 [ 138.551831][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 138.557263][ T5780] hci_rx_work+0x43a/0xd60 [ 138.561854][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 138.567917][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 138.573915][ T5780] ? worker_attach_to_pool+0x380/0x380 [ 138.579748][ T5780] ? assign_work+0x3d2/0x5d0 [ 138.584598][ T5780] worker_thread+0xa55/0xfc0 [ 138.589818][ T5780] kthread+0x2fa/0x390 [ 138.594303][ T5780] ? pr_cont_work+0x560/0x560 [ 138.599050][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 138.603701][ T5780] ret_from_fork+0x48/0x80 [ 138.608363][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 138.613028][ T5780] ret_from_fork_asm+0x11/0x20 [ 138.617974][ T5780] [ 138.645299][ T5780] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 138.664181][ T5780] Bluetooth: hci0: failed to register connection device [ 139.453745][ T6205] overlayfs: missing 'lowerdir' [ 139.529054][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.109'. [ 141.596628][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.120'. [ 141.614315][ T5780] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 141.689006][ T6234] overlayfs: missing 'lowerdir' [ 143.217546][ T6249] dns_resolver: Unsupported content type (152) [ 144.845464][ T6265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.131'. [ 144.851421][ T6268] overlayfs: missing 'lowerdir' [ 145.838031][ T5774] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 148.201647][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.141'. [ 148.310482][ T6294] overlayfs: missing 'workdir' [ 150.305957][ T6312] dns_resolver: Unsupported content type (152) [ 151.718415][ T5780] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 151.718430][ T5774] Bluetooth: hci0: command 0x1407 tx timeout [ 152.714686][ T6330] overlayfs: missing 'workdir' [ 157.035791][ T6349] dns_resolver: Unsupported content type (152) [ 157.718635][ T6358] overlayfs: missing 'workdir' [ 166.324903][ T6428] dns_resolver: Unsupported content type (152) [ 167.314895][ T6434] overlayfs: failed to clone upperpath [ 170.735125][ T6466] dns_resolver: Unsupported content type (152) [ 173.725975][ T6486] overlayfs: failed to clone upperpath [ 176.107931][ T6513] dns_resolver: Unsupported content type (152) [ 178.832536][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 180.692573][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 182.409232][ T6548] dns_resolver: Unsupported content type (152) [ 184.503363][ T6567] overlayfs: failed to clone upperpath [ 184.967151][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 189.696534][ T5780] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 192.758752][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 194.762413][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.768861][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.095824][ T5780] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 196.011117][ T6649] overlayfs: failed to clone upperpath [ 196.538014][ T6659] dns_resolver: Unsupported content type (152) [ 201.311782][ T6695] dns_resolver: Unsupported content type (152) [ 202.842965][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 207.631805][ T6721] netlink: 'syz.2.261': attribute type 4 has an invalid length. [ 207.640047][ T6721] netlink: 152 bytes leftover after parsing attributes in process `syz.2.261'. [ 207.660582][ T6721] .`: renamed from bond0 (while UP) [ 209.205923][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 209.937670][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 214.148223][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 214.368119][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 214.384234][ T5819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.412820][ T5819] usb 3-1: config 4 interface 0 has no altsetting 0 [ 214.460302][ T5819] usb 3-1: string descriptor 0 read error: -22 [ 214.478455][ T5819] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 214.508194][ T5819] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 214.609785][ T5819] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 214.635071][ T5819] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 214.683511][ T5819] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 214.739296][ T5819] usb 3-1: media controller created [ 214.835601][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.095877][ T6791] dns_resolver: Unsupported content type (152) [ 216.143983][ T5819] usb 3-1: USB disconnect, device number 2 [ 216.351683][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 217.347328][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 218.045598][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 218.055909][ T5774] Bluetooth: hci0: command 0x1407 tx timeout [ 218.066410][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 218.072835][ T5819] kernel read not supported for file /dsp (pid: 5819 comm: kworker/0:5) [ 218.077010][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 220.990041][ T6817] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 221.385379][ T6817] ftl_cs: FTL header not found. [ 221.485409][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 222.802435][ T6833] overlayfs: failed to clone upperpath [ 222.935239][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 229.211743][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 230.209319][ T6867] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 230.283940][ T6867] ftl_cs: FTL header not found. [ 231.161549][ T6880] overlayfs: failed to clone upperpath [ 237.742571][ T6917] overlayfs: failed to clone upperpath [ 239.777671][ T6932] mmap: syz.3.321 (6932) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 240.121026][ T4450] Bluetooth: (null): Invalid header checksum [ 240.127923][ T4450] Bluetooth: (null): Invalid header checksum [ 240.145409][ T4450] Bluetooth: (null): Invalid header checksum [ 240.220996][ T11] Bluetooth: (null): Invalid header checksum [ 240.236673][ T6934] dns_resolver: Unsupported content type (152) [ 242.562119][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 243.200380][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 243.227260][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.241107][ T8] usb 1-1: config 4 interface 0 has no altsetting 0 [ 243.265842][ T8] usb 1-1: string descriptor 0 read error: -22 [ 243.286876][ T8] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 243.324041][ T8] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 243.923207][ T8] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 243.961689][ T8] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 244.018693][ T8] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 244.026527][ T8] usb 1-1: media controller created [ 244.050923][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.318660][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 245.478973][ T8] usb 1-1: USB disconnect, device number 2 [ 246.233182][ T6987] dns_resolver: Unsupported content type (152) [ 248.599531][ T6999] netlink: 'syz.3.339': attribute type 4 has an invalid length. [ 248.608562][ T6999] netlink: 152 bytes leftover after parsing attributes in process `syz.3.339'. [ 248.801565][ T6999] .`: renamed from bond0 (while UP) [ 253.501714][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 254.927504][ T7057] dns_resolver: Unsupported content type (152) [ 256.272859][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.279745][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.304324][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 264.149554][ T7153] dns_resolver: Unsupported content type (152) [ 264.477577][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 270.137218][ T7205] dns_resolver: Unsupported content type (152) [ 270.489358][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 273.847881][ T7229] netlink: 'syz.1.385': attribute type 4 has an invalid length. [ 273.856205][ T7229] netlink: 152 bytes leftover after parsing attributes in process `syz.1.385'. [ 273.930003][ T7229] .`: renamed from bond0 (while UP) [ 276.309591][ T7246] dns_resolver: Unsupported content type (152) [ 277.668281][ T5819] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 277.928165][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 277.969273][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 277.996473][ T5819] usb 2-1: config 4 interface 0 has no altsetting 0 [ 278.027158][ T5819] usb 2-1: string descriptor 0 read error: -22 [ 278.064989][ T5819] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 278.120607][ T5819] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 278.241705][ T5819] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 278.300176][ T5819] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.311455][ T5819] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 278.319821][ T5819] usb 2-1: media controller created [ 278.358838][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.860921][ T7284] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 278.882151][ T7284] netlink: 152 bytes leftover after parsing attributes in process `syz.0.397'. [ 278.979292][ T7284] .`: renamed from bond0 (while UP) [ 279.558440][ T5819] zl10353_read_register: readreg error (reg=127, ret==0) [ 279.703378][ T5819] usb 2-1: USB disconnect, device number 2 [ 280.237183][ T7299] dns_resolver: Unsupported content type (152) [ 281.624179][ T7319] dns_resolver: Unsupported content type (152) [ 284.023436][ T7336] dns_resolver: Unsupported content type (152) [ 285.361761][ T7344] netlink: 'syz.1.409': attribute type 4 has an invalid length. [ 285.371831][ T7344] netlink: 152 bytes leftover after parsing attributes in process `syz.1.409'. [ 286.650222][ T7352] dns_resolver: Unsupported content type (152) [ 287.576259][ T7357] dns_resolver: Unsupported content type (152) [ 292.194210][ T7388] dns_resolver: Unsupported content type (152) [ 292.856509][ T7396] dns_resolver: Unsupported content type (152) [ 295.728600][ T7414] dns_resolver: Unsupported content type (152) [ 296.304853][ T5816] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 296.549971][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 296.570991][ T5816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.602736][ T5816] usb 2-1: config 4 interface 0 has no altsetting 0 [ 296.653710][ T5816] usb 2-1: string descriptor 0 read error: -22 [ 296.674160][ T5816] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 296.722611][ T5816] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 296.775117][ T5816] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 296.813723][ T5816] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.855962][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 296.870378][ T5816] usb 2-1: media controller created [ 296.897751][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.215962][ T7430] dns_resolver: Unsupported content type (152) [ 297.935828][ T7440] dns_resolver: Unsupported content type (152) [ 298.637114][ T5816] zl10353_read_register: readreg error (reg=127, ret==0) [ 298.711119][ T7437] raw_sendmsg: syz.3.432 forgot to set AF_INET. Fix it! [ 298.748968][ T5816] usb 2-1: USB disconnect, device number 3 [ 298.784353][ T7437] syzkaller1: entered promiscuous mode [ 298.790404][ T7437] syzkaller1: entered allmulticast mode [ 302.654245][ T7475] dns_resolver: Unsupported content type (152) [ 302.918400][ T7480] dns_resolver: Unsupported content type (152) [ 305.368122][ T5816] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 306.138474][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 306.150377][ T5816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.174800][ T5816] usb 3-1: config 4 interface 0 has no altsetting 0 [ 306.250027][ T5816] usb 3-1: string descriptor 0 read error: -22 [ 306.286885][ T5816] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 306.306620][ T5816] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 306.330439][ T5816] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 306.344306][ T5816] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 306.355628][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 306.396494][ T5816] usb 3-1: media controller created [ 306.548437][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.595176][ T7510] dns_resolver: Unsupported content type (152) [ 306.820449][ T5816] zl10353_read_register: readreg error (reg=127, ret==0) [ 307.010273][ T5816] usb 3-1: USB disconnect, device number 3 [ 307.394336][ T7518] netlink: 'syz.3.453': attribute type 4 has an invalid length. [ 307.404720][ T7518] netlink: 152 bytes leftover after parsing attributes in process `syz.3.453'. [ 308.428354][ T7526] dns_resolver: Unsupported content type (152) [ 309.859423][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 313.954751][ T7552] netlink: 'syz.2.463': attribute type 4 has an invalid length. [ 313.963408][ T7552] netlink: 152 bytes leftover after parsing attributes in process `syz.2.463'. [ 314.654103][ T7556] dns_resolver: Unsupported content type (152) [ 315.686345][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 317.641929][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.648714][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.198742][ T2131] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 318.199501][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 318.398638][ T2131] usb 4-1: Using ep0 maxpacket: 8 [ 318.439491][ T2131] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.463957][ T2131] usb 4-1: config 4 interface 0 has no altsetting 0 [ 318.468208][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 318.491304][ T2131] usb 4-1: string descriptor 0 read error: -22 [ 318.499353][ T2131] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 318.513701][ T2131] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 