last executing test programs: 5.142428502s ago: executing program 2 (id=659): r0 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="000000000900000085cf5068"]) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r4 = epoll_create1(0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) r6 = dup(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)={0x40002013}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001240)={0x1000, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/116, 0x74}, {&(0x7f0000000080)=""/228, 0xe4}, {&(0x7f00000001c0)=""/4096, 0x1000}], &(0x7f0000001200)=[0x5, 0x68], 0x3}, 0x20) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0xca84, 0xfffffffd, 0xdea9, 0x38000, 0x1, "106c8900000000f935015ae9ae8500313cf366"}) 5.060978858s ago: executing program 2 (id=661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afeffff7f000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 5.059970983s ago: executing program 2 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f00000002c0)=@attr_other={0x0, 0x1000, 0xffffffff, 0x0}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904bc80"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000001dc0)={&(0x7f0000001d80)=[{0xf68, 0x0, 0x0, 0x0}], 0x1}) 4.348838397s ago: executing program 3 (id=667): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x24000040) statx(0xffffffffffffff9c, 0x0, 0x2900, 0x80, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000fdff006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 3.654051745s ago: executing program 1 (id=674): prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xed}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6f0fd9b8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000051}, 0x8004000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x1e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x44084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x36}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4005) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0105865, &(0x7f0000000740)={&(0x7f00000003c0)=0x3, 0xffffffff, &(0x7f0000000400)=[{}, {}, {}, {}], &(0x7f0000000700)}) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000780), 0x199282, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000007c0)=0x48b4f056) cachestat(r3, &(0x7f0000000800)={0xb28, 0x36f7}, &(0x7f0000000840), 0x0) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000880)) r4 = openat$bsg(0xffffff9c, &(0x7f00000008c0)='/dev/bsg/3:0:0:0\x00', 0x105001, 0x0) ioctl$BSG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000900)=0x1) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x30, r5, 0x200) r6 = openat$hwrng(0xffffff9c, &(0x7f0000000940), 0x101b00, 0x0) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000980), &(0x7f00000009c0)=0x4) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000a00)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x4, &(0x7f0000000a40)) syz_usb_connect$uac3(0x0, 0x122, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x3, 0x1, 0x4, 0x80, 0x5, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x63, 0x80000000}, [@extension_unit={0x19, 0x24, 0xa, 0x6, 0x3, [0x0, 0x1, 0x2, 0x1, 0x1]}, @selector_unit={0xd, 0x24, 0xc, 0xab, 0x8, "7c1bc282d7263e85"}, @feature_unit={0x11, 0x24, 0x7, 0x6, 0x3, [0x6, 0xf, 0x9]}, @feature_unit={0x11, 0x24, 0x7, 0x2, 0x1, [0x0, 0xb, 0xf]}, @multiply_unit={0xb, 0x24, 0xd, 0x9, 0xd, 0x2, 0xff}, @cluster_info_segment={0x6, 0x20, 0x0, 0xb0, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4e, 0x0, 0x1, 0x6, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x0, 0x8, {0xa, 0x25, 0x25, 0x2, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5a}, @as_header={0x17, 0x24, 0x1, 0x6, 0x9, 0x0, 0x1002, 0x1, 0x3, 0x3, 0xfa}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x0, 0xb, "73716818"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xb, 0x1, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1, 0x3, 'N%', 'JT'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x54, 0xb, {0xa, 0x25, 0x25, 0x7, 0xe, 0x4f4}}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x150, 0xe, 0xff, 0x7, 0x8, 0xa2}, 0x2c, &(0x7f0000000c00)={0x5, 0xf, 0x2c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xb, 0x81, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x4, 0x46, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x9, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xe, 0xec, 0x0, 0x5}]}, 0x4, [{0x87, &(0x7f0000000c40)=@string={0x87, 0x3, "0c4ceaffdf044868afea754353252e7d05ababf2857629f3030339001fa43cd52cf5865ff44bb4ec3f9193430806d1d6445c41688e6f45f877a47074d7e7d010fb0264f331a8982dea59c602c2a240ce2117f840af05bcb598e0ba00706ec05490f3058b3ffb4d3e7c87cef27f8e61d3d4b6ebec86edac84cc6b00cdb9617408c0d187ead8"}}, {0xb1, &(0x7f0000000d00)=@string={0xb1, 0x3, "42716ff8988b3f6257fdd1583648f8b0392b41d71873d9ef6c129d8c4e80d66cbde2c00c8ec7f73539b3e8a1bdac07db931a0911e47994f2e58bff0d0088fbf81f4fbcfffde4e608f86de79a9f2b9c1d3b3be7a970d240cff03762138a79e0fcdd1b3185e39cc659e5e6ccd029d896a7f2fbd1f4612dda42470f24295fdcad6e8f84f1e391b797d1b6a9b7a54a48ace3c6c6aa6c6e8183da9e8d3c016195814b50c09c071758ba6800a68fd4b82ae2"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x44e}}]}) mount(&(0x7f0000000e80)=@loop={'/dev/loop', 0x0}, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)='exofs\x00', 0x1020400, &(0x7f0000000f40)='/dev/dsp1\x00') ioctl$I2C_TENBIT(r6, 0x704, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x90) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000}, 0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000011c0)={0x0, 0x0}) ptrace$setregset(0x4205, r9, 0x1, &(0x7f0000001300)={&(0x7f0000001240)="866cb42739b81b605647f84ca11e5449016e4f23603db7390a80272d9f544f95e17038c4ceda0193def10e22db0f6c6e08d8b0fec1b9e6d758fbefccd3910dcf794bc0c1215a596a8903aee9c14cb5261b2ee76486346b9d7b4e58f9d7e8ee691d9b26676f007abf113603a1a0a857ce42777679fe205b5128db420d3f8f0a01569cebfdff46", 0x86}) 3.579736305s ago: executing program 2 (id=676): r0 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/99, 0x63, 0x91e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) getrusage(0x0, &(0x7f0000000440)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) syz_emit_ethernet(0x4e, &(0x7f0000000f40)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd6018232500182c00fe8000000000200000000000000000bbfe8000000000000000000000000000aa110100000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x1}