318.606778][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 318.669778][ T2131] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 318.682287][ T2131] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.693944][ T2131] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 318.701548][ T2131] usb 4-1: media controller created [ 318.707467][ T8] usb 2-1: config 4 interface 0 has no altsetting 0 [ 318.739944][ T8] usb 2-1: string descriptor 0 read error: -22 [ 318.748203][ T8] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 318.757413][ T8] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 318.787771][ T2131] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.885046][ T8] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 318.939536][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.962775][ T8] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 318.971719][ T8] usb 2-1: media controller created [ 319.045470][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.201797][ T2131] zl10353_read_register: readreg error (reg=127, ret==0) [ 319.329680][ T7595] dns_resolver: Unsupported content type (152) [ 319.539384][ T2131] usb 4-1: USB disconnect, device number 2 [ 320.164063][ T8] usb 2-1: USB disconnect, device number 4 [ 321.183904][ T7625] syzkaller1: entered promiscuous mode [ 321.191282][ T7625] syzkaller1: entered allmulticast mode [ 321.707490][ T7634] dns_resolver: Unsupported content type (152) [ 322.948211][ T5834] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 323.168076][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 323.187110][ T5834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.218175][ T5834] usb 1-1: config 4 interface 0 has no altsetting 0 [ 323.237466][ T5834] usb 1-1: string descriptor 0 read error: -22 [ 323.247905][ T5834] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 323.288666][ T5834] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 323.357734][ T5834] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 323.420835][ T5834] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 323.450273][ T5834] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 323.468769][ T5834] usb 1-1: media controller created [ 323.573671][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.801955][ T5834] zl10353_read_register: readreg error (reg=127, ret==0) [ 323.957464][ T5834] usb 1-1: USB disconnect, device number 3 [ 325.988219][ T7673] dns_resolver: Unsupported content type (152) [ 326.318161][ T5819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 327.556634][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 327.574086][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.641119][ T5819] usb 4-1: config 4 interface 0 has no altsetting 0 [ 327.817640][ T5819] usb 4-1: string descriptor 0 read error: -22 [ 327.906027][ T5819] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 328.050216][ T5819] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 328.398485][ T5819] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 328.461838][ T5819] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 328.667767][ T5819] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 328.677171][ T5819] usb 4-1: media controller created [ 328.715413][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.951309][ T5819] zl10353_read_register: readreg error (reg=127, ret==0) [ 329.008774][ T5819] usb 4-1: USB disconnect, device number 3 [ 330.471440][ T7717] dns_resolver: Unsupported content type (152) [ 331.538220][ T5816] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 332.981916][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 332.993395][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 333.239558][ T5834] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 333.498868][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 333.570892][ T5834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.715826][ T5834] usb 2-1: config 4 interface 0 has no altsetting 0 [ 333.811954][ T5834] usb 2-1: string descriptor 0 read error: -22 [ 333.851991][ T5834] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 333.917578][ T5834] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 334.041644][ T5816] usb 4-1: config 4 interface 0 has no altsetting 0 [ 334.076682][ T5816] usb 4-1: string descriptor 0 read error: -22 [ 334.090735][ T5816] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 334.142040][ T5834] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 334.146285][ T5816] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 334.177319][ T5834] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 334.207928][ T5834] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 334.216367][ T5834] usb 2-1: media controller created [ 334.232913][ T5816] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 334.271094][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.292791][ T5816] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 334.401534][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 334.458136][ T5816] usb 4-1: media controller created [ 334.735728][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.773064][ T5819] usb 2-1: USB disconnect, device number 5 [ 334.836568][ T7755] dns_resolver: Unsupported content type (152) [ 335.606006][ T5816] zl10353_read_register: readreg error (reg=127, ret==0) [ 335.872194][ T5816] usb 4-1: USB disconnect, device number 4 [ 340.251983][ T7785] syzkaller1: entered promiscuous mode [ 340.289806][ T7785] syzkaller1: entered allmulticast mode [ 340.698197][ T5816] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 340.828602][ T7795] Cannot find set identified by id 0 to match [ 340.898112][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 340.912240][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 340.929425][ T5816] usb 4-1: config 4 interface 0 has no altsetting 0 [ 340.948368][ T5816] usb 4-1: string descriptor 0 read error: -22 [ 340.962996][ T5816] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 340.973059][ T5816] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 341.011145][ T5816] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 341.040485][ T5816] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 341.066229][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 341.080782][ T5816] usb 4-1: media controller created [ 341.109490][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.502493][ T5834] usb 4-1: USB disconnect, device number 5 [ 341.543075][ T7801] dns_resolver: Unsupported content type (152) [ 343.858165][ T5816] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 344.048125][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 344.066293][ T5816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.090596][ T5816] usb 3-1: config 4 interface 0 has no altsetting 0 [ 344.113663][ T5816] usb 3-1: string descriptor 0 read error: -22 [ 344.122698][ T5816] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 344.148714][ T5816] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 344.171646][ T5816] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 344.208197][ T5816] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 344.241555][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 344.249647][ T5816] usb 3-1: media controller created [ 344.294410][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.330746][ T7834] Cannot find set identified by id 0 to match [ 344.625745][ T5816] usb 3-1: USB disconnect, device number 4 [ 345.590384][ T7848] dns_resolver: Unsupported content type (152) [ 349.176280][ T7881] Cannot find set identified by id 0 to match [ 349.542315][ T7888] dns_resolver: Unsupported content type (152) [ 349.752075][ T5818] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 350.617211][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 350.641100][ T5818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.658419][ T5818] usb 1-1: config 4 interface 0 has no altsetting 0 [ 350.670994][ T5818] usb 1-1: string descriptor 0 read error: -22 [ 350.677426][ T5818] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 350.947292][ T5818] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 350.978949][ T5818] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 351.003510][ T5818] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 351.032481][ T5818] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 351.044084][ T5818] usb 1-1: media controller created [ 351.082178][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.424442][ T5816] usb 1-1: USB disconnect, device number 4 [ 351.932981][ T7911] netlink: 'syz.3.563': attribute type 4 has an invalid length. [ 351.941092][ T7911] netlink: 152 bytes leftover after parsing attributes in process `syz.3.563'. [ 354.551512][ T7932] dns_resolver: Unsupported content type (152) [ 356.604422][ T7954] netlink: 'syz.3.575': attribute type 4 has an invalid length. [ 356.613211][ T7954] netlink: 152 bytes leftover after parsing attributes in process `syz.3.575'. [ 359.794037][ T7981] dns_resolver: Unsupported content type (152) [ 361.347361][ T7995] Cannot find set identified by id 0 to match [ 364.437676][ T8021] dns_resolver: Unsupported content type (152) [ 367.687008][ T8054] Cannot find set identified by id 0 to match [ 367.855667][ T8042] syzkaller1: entered promiscuous mode [ 367.864636][ T8042] syzkaller1: entered allmulticast mode [ 369.727117][ T8065] dns_resolver: Unsupported content type (152) [ 373.214851][ T8094] Cannot find set identified by id 0 to match [ 373.681518][ T8099] netlink: 'syz.2.612': attribute type 4 has an invalid length. [ 373.690644][ T8099] netlink: 152 bytes leftover after parsing attributes in process `syz.2.612'. [ 378.044702][ T8136] netlink: 'syz.0.622': attribute type 4 has an invalid length. [ 378.053519][ T8136] netlink: 152 bytes leftover after parsing attributes in process `syz.0.622'. [ 379.096321][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.103582][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.984065][ T8145] syzkaller1: entered promiscuous mode [ 379.997748][ T8145] syzkaller1: entered allmulticast mode [ 381.121287][ T8175] netlink: 'syz.2.631': attribute type 4 has an invalid length. [ 381.134277][ T8175] netlink: 152 bytes leftover after parsing attributes in process `syz.2.631'. [ 386.120334][ T8209] dns_resolver: Unsupported content type (152) [ 392.834028][ T8266] dns_resolver: Unsupported content type (152) [ 401.218651][ T8338] dns_resolver: Unsupported content type (152) [ 407.116645][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 411.024540][ T8397] Cannot find set identified by id 0 to match [ 412.658167][ T5759] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 412.838510][ T5759] usb 3-1: device descriptor read/64, error -71 [ 413.108173][ T5759] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 413.404392][ T5759] usb 3-1: device descriptor read/64, error -71 [ 414.128202][ T5759] usb usb3-port1: attempt power cycle [ 414.348916][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 414.814156][ T5759] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 416.460254][ T5759] usb 3-1: device descriptor read/8, error -71 [ 419.313851][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 419.529506][ T5759] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 421.968279][ T5759] usb 4-1: device descriptor read/64, error -71 [ 422.071371][ T8466] syzkaller1: entered promiscuous mode [ 422.081182][ T8466] syzkaller1: entered allmulticast mode [ 422.702725][ T5759] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 426.201665][ T8501] netlink: 'syz.1.715': attribute type 4 has an invalid length. [ 426.210787][ T8501] netlink: 152 bytes leftover after parsing attributes in process `syz.1.715'. [ 427.528412][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 427.719345][ T8] usb 2-1: device descriptor read/64, error -71 [ 428.145406][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 428.708250][ T8] usb 2-1: device descriptor read/64, error -71 [ 429.078458][ T8] usb usb2-port1: attempt power cycle [ 429.578065][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 429.611435][ T8] usb 2-1: device descriptor read/8, error -71 [ 430.044320][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 431.243126][ T8] usb 2-1: device descriptor read/8, error -71 [ 431.378983][ T8] usb usb2-port1: unable to enumerate USB device [ 431.567069][ T8536] Cannot find set identified by id 0 to match [ 431.984536][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 432.519921][ T8553] dns_resolver: Unsupported content type (152) [ 434.600054][ T8572] dns_resolver: Unsupported content type (152) [ 435.389069][ T8571] Cannot find set identified by id 0 to match [ 436.055976][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 437.069163][ T8593] dns_resolver: Unsupported content type (152) [ 438.383575][ T8605] Cannot find set identified by id 0 to match [ 438.733108][ T8608] dns_resolver: Unsupported content type (152) [ 439.729905][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 440.075780][ T8621] dns_resolver: Unsupported content type (152) [ 440.372980][ T8626] syzkaller1: entered promiscuous mode [ 440.401327][ T8626] syzkaller1: entered allmulticast mode [ 440.524010][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.531189][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.500800][ T8651] Cannot find set identified by id 0 to match [ 442.965828][ T8659] dns_resolver: Unsupported content type (152) [ 443.869607][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 445.369615][ T8669] netlink: 'syz.3.759': attribute type 4 has an invalid length. [ 445.386946][ T8669] netlink: 152 bytes leftover after parsing attributes in process `syz.3.759'. [ 446.177511][ T8673] syzkaller1: entered promiscuous mode [ 446.198659][ T8673] syzkaller1: entered allmulticast mode [ 447.854105][ T8689] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 447.862273][ T8689] netlink: 152 bytes leftover after parsing attributes in process `syz.1.765'. [ 447.918190][ T5816] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 448.118067][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 448.126607][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short [ 448.156141][ T5816] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 448.232606][ T5816] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 448.247405][ T5816] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 448.261150][ T5816] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 448.270002][ T5816] usb 1-1: Manufacturer: syz [ 448.275917][ T5816] usb 1-1: SerialNumber: syz [ 448.538962][ T5816] usb 1-1: USB disconnect, device number 5 [ 449.002793][ T8694] dns_resolver: Unsupported content type (152) [ 450.099395][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 452.735844][ T8706] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 452.743976][ T8706] netlink: 152 bytes leftover after parsing attributes in process `syz.3.769'. [ 453.341535][ T8710] syzkaller1: entered promiscuous mode [ 454.085259][ T8710] syzkaller1: entered allmulticast mode [ 455.088134][ T5818] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 455.298106][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 455.315849][ T5818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 455.362749][ T5818] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 455.410176][ T5818] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 455.446809][ T5818] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 455.467228][ T5818] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 455.482869][ T5818] usb 3-1: Manufacturer: syz [ 455.508090][ T5818] usb 3-1: SerialNumber: syz [ 455.857245][ T5818] usb 3-1: USB disconnect, device number 9 [ 455.916377][ T8732] dns_resolver: Unsupported content type (152) [ 456.962422][ T8738] process 'syz.2.777' launched './file2' with NULL argv: empty string added [ 457.004248][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 457.023257][ T8738] netlink: 68 bytes leftover after parsing attributes in process `syz.2.777'. [ 458.141905][ T8752] netlink: 'syz.3.781': attribute type 4 has an invalid length. [ 458.149807][ T8752] netlink: 152 bytes leftover after parsing attributes in process `syz.3.781'. [ 459.809272][ T8764] syzkaller1: entered promiscuous mode [ 459.828369][ T8764] syzkaller1: entered allmulticast mode [ 461.238373][ T5759] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 461.511008][ T8781] dns_resolver: Unsupported content type (152) [ 462.627419][ T8783] ptrace attach of "./syz-executor exec"[8784] was attempted by "./syz-executor exec"[8783] [ 463.988074][ T5759] usb 4-1: Using ep0 maxpacket: 8 [ 464.168523][ T5759] usb 4-1: unable to get BOS descriptor or descriptor too short [ 464.218250][ T5759] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 464.226680][ T5759] usb 4-1: can't read configurations, error -71 [ 464.423421][ T8793] netlink: 'syz.3.791': attribute type 4 has an invalid length. [ 464.431433][ T8793] netlink: 152 bytes leftover after parsing attributes in process `syz.3.791'. [ 466.312752][ T8805] dns_resolver: Unsupported content type (152) [ 467.785077][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 468.194421][ T8820] netlink: 'syz.0.797': attribute type 4 has an invalid length. [ 468.227974][ T8820] netlink: 152 bytes leftover after parsing attributes in process `syz.0.797'. [ 469.130420][ T8827] dns_resolver: Unsupported content type (152) [ 469.143325][ T5818] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 470.148196][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 470.157625][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 470.167764][ T5818] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 470.183203][ T5818] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 470.196876][ T5818] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 470.211316][ T5818] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 470.221191][ T5818] usb 4-1: Manufacturer: syz [ 470.226180][ T5818] usb 4-1: SerialNumber: syz [ 470.288579][ T5819] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 470.457344][ T5818] usb 4-1: USB disconnect, device number 10 [ 470.498180][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 470.524318][ T5819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 470.573634][ T5819] usb 1-1: config 4 interface 0 has no altsetting 0 [ 470.594066][ T5819] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 470.618014][ T5819] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 470.628795][ T5819] usb 1-1: Manufacturer: syz [ 470.633531][ T5819] usb 1-1: SerialNumber: syz [ 470.900212][ T5819] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 470.988221][ T5819] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 471.001555][ T5819] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 471.009562][ T5819] usb 1-1: media controller created [ 471.270500][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.583134][ T5819] zl10353_read_register: readreg error (reg=127, ret==0) [ 471.759157][ T5819] usb 1-1: USB disconnect, device number 6 [ 472.199601][ T8848] dns_resolver: Unsupported content type (152) [ 473.669291][ T8846] netlink: 'syz.1.804': attribute type 4 has an invalid length. [ 473.752172][ T8846] netlink: 152 bytes leftover after parsing attributes in process `syz.1.804'. [ 474.594059][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 474.670970][ T8864] dns_resolver: Unsupported content type (152) [ 476.121985][ T8873] netlink: 'syz.3.811': attribute type 4 has an invalid length. [ 476.130600][ T8873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.811'. [ 476.859032][ T5816] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 477.204589][ T8883] dns_resolver: Unsupported content type (152) [ 477.248308][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 477.339463][ T5816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 477.380659][ T5816] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 477.425520][ T5816] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 477.516603][ T5816] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 477.680826][ T5816] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 479.074480][ T5816] usb 3-1: Manufacturer: syz [ 479.105026][ T5816] usb 3-1: SerialNumber: syz [ 479.405666][ T5816] usb 3-1: USB disconnect, device number 10 [ 479.510333][ T8893] dns_resolver: Unsupported content type (152) [ 480.799548][ T8890] netlink: 'syz.0.816': attribute type 4 has an invalid length. [ 480.807585][ T8890] netlink: 152 bytes leftover after parsing attributes in process `syz.0.816'. [ 481.169592][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 481.535324][ T8906] netlink: 'syz.1.821': attribute type 4 has an invalid length. [ 481.543886][ T8906] netlink: 152 bytes leftover after parsing attributes in process `syz.1.821'. [ 483.284737][ T8916] syzkaller1: entered promiscuous mode [ 483.291853][ T8916] syzkaller1: entered allmulticast mode [ 483.377458][ T8924] dns_resolver: Unsupported content type (152) [ 484.332089][ T8928] netlink: 'syz.0.828': attribute type 4 has an invalid length. [ 484.340292][ T8928] netlink: 152 bytes leftover after parsing attributes in process `syz.0.828'. [ 484.428483][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 484.517161][ T8935] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 484.533509][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 484.762486][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 484.772841][ T8935] Cannot find add_set index 0 as target [ 484.793051][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 484.824005][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 484.846492][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 484.858449][ T9] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 484.868148][ T9] usb 4-1: Manufacturer: syz [ 484.875194][ T9] usb 4-1: SerialNumber: syz [ 484.968653][ T8935] tmpfs: Bad value for 'mpol' [ 485.287546][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 485.324967][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 485.342333][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 485.527442][ T8943] netlink: 72 bytes leftover after parsing attributes in process `syz.2.832'. [ 485.975261][ T9] usb 4-1: media controller created [ 486.034105][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.150837][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 486.344994][ T9] usb 4-1: USB disconnect, device number 11 [ 486.835221][ T8954] netlink: 88 bytes leftover after parsing attributes in process `syz.3.835'. [ 486.919932][ T8960] dns_resolver: Unsupported content type (152) [ 488.986885][ T8961] input: syz1 as /devices/virtual/input/input5 [ 489.519894][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 490.168260][ T5837] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 490.348071][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 490.356161][ T5837] usb 1-1: unable to get BOS descriptor or descriptor too short [ 490.383599][ T5837] usb 1-1: config 4 interface 0 has no altsetting 0 [ 490.406432][ T5837] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 490.435890][ T5837] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 490.472901][ T5837] usb 1-1: Manufacturer: syz [ 490.494158][ T5837] usb 1-1: SerialNumber: syz [ 490.746350][ T5837] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 490.811214][ T5837] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 490.824253][ T5837] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 490.832070][ T5837] usb 1-1: media controller created [ 490.880138][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.931900][ T5837] zl10353_read_register: readreg error (reg=127, ret==0) [ 491.187729][ T5837] usb 1-1: USB disconnect, device number 7 [ 491.870796][ T8999] dns_resolver: Unsupported content type (152) [ 492.377240][ T9004] netlink: 'syz.2.849': attribute type 4 has an invalid length. [ 492.818224][ T9004] netlink: 152 bytes leftover after parsing attributes in process `syz.2.849'. [ 493.051658][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 493.066354][ T9012] Cannot find set identified by id 0 to match [ 496.105787][ T9034] gfs2: gfs2 mount does not exist [ 496.851225][ T1187] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 496.915731][ T9043] netlink: 'syz.3.861': attribute type 4 has an invalid length. [ 496.935203][ T9043] netlink: 152 bytes leftover after parsing attributes in process `syz.3.861'. [ 497.048071][ T1187] usb 2-1: Using ep0 maxpacket: 8 [ 497.260258][ T1187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 497.312236][ T1187] usb 2-1: config 4 interface 0 has no altsetting 0 [ 497.408730][ T1187] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 497.438639][ T1187] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 497.446902][ T1187] usb 2-1: Manufacturer: syz [ 497.488030][ T1187] usb 2-1: SerialNumber: syz [ 497.833285][ T1187] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 497.869016][ T1187] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 498.627870][ T1187] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 498.635233][ T1187] usb 2-1: media controller created [ 498.751238][ T1187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.881792][ T9054] dns_resolver: Unsupported content type (152) [ 499.089096][ T1187] zl10353_read_register: readreg error (reg=127, ret==0) [ 499.918029][ T1187] usb 2-1: USB disconnect, device number 10 [ 500.408087][ T5834] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 501.160301][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.306438][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.375924][ T5834] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 501.429799][ T5834] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 501.479143][ T5834] usb 1-1: Manufacturer: syz [ 501.556531][ T5834] usb 1-1: config 0 descriptor?? [ 501.963004][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.969698][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.123515][ T9080] netlink: 'syz.3.870': attribute type 4 has an invalid length. [ 502.131837][ T9080] netlink: 152 bytes leftover after parsing attributes in process `syz.3.870'. [ 502.285255][ T5834] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 502.327396][ T5834] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 502.395737][ T5834] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 502.425638][ T5834] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 502.572851][ T5834] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 502.640819][ T5834] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 502.757873][ T5834] usb 1-1: USB disconnect, device number 8 [ 502.878082][ T5837] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 503.022447][ T9089] fido_id[9089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 503.068395][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 503.094674][ T5837] usb 4-1: unable to get BOS descriptor or descriptor too short [ 503.114274][ T5837] usb 4-1: config 4 interface 0 has no altsetting 0 [ 503.138688][ T5837] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 503.154223][ T5837] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 503.172014][ T5837] usb 4-1: Manufacturer: syz [ 503.181132][ T5837] usb 4-1: SerialNumber: syz [ 503.282855][ T9096] Cannot find set identified by id 0 to match [ 504.958422][ T5837] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 504.985264][ T5837] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 505.018382][ T5837] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 505.077693][ T9108] dns_resolver: Unsupported content type (152) [ 505.092511][ T5837] usb 4-1: media controller created [ 505.219894][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.554421][ T5837] zl10353_read_register: readreg error (reg=127, ret==0) [ 505.867600][ T5837] usb 4-1: USB disconnect, device number 12 [ 510.272010][ T9148] dns_resolver: Unsupported content type (152) [ 512.647404][ T5834] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 512.928321][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 512.942866][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 512.952517][ T5834] usb 3-1: config 4 interface 0 has no altsetting 0 [ 513.048907][ T5834] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 513.059034][ T5834] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 513.067531][ T5834] usb 3-1: Manufacturer: syz [ 513.073607][ T5834] usb 3-1: SerialNumber: syz [ 513.329619][ T9167] Cannot find set identified by id 0 to match [ 513.431846][ T5834] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 513.789397][ T5834] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 513.844755][ T5834] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 513.877381][ T5834] usb 3-1: media controller created [ 513.937600][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.043694][ T5834] zl10353_read_register: readreg error (reg=127, ret==0) [ 514.289837][ T5834] usb 3-1: USB disconnect, device number 11 [ 516.331483][ T9193] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 516.356063][ T9193] cramfs: wrong magic [ 519.118310][ T5834] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 519.121112][ T9212] netlink: 'syz.2.904': attribute type 4 has an invalid length. [ 519.134597][ T9212] netlink: 152 bytes leftover after parsing attributes in process `syz.2.904'. [ 519.308184][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 519.333551][ T5834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 519.349470][ T5834] usb 1-1: config 4 interface 0 has no altsetting 0 [ 519.362580][ T5834] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 519.372752][ T5834] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 519.404214][ T5834] usb 1-1: Manufacturer: syz [ 519.426953][ T5834] usb 1-1: SerialNumber: syz [ 519.760514][ T5834] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 519.785139][ T5834] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 519.797367][ T5834] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 519.812126][ T5834] usb 1-1: media controller created [ 519.845282][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.879239][ T5834] zl10353_read_register: readreg error (reg=127, ret==0) [ 520.419502][ T5834] usb 1-1: USB disconnect, device number 9 [ 521.472709][ T9230] Cannot find add_set index 0 as target [ 523.892447][ T9256] netlink: 'syz.2.914': attribute type 4 has an invalid length. [ 523.904133][ T9256] netlink: 152 bytes leftover after parsing attributes in process `syz.2.914'. [ 524.469369][ T9259] Cannot find set identified by id 0 to match [ 525.403556][ T9264] dns_resolver: Unsupported content type (152) [ 528.203070][ T9273] netlink: 'syz.2.918': attribute type 4 has an invalid length. [ 528.211474][ T9273] netlink: 152 bytes leftover after parsing attributes in process `syz.2.918'. [ 529.604766][ T9291] Cannot find add_set index 0 as target [ 529.989827][ T9294] netlink: 'syz.0.924': attribute type 4 has an invalid length. [ 529.998498][ T9294] netlink: 152 bytes leftover after parsing attributes in process `syz.0.924'. [ 530.859161][ T9299] dns_resolver: Unsupported content type (152) [ 531.988214][ T9159] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 532.278343][ T9159] usb 3-1: Using ep0 maxpacket: 8 [ 532.478599][ T9159] usb 3-1: unable to get BOS descriptor or descriptor too short [ 532.504340][ T9159] usb 3-1: config 4 interface 0 has no altsetting 0 [ 532.526398][ T9159] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 532.536804][ T9159] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 532.560543][ T9159] usb 3-1: Manufacturer: syz [ 532.600410][ T9159] usb 3-1: SerialNumber: syz [ 533.611092][ T9159] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 533.631387][ T9159] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 533.642686][ T9159] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 533.650934][ T9159] usb 3-1: media controller created [ 533.680361][ T9159] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.702283][ T9159] zl10353_read_register: readreg error (reg=127, ret==0) [ 533.763510][ T9159] usb 3-1: USB disconnect, device number 12 [ 534.792259][ T9320] Cannot find set identified by id 0 to match [ 535.008734][ T9322] Cannot find add_set index 0 as target [ 537.498380][ T9335] dns_resolver: Unsupported content type (152) [ 541.232982][ T9360] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 541.241066][ T9360] cramfs: wrong magic [ 542.524145][ T5819] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 542.748073][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 542.773143][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 542.790035][ T5819] usb 2-1: config 4 interface 0 has no altsetting 0 [ 542.827645][ T5819] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 542.878093][ T5819] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 542.886815][ T5819] usb 2-1: Manufacturer: syz [ 542.897060][ T5819] usb 2-1: SerialNumber: syz [ 543.602035][ T5819] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 543.659369][ T5819] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 543.677542][ T5819] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 543.710896][ T5819] usb 2-1: media controller created [ 544.835363][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.095807][ T9377] input: syz1 as /devices/virtual/input/input6 [ 545.420423][ T5819] zl10353_read_register: readreg error (reg=127, ret==0) [ 545.727864][ T9384] Cannot find set identified by id 0 to match [ 545.815422][ T5819] usb 2-1: USB disconnect, device number 11 [ 546.810018][ T9396] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 546.817795][ T9396] cramfs: wrong magic [ 548.698684][ T5818] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 548.729652][ T9159] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 548.889795][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 548.889860][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 548.932559][ T9159] usb 2-1: Using ep0 maxpacket: 8 [ 548.999457][ T9159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.010788][ T9159] usb 2-1: config 0 has no interfaces? [ 549.036288][ T9159] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 549.050135][ T9159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.065140][ T9159] usb 2-1: Product: syz [ 549.073935][ T9159] usb 2-1: Manufacturer: syz [ 549.082925][ T9159] usb 2-1: SerialNumber: syz [ 549.116150][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 549.139199][ T5818] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 549.148140][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 549.172887][ T5818] usb 4-1: can't read configurations, error -71 [ 549.191227][ T9159] usb 2-1: config 0 descriptor?? [ 549.200290][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 549.226980][ T27] usb 3-1: config 4 interface 0 has no altsetting 0 [ 549.255884][ T27] usb 3-1: string descriptor 0 read error: -22 [ 549.290772][ T27] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 549.343671][ T27] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 549.430938][ T27] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 549.468602][ T27] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 549.482419][ T27] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 549.518362][ T27] usb 3-1: media controller created [ 549.575691][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.585288][ T5816] usb 2-1: USB disconnect, device number 12 [ 549.945899][ T27] usb 3-1: USB disconnect, device number 13 [ 550.032213][ T9424] dns_resolver: Unsupported content type (152) [ 552.300352][ T9422] netlink: 'syz.3.960': attribute type 4 has an invalid length. [ 552.309611][ T9422] netlink: 152 bytes leftover after parsing attributes in process `syz.3.960'. [ 553.289075][ T9441] Cannot find set identified by id 0 to match [ 554.974175][ T9453] dns_resolver: Unsupported content type (152) [ 556.619949][ T9448] syzkaller1: entered promiscuous mode [ 556.637485][ T9448] syzkaller1: entered allmulticast mode [ 557.787199][ T5816] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 557.802231][ T9465] netlink: 'syz.2.972': attribute type 4 has an invalid length. [ 557.812983][ T9465] netlink: 152 bytes leftover after parsing attributes in process `syz.2.972'. [ 558.148552][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 558.156904][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.179953][ T5816] usb 1-1: config 4 interface 0 has no altsetting 0 [ 558.194404][ T9468] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 558.202851][ T9468] cramfs: wrong magic [ 558.221958][ T5816] usb 1-1: string descriptor 0 read error: -22 [ 558.235201][ T5816] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 558.246291][ T5816] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 558.279267][ T5816] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 558.312250][ T5816] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 558.324275][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 558.336581][ T5816] usb 1-1: media controller created [ 558.385936][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.736242][ T5816] usb 1-1: USB disconnect, device number 10 [ 560.061790][ T9488] dns_resolver: Unsupported content type (152) [ 562.583979][ T9503] Cannot find set identified by id 0 to match [ 562.661626][ T9498] netlink: 'syz.0.983': attribute type 4 has an invalid length. [ 562.669680][ T9498] netlink: 152 bytes leftover after parsing attributes in process `syz.0.983'. [ 563.884278][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.905916][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.728682][ T9520] Cannot find add_set index 0 as target [ 565.638686][ T9526] dns_resolver: Unsupported content type (152) [ 566.614180][ T5816] kernel read not supported for file /swradio5 (pid: 5816 comm: kworker/0:3) [ 570.525225][ T9548] syzkaller1: entered promiscuous mode [ 570.608843][ T9558] Cannot find set identified by id 0 to match [ 570.618768][ T9548] syzkaller1: entered allmulticast mode [ 571.918380][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 572.019601][ T9570] dns_resolver: Unsupported content type (152) [ 572.888446][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 573.003376][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 573.083762][ T9] usb 2-1: config 4 interface 0 has no altsetting 0 [ 573.216028][ T9] usb 2-1: string descriptor 0 read error: -22 [ 573.331237][ T9] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 573.341819][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 573.411017][ T9] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 573.472480][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 573.484413][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 573.496240][ T9] usb 2-1: media controller created [ 573.583435][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 575.133678][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 575.706587][ T9] usb 2-1: USB disconnect, device number 13 [ 576.639414][ T9606] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 576.647094][ T9606] cramfs: wrong magic [ 577.942756][ T9614] Cannot find set identified by id 0 to match [ 580.248442][ T5819] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 580.558639][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 580.566125][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 580.612797][ T5819] usb 2-1: config 4 interface 0 has no altsetting 0 [ 580.624858][ T5819] usb 2-1: string descriptor 0 read error: -22 [ 580.634385][ T5819] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 580.657670][ T5819] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 581.106503][ T5819] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 581.209536][ T5819] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 581.258481][ T5819] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 581.266016][ T5819] usb 2-1: media controller created [ 581.380017][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.423131][ T9635] syzkaller1: entered promiscuous mode [ 581.440594][ T9635] syzkaller1: entered allmulticast mode [ 581.660444][ T5819] usb 2-1: USB disconnect, device number 14 [ 581.772456][ T9641] dns_resolver: Unsupported content type (152) [ 582.290534][ T9643] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 582.298303][ T9643] cramfs: wrong magic [ 585.548756][ T9674] dns_resolver: Unsupported content type (152) [ 586.661612][ T9684] dns_resolver: Unsupported content type (152) [ 589.391893][ T9698] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 589.405596][ T9698] cramfs: wrong magic [ 590.738374][ T9714] dns_resolver: Unsupported content type (152) [ 592.671181][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 594.815127][ T5819] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 595.117988][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 595.267511][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.425394][ T5819] usb 4-1: config 4 interface 0 has no altsetting 0 [ 595.534572][ T5819] usb 4-1: string descriptor 0 read error: -22 [ 595.548260][ T5819] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 595.565730][ T5819] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 595.615665][ T5819] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 595.664965][ T5819] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 595.699620][ T5819] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 595.710293][ T5819] usb 4-1: media controller created [ 595.902448][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 595.988142][ T9750] dns_resolver: Unsupported content type (152) [ 596.019121][ T5819] zl10353_read_register: readreg error (reg=127, ret==0) [ 597.023194][ T5819] usb 4-1: USB disconnect, device number 15 [ 600.058301][ T9773] dns_resolver: Unsupported content type (152) [ 600.824353][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 603.557062][ T9795] dns_resolver: Unsupported content type (152) [ 605.738827][ T9804] syzkaller1: entered promiscuous mode [ 605.744912][ T9804] syzkaller1: entered allmulticast mode [ 606.262562][ T9819] dns_resolver: Unsupported content type (152) [ 606.668321][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 607.503560][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 608.853391][ T9832] dns_resolver: Unsupported content type (152) [ 611.506530][ T9857] dns_resolver: Unsupported content type (152) [ 613.965190][ T9866] syzkaller1: entered promiscuous mode [ 614.002750][ T9866] syzkaller1: entered allmulticast mode [ 614.657647][ T9875] netlink: 'syz.0.1083': attribute type 4 has an invalid length. [ 614.665889][ T9875] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1083'. [ 617.710262][ T9904] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 617.717132][ T9904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 617.725308][ T9904] vhci_hcd vhci_hcd.0: Device attached [ 617.888062][ T2131] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 618.948126][ T9905] vhci_hcd: connection closed [ 618.956048][ T1135] vhci_hcd: stop threads [ 618.994930][ T1135] vhci_hcd: release socket [ 619.018018][ T1135] vhci_hcd: disconnect device [ 619.138136][ T2131] usb 3-1: Using ep0 maxpacket: 8 [ 619.147278][ T2131] usb 3-1: unable to get BOS descriptor or descriptor too short [ 619.166668][ T2131] usb 3-1: config 4 interface 0 has no altsetting 0 [ 619.184636][ T2131] usb 3-1: string descriptor 0 read error: -22 [ 619.194718][ T2131] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 619.206520][ T2131] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 619.251907][ T2131] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 619.283881][ T2131] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 620.119614][ T2131] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 620.126862][ T2131] usb 3-1: media controller created [ 620.164091][ T2131] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.234772][ T2131] usb 3-1: USB disconnect, device number 14 [ 621.641524][ T9941] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 621.648320][ T9941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 621.656664][ T9941] vhci_hcd vhci_hcd.0: Device attached [ 622.337448][ T9942] vhci_hcd: connection closed [ 622.544151][ T4441] vhci_hcd: stop threads [ 622.608000][ T9] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 622.915356][ T4441] vhci_hcd: release socket [ 622.950271][ T4441] vhci_hcd: disconnect device [ 623.040663][ T5774] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 624.850553][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.857651][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.953752][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 627.888339][ T9988] ptrace attach of "./syz-executor exec"[9989] was attempted by "./syz-executor exec"[9988] [ 629.259132][ T9] vhci_hcd: vhci_device speed not set [ 629.602917][ T9987] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 629.609629][ T9987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.618109][ T9987] vhci_hcd vhci_hcd.0: Device attached [ 629.651128][ T9994] vhci_hcd: connection closed [ 629.667015][ T77] vhci_hcd: stop threads [ 629.743570][ T77] vhci_hcd: release socket [ 629.811069][ T77] vhci_hcd: disconnect device [ 633.064631][T10022] dns_resolver: Unsupported content type (152) [ 635.699294][T10054] Zero length message leads to an empty skb [ 636.233416][T10065] dns_resolver: Unsupported content type (152) [ 641.266530][T10100] dns_resolver: Unsupported content type (152) [ 642.703079][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 646.642146][T10135] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1151'. [ 647.738018][T10146] dns_resolver: Unsupported content type (152) [ 650.039749][T10151] syzkaller1: entered promiscuous mode [ 650.071614][T10151] syzkaller1: entered allmulticast mode [ 654.290786][T10174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 654.297577][T10174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 654.305616][T10174] vhci_hcd vhci_hcd.0: Device attached [ 654.830545][T10176] vhci_hcd: connection closed [ 654.841236][T10023] vhci_hcd: stop threads [ 654.928442][T10023] vhci_hcd: release socket [ 654.933146][T10023] vhci_hcd: disconnect device [ 655.437292][T10183] netlink: 'syz.3.1163': attribute type 4 has an invalid length. [ 655.452800][T10183] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1163'. [ 656.559516][T10191] dns_resolver: Unsupported content type (152) [ 657.997972][ T5816] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 658.879065][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 658.890398][ T5816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 658.909373][ T5816] usb 2-1: config 4 interface 0 has no altsetting 0 [ 658.931591][ T5816] usb 2-1: string descriptor 0 read error: -22 [ 658.942194][ T5816] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 658.967275][ T5816] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 659.005100][ T5816] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 659.031464][ T5816] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 659.068542][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 659.099227][ T5816] usb 2-1: media controller created [ 659.180473][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.309339][T10221] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 659.316302][T10221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 659.324587][T10221] vhci_hcd vhci_hcd.0: Device attached [ 659.628504][ T1187] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 660.069388][T10222] vhci_hcd: connection reset by peer [ 660.173073][ T4450] vhci_hcd: stop threads [ 660.241395][ T4450] vhci_hcd: release socket [ 660.325704][ T4450] vhci_hcd: disconnect device [ 660.687687][ T5816] usb 2-1: USB disconnect, device number 15 [ 661.118834][T10231] dns_resolver: Unsupported content type (152) [ 661.869393][ T9952] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 663.770464][T10250] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 663.777076][T10250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 663.822217][T10250] vhci_hcd vhci_hcd.0: Device attached [ 665.576803][T10251] vhci_hcd: connection closed [ 665.712591][ T3434] vhci_hcd: stop threads [ 665.751279][ T3434] vhci_hcd: release socket [ 665.755915][ T3434] vhci_hcd: disconnect device [ 665.768017][ T1187] vhci_hcd: vhci_device speed not set [ 665.859705][T10258] netlink: 'syz.3.1181': attribute type 4 has an invalid length. [ 665.908226][T10258] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1181'. [ 666.326712][T10266] dns_resolver: Unsupported content type (152) [ 667.147402][ T5787] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 669.943411][T10292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 669.950184][T10292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 669.958513][T10292] vhci_hcd vhci_hcd.0: Device attached [ 670.238096][ T9] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 670.681603][T10293] vhci_hcd: connection reset by peer [ 671.239336][ T4450] vhci_hcd: stop threads [ 671.243650][ T4450] vhci_hcd: release socket [ 671.293348][ T4450] vhci_hcd: disconnect device [ 671.588945][T10302] dns_resolver: Unsupported content type (152) [ 673.825192][ T9952] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 675.618027][ T9] vhci_hcd: vhci_device speed not set [ 678.475680][T10338] dns_resolver: Unsupported content type (152) [ 679.229692][ T9952] Bluetooth: hci3: command 0x0406 tx timeout [ 679.275587][ T9952] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 680.126855][T10346] dns_resolver: Unsupported content type (152) [ 681.137797][T10360] netlink: 'syz.1.1211': attribute type 4 has an invalid length. [ 681.147920][T10360] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1211'. [ 682.200050][T10372] dns_resolver: Unsupported content type (152) [ 683.087935][ T9952] Bluetooth: hci3: command 0x0406 tx timeout [ 683.129230][T10374] dns_resolver: Unsupported content type (152) [ 686.283109][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.289797][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.779544][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 688.414880][ T9952] Bluetooth: hci3: command 0x0406 tx timeout [ 688.601582][T10413] dns_resolver: Unsupported content type (152) [ 689.408146][T10415] dns_resolver: Unsupported content type (152) [ 692.741731][T10435] fuse: Bad value for 'fd' [ 695.555262][T10454] dns_resolver: Unsupported content type (152) [ 696.612004][T10457] dns_resolver: Unsupported content type (152) [ 696.658348][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 699.352774][ T9952] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 701.853106][T10486] dns_resolver: Unsupported content type (152) [ 705.939679][T10508] dns_resolver: Unsupported content type (152) [ 705.960851][T10502] fuse: Bad value for 'fd' [ 706.842476][T10510] netlink: 'syz.2.1254': attribute type 4 has an invalid length. [ 706.850511][T10510] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1254'. [ 707.769395][T10519] dns_resolver: Unsupported content type (152) [ 711.053438][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 712.321139][T10543] fuse: Bad value for 'fd' [ 713.002842][T10547] dns_resolver: Unsupported content type (152) [ 714.210079][T10553] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 714.218307][T10553] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1266'. [ 715.034974][T10559] dns_resolver: Unsupported content type (152) [ 716.262616][T10568] dns_resolver: Unsupported content type (152) [ 717.069937][ T9952] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 718.101444][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 718.138265][T10578] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 718.144937][T10578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 718.488181][T10580] vhci_hcd: connection closed [ 718.588293][T10585] dns_resolver: Unsupported content type (152) [ 719.296979][T10578] vhci_hcd vhci_hcd.0: Device attached [ 719.320345][ T4359] vhci_hcd: stop threads [ 719.324773][ T4359] vhci_hcd: release socket [ 719.457982][ T4359] vhci_hcd: disconnect device [ 719.498108][ T27] vhci_hcd: vhci_device speed not set [ 721.298215][T10597] dns_resolver: Unsupported content type (152) [ 723.208121][T10605] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 723.216263][T10605] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1278'. [ 723.568247][ T9952] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 726.183067][T10624] dns_resolver: Unsupported content type (152) [ 727.780617][T10635] dns_resolver: Unsupported content type (152) [ 729.911385][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 733.643569][T10671] dns_resolver: Unsupported content type (152) [ 735.914170][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 738.938143][T10696] dns_resolver: Unsupported content type (152) [ 740.684712][T10710] dns_resolver: Unsupported content type (152) [ 742.529571][T10718] netlink: 'syz.3.1309': attribute type 4 has an invalid length. [ 742.538083][T10718] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1309'. [ 742.732436][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 744.967403][T10727] Cannot find set identified by id 0 to match [ 745.501532][T10731] dns_resolver: Unsupported content type (152) [ 747.129529][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 747.933429][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.940648][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.224576][T10758] netlink: 'syz.3.1321': attribute type 4 has an invalid length. [ 748.232940][T10758] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1321'. [ 751.038342][T10773] dns_resolver: Unsupported content type (152) [ 751.971602][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 753.515157][T10786] netlink: 'syz.3.1331': attribute type 4 has an invalid length. [ 753.523822][T10786] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1331'. [ 757.366328][T10814] dns_resolver: Unsupported content type (152) [ 758.999266][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1339'. [ 761.626220][T10834] netlink: 'syz.3.1342': attribute type 4 has an invalid length. [ 761.634679][T10834] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1342'. [ 762.759680][T10851] dns_resolver: Unsupported content type (152) [ 763.739056][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 766.239026][T10874] netlink: 'syz.0.1353': attribute type 4 has an invalid length. [ 766.248275][T10874] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1353'. [ 767.876324][T10894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1358'. [ 768.545255][T10895] dns_resolver: Unsupported content type (152) [ 769.392348][T10902] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1359'. [ 770.090872][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 771.036165][T10911] ptrace attach of "./syz-executor exec"[10912] was attempted by "./syz-executor exec"[10911] [ 772.262055][T10916] fuse: Bad value for 'group_id' [ 773.270190][T10923] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1367'. [ 773.717584][T10917] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 773.728306][T10917] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1366'. [ 775.389721][T10942] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1372'. [ 776.575710][T10943] ptrace attach of "./syz-executor exec"[10944] was attempted by "./syz-executor exec"[10943] [ 778.190536][T10950] fuse: Bad value for 'group_id' [ 778.732783][T10959] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1377'. [ 779.885238][T10960] netlink: 'syz.2.1378': attribute type 4 has an invalid length. [ 779.898175][T10960] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1378'. [ 780.290919][T10967] Cannot find add_set index 0 as target [ 780.368509][T10969] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 780.375451][T10969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 780.383368][T10969] vhci_hcd vhci_hcd.0: Device attached [ 780.393871][T10972] vhci_hcd: connection closed [ 780.395083][ T41] vhci_hcd: stop threads [ 780.455266][ T41] vhci_hcd: release socket [ 780.513214][ T41] vhci_hcd: disconnect device [ 780.589489][ T5759] vhci_hcd: vhci_device speed not set [ 783.545456][T11001] netlink: 'syz.3.1388': attribute type 4 has an invalid length. [ 783.553535][T11001] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1388'. [ 785.100240][T11013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 785.106819][T11013] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 785.115953][T11013] vhci_hcd vhci_hcd.0: Device attached [ 785.139895][T11014] vhci_hcd: connection closed [ 785.140193][ T41] vhci_hcd: stop threads [ 785.202806][ T41] vhci_hcd: release socket [ 785.221767][ T41] vhci_hcd: disconnect device [ 786.372825][T11030] netlink: 'syz.2.1398': attribute type 4 has an invalid length. [ 786.387589][T11030] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1398'. [ 786.962534][T11037] Cannot find add_set index 0 as target [ 789.423533][T11056] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 789.430212][T11056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 789.438359][T11056] vhci_hcd vhci_hcd.0: Device attached [ 789.448498][T11059] vhci_hcd: connection closed [ 789.448743][ T41] vhci_hcd: stop threads [ 789.460062][ T41] vhci_hcd: release socket [ 789.464692][ T41] vhci_hcd: disconnect device [ 789.756737][T11066] Cannot find add_set index 0 as target [ 789.803146][T11066] tmpfs: Bad value for 'mpol' [ 791.312244][T11077] dns_resolver: Unsupported content type (152) [ 793.039639][T11094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 793.046217][T11094] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 793.053876][T11094] vhci_hcd vhci_hcd.0: Device attached [ 793.083441][T11097] vhci_hcd: connection closed [ 793.084700][ T4441] vhci_hcd: stop threads [ 793.094833][ T4441] vhci_hcd: release socket [ 793.102283][ T4441] vhci_hcd: disconnect device [ 794.225941][T11106] dns_resolver: Unsupported content type (152) [ 796.135549][T11131] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 796.142217][T11131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 796.150249][T11131] vhci_hcd vhci_hcd.0: Device attached [ 796.159757][T11133] vhci_hcd: connection closed [ 796.160190][ T4441] vhci_hcd: stop threads [ 796.179973][ T4441] vhci_hcd: release socket [ 796.188376][ T4441] vhci_hcd: disconnect device [ 796.347538][T11132] dns_resolver: Unsupported content type (152) [ 796.638952][T11140] Cannot find set identified by id 0 to match [ 799.493315][T11158] dns_resolver: Unsupported content type (152) [ 799.888847][T11166] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 799.896133][T11166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 799.904536][T11166] vhci_hcd vhci_hcd.0: Device attached [ 800.040116][T11167] vhci_hcd: connection closed [ 800.065869][ T41] vhci_hcd: stop threads [ 800.085857][ T41] vhci_hcd: release socket [ 800.091763][ T41] vhci_hcd: disconnect device [ 800.108017][ T5816] vhci_hcd: vhci_device speed not set [ 801.988795][T11188] dns_resolver: Unsupported content type (152) [ 804.829640][T11210] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 804.836744][T11210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 804.844805][T11210] vhci_hcd vhci_hcd.0: Device attached [ 804.855250][T11213] vhci_hcd: connection closed [ 804.867948][ T4359] vhci_hcd: stop threads [ 804.877434][ T4359] vhci_hcd: release socket [ 804.896744][ T4359] vhci_hcd: disconnect device [ 805.127988][T11221] netlink: 'syz.2.1461': attribute type 4 has an invalid length. [ 805.136043][T11221] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1461'. [ 806.510156][T11226] dns_resolver: Unsupported content type (152) [ 809.162702][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.169362][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.450257][T11250] Cannot find add_set index 0 as target [ 809.665194][T11254] netlink: 'syz.0.1471': attribute type 4 has an invalid length. [ 809.673295][T11254] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1471'. [ 809.740051][T11257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1470'. [ 810.440548][T11250] tmpfs: Bad value for 'mpol' [ 810.862482][T11261] dns_resolver: Unsupported content type (152) [ 810.893417][T11265] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 810.899999][T11265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.908008][T11265] vhci_hcd vhci_hcd.0: Device attached [ 811.085140][T11269] vhci_hcd: connection closed [ 811.087723][T10023] vhci_hcd: stop threads [ 811.127982][T10023] vhci_hcd: release socket [ 811.134545][T10023] vhci_hcd: disconnect device [ 811.188053][ T5834] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 811.196696][ T5834] usb 39-1: enqueue for inactive port 0 [ 811.499596][ T5834] vhci_hcd: vhci_device speed not set [ 813.211313][T11288] netlink: 'syz.0.1481': attribute type 4 has an invalid length. [ 813.219400][T11288] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1481'. [ 813.299039][T11289] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1480'. [ 814.603822][T11294] dns_resolver: Unsupported content type (152) [ 815.139035][T11300] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 815.146157][T11300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 815.154094][T11300] vhci_hcd vhci_hcd.0: Device attached [ 815.167478][T11304] vhci_hcd: connection closed [ 815.168507][ T41] vhci_hcd: stop threads [ 815.215252][ T41] vhci_hcd: release socket [ 815.728041][ T41] vhci_hcd: disconnect device [ 815.788594][ T5816] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 815.799581][ T5816] usb 37-1: enqueue for inactive port 0 [ 815.898000][ T5816] vhci_hcd: vhci_device speed not set [ 817.580246][T11323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1490'. [ 818.884714][T11330] ptrace attach of "./syz-executor exec"[11331] was attempted by "./syz-executor exec"[11330] [ 820.075364][T11332] netlink: 'syz.2.1491': attribute type 4 has an invalid length. [ 820.137987][T11332] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1491'. [ 820.657914][T11335] dns_resolver: Unsupported content type (152) [ 822.077456][T11347] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 822.084222][T11347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 822.091987][T11347] vhci_hcd vhci_hcd.0: Device attached [ 822.102145][T11352] vhci_hcd: connection closed [ 822.109378][ T4359] vhci_hcd: stop threads [ 822.118903][ T4359] vhci_hcd: release socket [ 822.124262][ T4359] vhci_hcd: disconnect device [ 822.957089][T11357] input: syz1 as /devices/virtual/input/input8 [ 823.672396][T11362] fuse: Unknown parameter 'group_i00000000000000000000' [ 824.329111][T11373] netlink: 'syz.2.1505': attribute type 4 has an invalid length. [ 824.382707][T11373] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1505'. [ 825.380278][T11377] Cannot find add_set index 0 as target [ 827.753389][T11400] fuse: Unknown parameter 'group_i00000000000000000000' [ 828.704367][T11403] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 828.711020][T11403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 828.719189][T11403] vhci_hcd vhci_hcd.0: Device attached [ 828.730768][T11408] vhci_hcd: connection closed [ 828.731287][ T4359] vhci_hcd: stop threads [ 828.766707][ T4359] vhci_hcd: release socket [ 828.783655][ T4359] vhci_hcd: disconnect device [ 828.815461][T11411] Cannot find add_set index 0 as target [ 828.859519][T11411] tmpfs: Bad value for 'mpol' [ 829.484641][T11417] netlink: 'syz.1.1517': attribute type 4 has an invalid length. [ 829.702545][T11417] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1517'. [ 830.114001][T11424] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1519'. [ 831.752886][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 832.733223][T11438] fuse: Unknown parameter 'group_id00000000000000000000' [ 832.936847][T11444] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 832.943614][T11444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 832.951374][T11444] vhci_hcd vhci_hcd.0: Device attached [ 832.968516][T11446] vhci_hcd: connection closed [ 832.981765][T10023] vhci_hcd: stop threads [ 833.008154][T10023] vhci_hcd: release socket [ 833.016004][T10023] vhci_hcd: disconnect device [ 833.024547][T11448] Cannot find add_set index 0 as target [ 833.241145][T11453] netlink: 'syz.1.1528': attribute type 4 has an invalid length. [ 833.261055][T11453] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1528'. [ 837.611964][T11472] fuse: Unknown parameter 'group_id00000000000000000000' [ 838.200497][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'. [ 838.284153][T11483] netlink: 'syz.0.1539': attribute type 4 has an invalid length. [ 838.292619][T11483] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1539'. [ 839.040371][T11486] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 839.046973][T11486] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 839.055049][T11486] vhci_hcd vhci_hcd.0: Device attached [ 839.065982][T11491] vhci_hcd: connection closed [ 839.072767][ T41] vhci_hcd: stop threads [ 839.123006][ T41] vhci_hcd: release socket [ 839.127495][ T41] vhci_hcd: disconnect device [ 842.567725][T11512] fuse: Unknown parameter 'group_id00000000000000000000' [ 843.865142][T11525] netlink: 'syz.3.1548': attribute type 4 has an invalid length. [ 843.873065][T11525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1548'. [ 843.919028][T11530] input: syz1 as /devices/virtual/input/input9 [ 843.978295][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 844.025116][T11531] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 844.031997][T11531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 844.039847][T11531] vhci_hcd vhci_hcd.0: Device attached [ 844.050271][T11532] vhci_hcd: connection closed [ 844.055209][ T4441] vhci_hcd: stop threads [ 844.070012][ T4441] vhci_hcd: release socket [ 844.074683][ T4441] vhci_hcd: disconnect device [ 844.855231][T11543] fuse: Bad value for 'user_id' [ 847.923579][T11565] netlink: 'syz.3.1560': attribute type 4 has an invalid length. [ 847.936028][T11565] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1560'. [ 848.270314][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 848.493067][T11570] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 848.499738][T11570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 848.508174][T11570] vhci_hcd vhci_hcd.0: Device attached [ 848.526030][T11571] vhci_hcd: connection closed [ 848.526455][T10023] vhci_hcd: stop threads [ 848.546546][T10023] vhci_hcd: release socket [ 848.552536][T10023] vhci_hcd: disconnect device [ 849.386703][T11578] fuse: Bad value for 'user_id' [ 849.802611][T11590] Cannot find add_set index 0 as target [ 849.869274][T11590] tmpfs: Bad value for 'mpol' [ 850.706938][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 852.446212][T11607] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 852.452906][T11607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 852.460940][T11607] vhci_hcd vhci_hcd.0: Device attached [ 852.470849][T11608] vhci_hcd: connection closed [ 852.477272][ T4441] vhci_hcd: stop threads [ 852.515256][ T4441] vhci_hcd: release socket [ 852.524176][T11611] fuse: Bad value for 'user_id' [ 852.540616][ T4441] vhci_hcd: disconnect device [ 853.755422][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1581'. [ 856.114940][T11643] Cannot find add_set index 0 as target [ 856.121878][T11641] Cannot find add_set index 0 as target [ 856.137682][T11643] tmpfs: Bad value for 'mpol' [ 856.146335][T11641] tmpfs: Bad value for 'mpol' [ 856.179441][T11646] input: syz1 as /devices/virtual/input/input10 [ 859.151636][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 863.639904][T11697] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 863.648435][T11697] cramfs: wrong magic [ 863.821585][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 864.020548][T11690] tmpfs: Bad value for 'mpol' [ 870.888928][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.900710][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.847882][T11750] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 871.855575][T11750] cramfs: wrong magic [ 873.896604][ T5834] kernel read not supported for file /swradio3 (pid: 5834 comm: kworker/1:5) [ 874.850557][T11787] Cannot find add_set index 0 as target [ 875.038028][T11787] tmpfs: Bad value for 'mpol' [ 875.107398][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 875.422455][T11797] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 875.432197][T11797] cramfs: wrong magic [ 879.996652][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 881.027406][T11839] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1638'. [ 882.036891][T11844] Cannot find set identified by id 0 to match [ 882.044244][T11844] kAFS: No cell specified [ 884.962259][T11853] Cannot find add_set index 0 as target [ 885.254997][T11854] tmpfs: Bad value for 'mpol' [ 887.456572][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 887.553475][T11868] Cannot find add_set index 0 as target [ 887.638890][T11868] tmpfs: Bad value for 'mpol' [ 887.699725][T11872] Cannot find add_set index 0 as target [ 889.009349][T11881] [U]  [ 889.013124][T11881] [U] K{ [ 889.018008][T11881] [U] T 1ŠFFˊ`GJǘGO/MC [ 889.088940][T11881] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 889.106915][T11881] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 889.130133][T11881] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 889.268499][T11881] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 889.298545][T11881] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 889.316891][T11881] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 889.339772][T11881] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 889.626247][T11881] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 889.637144][T11881] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 889.652611][T11881] [U] 22Ʃ۩X?0;3U [ 889.667662][T11881] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 889.728344][T11881] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 889.748279][T11881] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 889.788129][T11881] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 889.808447][T11881] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 889.848057][T11881] [U] EC [ 889.851766][T11881] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 889.893299][T11879] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 892.982836][ T9952] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 892.995901][ T9952] CPU: 0 PID: 9952 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 893.004035][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 893.015107][ T9952] Workqueue: hci0 hci_rx_work [ 893.020034][ T9952] Call Trace: [ 893.023592][ T9952] [ 893.026915][ T9952] dump_stack_lvl+0x18c/0x250 [ 893.033895][ T9952] ? show_regs_print_info+0x20/0x20 [ 893.039586][ T9952] ? load_image+0x400/0x400 [ 893.044860][ T9952] sysfs_create_dir_ns+0x26e/0x2a0 [ 893.050360][ T9952] ? sysfs_warn_dup+0xa0/0xa0 [ 893.055784][ T9952] ? do_raw_spin_unlock+0x121/0x230 [ 893.061379][ T9952] kobject_add_internal+0x61c/0xcc0 [ 893.066964][ T9952] kobject_add+0x164/0x240 [ 893.071956][ T9952] ? __rwlock_init+0x150/0x150 [ 893.077212][ T9952] ? kobject_init+0x1e0/0x1e0 [ 893.082011][ T9952] ? _raw_spin_unlock+0x28/0x40 [ 893.087085][ T9952] ? get_device_parent+0x366/0x390 [ 893.092341][ T9952] device_add+0x408/0xc20 [ 893.096842][ T9952] hci_conn_add_sysfs+0xd5/0x1e0 [ 893.102087][ T9952] le_conn_complete_evt+0xf5d/0x1540 [ 893.107629][ T9952] ? hci_event_packet+0x4cb/0x1270 [ 893.112891][ T9952] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 893.119279][ T9952] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 893.125109][ T9952] ? skb_pull_data+0xfb/0x200 [ 893.129817][ T9952] hci_le_conn_complete_evt+0x187/0x440 [ 893.135393][ T9952] ? hci_remote_host_features_evt+0x150/0x150 [ 893.141484][ T9952] hci_event_packet+0x7ba/0x1270 [ 893.146629][ T9952] ? bis_list+0x290/0x290 [ 893.151100][ T9952] ? lockdep_hardirqs_on+0x98/0x150 [ 893.156725][ T9952] ? hci_send_to_monitor+0xd7/0x4f0 [ 893.162256][ T9952] hci_rx_work+0x43a/0xd60 [ 893.166927][ T9952] ? process_scheduled_works+0x96f/0x15d0 [ 893.173052][ T9952] process_scheduled_works+0xa5d/0x15d0 [ 893.178658][ T9952] ? worker_attach_to_pool+0x380/0x380 [ 893.184864][ T9952] ? assign_work+0x3d2/0x5d0 [ 893.189503][ T9952] worker_thread+0xa55/0xfc0 [ 893.194330][ T9952] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 893.201072][ T9952] ? _raw_spin_unlock+0x40/0x40 [ 893.205950][ T9952] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 893.211998][ T9952] kthread+0x2fa/0x390 [ 893.216138][ T9952] ? pr_cont_work+0x560/0x560 [ 893.221018][ T9952] ? kthread_blkcg+0xd0/0xd0 [ 893.226004][ T9952] ret_from_fork+0x48/0x80 [ 893.230677][ T9952] ? kthread_blkcg+0xd0/0xd0 [ 893.235476][ T9952] ret_from_fork_asm+0x11/0x20 [ 893.240486][ T9952] [ 893.247894][ T9952] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 893.265472][ T9952] Bluetooth: hci0: failed to register connection device [ 893.662890][T11894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1654'. [ 894.457661][T11899] Cannot find set identified by id 0 to match [ 894.465231][T11899] kAFS: No cell specified [ 895.751898][ T9952] Bluetooth: hci0: command 0x1407 tx timeout [ 895.918890][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 897.256798][ T9952] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 898.106924][T11920] netlink: 'syz.3.1661': attribute type 4 has an invalid length. [ 898.115437][T11920] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1661'. [ 900.598509][T11930] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1664'. [ 901.369416][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 904.128439][T11954] netlink: 'syz.0.1672': attribute type 4 has an invalid length. [ 904.136761][T11954] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1672'. [ 905.658995][T11960] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1673'. [ 906.338304][T11966] Cannot find set identified by id 0 to match [ 906.345612][T11966] kAFS: No cell specified [ 910.732394][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 911.948470][T11991] tipc: Started in network mode [ 911.953740][T11991] tipc: Node identity ea85b9aab847, cluster identity 4711 [ 911.978364][T11991] tipc: Enabled bearer , priority 0 [ 912.006964][T11994] syzkaller0: entered promiscuous mode [ 912.027866][T11994] syzkaller0: entered allmulticast mode [ 912.429793][T11991] tipc: Resetting bearer [ 912.818521][T12002] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1683'. [ 913.147690][ T9] tipc: Node number set to 1388493226 [ 913.226919][T11990] tipc: Resetting bearer [ 913.295535][T11990] tipc: Disabling bearer [ 917.518080][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'. [ 919.796974][T12048] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1694'. [ 921.081441][T12049] comedi comedi0: Minor 3 could not be opened [ 921.219080][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 921.483202][ T27] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 921.509326][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.546284][ T27] usb 1-1: Product: syz [ 921.571049][ T27] usb 1-1: Manufacturer: syz [ 921.593381][ T27] usb 1-1: SerialNumber: syz [ 922.277955][ T27] (unnamed net_device) (uninitialized): Assigned a random MAC address: a6:c3:e5:21:68:f2 [ 922.385258][ T27] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 922.451370][ T27] usb 1-1: USB disconnect, device number 11 [ 923.503750][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'. [ 927.511552][ T5787] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 927.730707][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 928.621004][T12126] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 928.627625][T12126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 928.635591][T12126] vhci_hcd vhci_hcd.0: Device attached [ 929.709899][ T5816] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 929.740605][T12127] vhci_hcd: connection closed [ 929.793833][ T77] vhci_hcd: stop threads [ 929.877957][ T77] vhci_hcd: release socket [ 929.917949][ T77] vhci_hcd: disconnect device [ 931.705017][T12141] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1718'. [ 932.043206][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.050524][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.028686][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 934.119059][T12156] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 934.918200][ T5816] vhci_hcd: vhci_device speed not set [ 935.963467][T12174] tipc: Started in network mode [ 935.968944][T12174] tipc: Node identity 3e682b440775, cluster identity 4711 [ 935.976821][T12174] tipc: Enabled bearer , priority 0 [ 935.986082][T12174] syzkaller0: entered promiscuous mode [ 935.992397][T12174] syzkaller0: entered allmulticast mode [ 936.040260][T12153] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 936.053508][T12174] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1726'. [ 936.103386][T12174] tipc: Resetting bearer [ 936.125372][T12173] tipc: Resetting bearer [ 936.167386][T12173] tipc: Disabling bearer [ 936.942444][T12182] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1728'. [ 939.594426][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'. [ 941.891891][T12217] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1738'. [ 944.763490][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 945.924829][T12241] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 945.931545][T12241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 945.939935][T12241] vhci_hcd vhci_hcd.0: Device attached [ 946.385348][T12244] vhci_hcd: connection closed [ 946.466918][ T9] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 946.512815][ T4441] vhci_hcd: stop threads [ 946.675836][ T4441] vhci_hcd: release socket [ 946.743941][ T4441] vhci_hcd: disconnect device [ 947.018689][T12250] fuse: Bad value for 'fd' [ 948.554476][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 951.209591][T12279] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 951.216528][T12279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 951.224838][T12279] vhci_hcd vhci_hcd.0: Device attached [ 951.511454][T12281] fuse: Bad value for 'fd' [ 951.599473][T12282] vhci_hcd: connection closed [ 951.626270][ T41] vhci_hcd: stop threads [ 951.720733][ T41] vhci_hcd: release socket [ 951.781321][ T41] vhci_hcd: disconnect device [ 951.818122][ T5834] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 951.874907][ T5834] usb 33-1: enqueue for inactive port 0 [ 951.878637][ T9] vhci_hcd: vhci_device speed not set [ 952.031278][ T5834] vhci_hcd: vhci_device speed not set [ 952.588407][ T5759] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 952.788216][ T5759] usb 3-1: Using ep0 maxpacket: 32 [ 952.969190][ T5759] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.112543][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 953.136282][ T5759] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 953.146865][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.168713][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 953.187058][ T5759] usb 3-1: config 0 descriptor?? [ 953.211245][ T5759] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 954.569524][ T5834] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 956.446421][ T5834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 956.458185][ T5834] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 956.469468][ T5834] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 957.437175][ T5834] usb 2-1: can't read configurations, error -71 [ 960.596770][ T1187] usb 3-1: USB disconnect, device number 15 [ 960.824384][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 962.251323][T12353] Cannot find add_set index 0 as target [ 964.116380][T12366] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 966.423004][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 966.749521][ T5816] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 966.961458][ T5816] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 966.987027][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.006101][ T5816] usb 2-1: Product: syz [ 967.012002][ T5816] usb 2-1: Manufacturer: syz [ 967.023938][ T5816] usb 2-1: SerialNumber: syz [ 967.289772][ T5816] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 967.414761][ T5816] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 967.460627][ T5816] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 967.495690][ T5816] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 967.534887][ T5816] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 967.616935][ T5816] lan78xx: probe of 2-1:1.0 failed with error -71 [ 967.639753][ T5816] usb 2-1: USB disconnect, device number 18 [ 968.190579][T12393] tipc: Enabled bearer , priority 0 [ 968.241213][T12393] syzkaller0: entered promiscuous mode [ 968.280874][T12393] syzkaller0: entered allmulticast mode [ 968.439617][T12393] tipc: Resetting bearer [ 968.504747][T12392] tipc: Resetting bearer [ 968.622439][T12392] tipc: Disabling bearer [ 970.699175][T12410] syz_tun: entered allmulticast mode [ 970.759407][T12408] syz_tun: left allmulticast mode [ 970.770495][T12412] Cannot find add_set index 0 as target [ 980.945539][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1815'. [ 983.207005][T12493] Cannot find add_set index 0 as target [ 983.407858][T12495] input: syz1 as /devices/virtual/input/input11 [ 985.845932][T12516] tmpfs: Bad value for 'mpol' [ 987.527937][ T5903] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 988.807857][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 988.831078][ T5903] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 988.842825][ T5903] usb 3-1: config 6 has no interface number 0 [ 988.849812][ T5903] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 988.860230][ T5903] usb 3-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 988.882504][ T5903] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 988.892199][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.902136][ T5903] usb 3-1: Product: syz [ 988.906639][ T5903] usb 3-1: Manufacturer: syz [ 988.913269][ T5903] usb 3-1: SerialNumber: syz [ 988.956613][ T5903] hso 3-1:6.2: Failed to find INT IN ep [ 989.074933][T12529] input: syz1 as /devices/virtual/input/input12 [ 989.248931][ T5819] usb 3-1: USB disconnect, device number 16 [ 992.259950][T12554] Cannot find add_set index 0 as target [ 993.120301][T12557] input: syz1 as /devices/virtual/input/input13 [ 993.304428][T12561] tmpfs: Bad value for 'mpol' [ 993.482707][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.489623][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.705085][T12572] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1842'. [ 998.056807][T12603] Cannot find add_set index 0 as target [ 998.611852][T12608] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1852'. [ 999.345751][T12614] tmpfs: Bad value for 'mpol' [ 1003.328269][T12651] Cannot find add_set index 0 as target [ 1006.663695][T12686] tmpfs: Bad value for 'mpol' [ 1009.972061][T12711] nfs: Unknown parameter '' [ 1015.566731][T12743] tmpfs: Bad value for 'mpol' [ 1016.364726][T12750] Cannot find add_set index 0 as target [ 1016.440017][T12751] tmpfs: Bad value for 'mpol' [ 1027.609787][T12803] Cannot find add_set index 0 as target [ 1027.658372][T12803] tmpfs: Bad value for 'mpol' [ 1032.394156][T12850] tmpfs: Bad value for 'mpol' [ 1032.590513][T12855] [U]  [ 1032.593771][T12855] [U] K{ [ 1032.618262][T12855] [U] T 1ŠFFˊ`GJǘGO/MC [ 1032.635664][T12855] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1032.687277][T12855] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1032.764552][T12855] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1032.822295][T12855] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1032.850371][T12855] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1032.866870][T12855] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1032.885577][T12855] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1033.006177][T12855] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1033.021726][T12855] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1033.039122][T12855] [U] 22Ʃ۩X?0;3U [ 1033.051106][T12855] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1033.082089][T12855] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1033.112334][T12855] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1033.127758][T12855] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1033.157802][T12855] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1033.172577][T12855] [U] EC [ 1033.203687][T12855] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1033.354103][T12852] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1036.943430][T12889] Cannot find add_set index 0 as target [ 1039.894787][T12912] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1039.902524][T12912] cramfs: wrong magic [ 1041.188656][T12918] tmpfs: Bad value for 'mpol' [ 1043.075807][T12930] Cannot find add_set index 0 as target [ 1043.239420][T12933] 9pnet_fd: Insufficient options for proto=fd [ 1043.807947][ T5819] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1044.127989][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 1044.153142][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.181572][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1044.243500][ T5819] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1044.666154][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.700651][ T5819] usb 4-1: config 0 descriptor?? [ 1044.721300][ T5819] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1046.583111][T12960] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1046.757568][ T5819] usb 4-1: USB disconnect, device number 16 [ 1046.766514][T12936] ------------[ cut here ]------------ [ 1046.773150][T12936] WARNING: CPU: 0 PID: 12936 at drivers/gpu/drm/vkms/vkms_crtc.c:103 vkms_get_vblank_timestamp+0x188/0x1d0 [ 1046.784851][T12936] Modules linked in: [ 1046.788858][T12936] CPU: 0 PID: 12936 Comm: syz.3.1949 Not tainted syzkaller #0 [ 1046.796548][T12936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1046.807004][T12936] RIP: 0010:vkms_get_vblank_timestamp+0x188/0x1d0 [ 1046.813837][T12936] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1d 7b 9f fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 78 4b 47 fc <0f> 0b eb ea 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fe ff ff 4c [ 1046.833670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.840165][T12936] RSP: 0018:ffffc9000bc6f2e8 EFLAGS: 00010293 [ 1046.846504][T12936] RAX: ffffffff853fd0e8 RBX: ffffc9000bc6f460 RCX: ffff888077a98000 [ 1046.854876][T12936] RDX: 0000000000000000 RSI: 000000f3b4aae992 RDI: 000000f3b4aae992 [ 1046.863621][T12936] RBP: 1ffff9200178de8c R08: ffffc90003d4a000 R09: 0000000000000000 [ 1046.872975][T12936] R10: ffffc90003d4a000 R11: 0000000000000000 R12: 000000f3b4aae992 [ 1046.881451][T12936] R13: dffffc0000000000 R14: ffff8880213d0000 R15: 000000f3b4aae992 [ 1046.889549][T12936] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1046.898705][T12936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1046.905399][T12936] CR2: 00007fc2f03f9d58 CR3: 000000002bad8000 CR4: 00000000003506f0 [ 1046.913609][T12936] Call Trace: [ 1046.916986][T12936] [ 1046.922209][T12936] ? vkms_disable_vblank+0x20/0x20 [ 1046.927531][T12936] drm_crtc_next_vblank_start+0x22b/0x480 [ 1046.934157][T12936] ? drm_vblank_count_and_time+0x4e0/0x4e0 [ 1046.940700][T12936] ? drm_gem_fb_vmap+0x230/0x8d0 [ 1046.945768][T12936] drm_atomic_helper_wait_for_fences+0x21b/0x8e0 [ 1046.952522][T12936] ? drm_atomic_helper_commit_modeset_enables+0xb10/0xb10 [ 1046.959897][T12936] ? drm_atomic_helper_prepare_planes+0x660/0xb40 [ 1046.966481][T12936] drm_atomic_helper_commit+0x5b5/0xae0 [ 1046.972297][T12936] ? drm_atomic_helper_async_commit+0x5c0/0x5c0 [ 1046.978808][T12936] drm_atomic_commit+0x226/0x280 [ 1046.984239][T12936] ? drm_atomic_check_only+0x3030/0x3030 [ 1046.990285][T12936] ? handle_bad_prq_event+0x2b0/0x2b0 [ 1046.996268][T12936] ? drm_client_rotation+0x446/0x570 [ 1047.001767][T12936] drm_client_modeset_commit_atomic+0x651/0x7b0 [ 1047.008262][T12936] ? drm_client_modeset_check+0x180/0x180 [ 1047.014628][T12936] ? __mutex_lock+0x315/0xcc0 [ 1047.019585][T12936] ? mutex_lock_nested+0x20/0x20 [ 1047.024762][T12936] ? drm_fb_helper_lastclose+0x97/0x150 [ 1047.030706][T12936] ? lock_chain_count+0x20/0x20 [ 1047.035930][T12936] ? mutex_lock_nested+0x20/0x20 [ 1047.041184][T12936] drm_client_modeset_commit_locked+0xcb/0x4c0 [ 1047.047501][T12936] drm_client_modeset_commit+0x4a/0x70 [ 1047.053156][T12936] drm_fb_helper_lastclose+0x9f/0x150 [ 1047.058627][T12936] drm_fbdev_generic_client_restore+0x34/0x40 [ 1047.065278][T12936] drm_client_dev_restore+0x138/0x270 [ 1047.070778][T12936] drm_release+0x4bd/0x670 [ 1047.075365][T12936] ? drm_lastclose+0x100/0x100 [ 1047.080333][T12936] __fput+0x234/0x970 [ 1047.084413][T12936] task_work_run+0x1d4/0x260 [ 1047.089211][T12936] ? task_work_cancel+0x220/0x220 [ 1047.094411][T12936] do_exit+0x95a/0x2460 [ 1047.098680][T12936] ? put_task_struct+0xc0/0xc0 [ 1047.103794][T12936] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1047.110030][T12936] ? get_signal+0x1068/0x13f0 [ 1047.114833][T12936] ? lock_chain_count+0x20/0x20 [ 1047.119984][T12936] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1047.125152][T12936] do_group_exit+0x21b/0x2d0 [ 1047.130445][T12936] ? lockdep_hardirqs_on+0x98/0x150 [ 1047.136281][T12936] get_signal+0x12fc/0x13f0 [ 1047.141633][T12936] arch_do_signal_or_restart+0xc2/0x800 [ 1047.148462][T12936] ? get_sigframe_size+0x20/0x20 [ 1047.153588][T12936] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 1047.160005][T12936] ? exit_to_user_mode_loop+0x3b/0x110 [ 1047.165911][T12936] exit_to_user_mode_loop+0x70/0x110 [ 1047.172014][T12936] exit_to_user_mode_prepare+0xee/0x180 [ 1047.179127][T12936] syscall_exit_to_user_mode+0x1a/0x50 [ 1047.185333][T12936] do_syscall_64+0x61/0xa0 [ 1047.190630][T12936] ? clear_bhb_loop+0x40/0x90 [ 1047.195751][T12936] ? clear_bhb_loop+0x40/0x90 [ 1047.201278][T12936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1047.207758][T12936] RIP: 0033:0x7fb23e55cfce [ 1047.212781][T12936] Code: Unable to access opcode bytes at 0x7fb23e55cfa4. [ 1047.220234][T12936] RSP: 002b:00007ffc026d9bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1047.229603][T12936] RAX: fffffffffffffdfc RBX: 00005555636e3500 RCX: 00007fb23e55cfce [ 1047.238587][T12936] RDX: 00007ffc026d9c10 RSI: 0000000000000000 RDI: 0000000000000000 [ 1047.246807][T12936] RBP: 00007fb23e817da0 R08: 0000000000000000 R09: 0000000000000000 [ 1047.255492][T12936] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000010001c [ 1047.264309][T12936] R13: 00007fb23e81609c R14: 00000000000ff463 R15: 00007ffc026d9d40 [ 1047.273099][T12936] [ 1047.276838][T12936] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1047.284285][T12936] CPU: 0 PID: 12936 Comm: syz.3.1949 Not tainted syzkaller #0 [ 1047.292363][T12936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1047.302566][T12936] Call Trace: [ 1047.305904][T12936] [ 1047.309141][T12936] dump_stack_lvl+0x18c/0x250 [ 1047.314066][T12936] ? show_regs_print_info+0x20/0x20 [ 1047.319765][T12936] ? load_image+0x400/0x400 [ 1047.324610][T12936] panic+0x2dc/0x730 [ 1047.328661][T12936] ? bpf_jit_dump+0xd0/0xd0 [ 1047.333324][T12936] __warn+0x2e0/0x470 [ 1047.337602][T12936] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 1047.343689][T12936] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 1047.349740][T12936] report_bug+0x2be/0x4f0 [ 1047.354355][T12936] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 1047.360212][T12936] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 1047.366118][T12936] ? vkms_get_vblank_timestamp+0x18a/0x1d0 [ 1047.372098][T12936] handle_bug+0xcf/0x120 [ 1047.376600][T12936] exc_invalid_op+0x1a/0x50 [ 1047.381229][T12936] asm_exc_invalid_op+0x1a/0x20 [ 1047.386200][T12936] RIP: 0010:vkms_get_vblank_timestamp+0x188/0x1d0 [ 1047.393200][T12936] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1d 7b 9f fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 78 4b 47 fc <0f> 0b eb ea 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fe ff ff 4c [ 1047.414329][T12936] RSP: 0018:ffffc9000bc6f2e8 EFLAGS: 00010293 [ 1047.420532][T12936] RAX: ffffffff853fd0e8 RBX: ffffc9000bc6f460 RCX: ffff888077a98000 [ 1047.428816][T12936] RDX: 0000000000000000 RSI: 000000f3b4aae992 RDI: 000000f3b4aae992 [ 1047.436826][T12936] RBP: 1ffff9200178de8c R08: ffffc90003d4a000 R09: 0000000000000000 [ 1047.445259][T12936] R10: ffffc90003d4a000 R11: 0000000000000000 R12: 000000f3b4aae992 [ 1047.453347][T12936] R13: dffffc0000000000 R14: ffff8880213d0000 R15: 000000f3b4aae992 [ 1047.461627][T12936] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 1047.467508][T12936] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 1047.473542][T12936] ? vkms_disable_vblank+0x20/0x20 [ 1047.478683][T12936] drm_crtc_next_vblank_start+0x22b/0x480 [ 1047.484473][T12936] ? drm_vblank_count_and_time+0x4e0/0x4e0 [ 1047.490419][T12936] ? drm_gem_fb_vmap+0x230/0x8d0 [ 1047.495581][T12936] drm_atomic_helper_wait_for_fences+0x21b/0x8e0 [ 1047.502121][T12936] ? drm_atomic_helper_commit_modeset_enables+0xb10/0xb10 [ 1047.509721][T12936] ? drm_atomic_helper_prepare_planes+0x660/0xb40 [ 1047.516376][T12936] drm_atomic_helper_commit+0x5b5/0xae0 [ 1047.521984][T12936] ? drm_atomic_helper_async_commit+0x5c0/0x5c0 [ 1047.528801][T12936] drm_atomic_commit+0x226/0x280 [ 1047.533819][T12936] ? drm_atomic_check_only+0x3030/0x3030 [ 1047.539635][T12936] ? handle_bad_prq_event+0x2b0/0x2b0 [ 1047.545195][T12936] ? drm_client_rotation+0x446/0x570 [ 1047.550644][T12936] drm_client_modeset_commit_atomic+0x651/0x7b0 [ 1047.557302][T12936] ? drm_client_modeset_check+0x180/0x180 [ 1047.563238][T12936] ? __mutex_lock+0x315/0xcc0 [ 1047.568144][T12936] ? mutex_lock_nested+0x20/0x20 [ 1047.573161][T12936] ? drm_fb_helper_lastclose+0x97/0x150 [ 1047.578876][T12936] ? lock_chain_count+0x20/0x20 [ 1047.583851][T12936] ? mutex_lock_nested+0x20/0x20 [ 1047.589140][T12936] drm_client_modeset_commit_locked+0xcb/0x4c0 [ 1047.595596][T12936] drm_client_modeset_commit+0x4a/0x70 [ 1047.601166][T12936] drm_fb_helper_lastclose+0x9f/0x150 [ 1047.606704][T12936] drm_fbdev_generic_client_restore+0x34/0x40 [ 1047.612820][T12936] drm_client_dev_restore+0x138/0x270 [ 1047.618498][T12936] drm_release+0x4bd/0x670 [ 1047.623162][T12936] ? drm_lastclose+0x100/0x100 [ 1047.628086][T12936] __fput+0x234/0x970 [ 1047.632176][T12936] task_work_run+0x1d4/0x260 [ 1047.636837][T12936] ? task_work_cancel+0x220/0x220 [ 1047.642088][T12936] do_exit+0x95a/0x2460 [ 1047.646572][T12936] ? put_task_struct+0xc0/0xc0 [ 1047.651477][T12936] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1047.657637][T12936] ? get_signal+0x1068/0x13f0 [ 1047.662534][T12936] ? lock_chain_count+0x20/0x20 [ 1047.667491][T12936] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1047.672904][T12936] do_group_exit+0x21b/0x2d0 [ 1047.677714][T12936] ? lockdep_hardirqs_on+0x98/0x150 [ 1047.683329][T12936] get_signal+0x12fc/0x13f0 [ 1047.688111][T12936] arch_do_signal_or_restart+0xc2/0x800 [ 1047.694167][T12936] ? get_sigframe_size+0x20/0x20 [ 1047.699284][T12936] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 1047.705202][T12936] ? exit_to_user_mode_loop+0x3b/0x110 [ 1047.710977][T12936] exit_to_user_mode_loop+0x70/0x110 [ 1047.716594][T12936] exit_to_user_mode_prepare+0xee/0x180 [ 1047.722360][T12936] syscall_exit_to_user_mode+0x1a/0x50 [ 1047.727848][T12936] do_syscall_64+0x61/0xa0 [ 1047.732682][T12936] ? clear_bhb_loop+0x40/0x90 [ 1047.737656][T12936] ? clear_bhb_loop+0x40/0x90 [ 1047.742436][T12936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1047.748377][T12936] RIP: 0033:0x7fb23e55cfce [ 1047.753209][T12936] Code: Unable to access opcode bytes at 0x7fb23e55cfa4. [ 1047.760441][T12936] RSP: 002b:00007ffc026d9bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1047.769063][T12936] RAX: fffffffffffffdfc RBX: 00005555636e3500 RCX: 00007fb23e55cfce [ 1047.777380][T12936] RDX: 00007ffc026d9c10 RSI: 0000000000000000 RDI: 0000000000000000 [ 1047.785739][T12936] RBP: 00007fb23e817da0 R08: 0000000000000000 R09: 0000000000000000 [ 1047.793837][T12936] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000010001c [ 1047.801931][T12936] R13: 00007fb23e81609c R14: 00000000000ff463 R15: 00007ffc026d9d40 [ 1047.810049][T12936] [ 1047.813387][T12936] Kernel Offset: disabled [ 1047.817818][T12936] Rebooting in 86400 seconds..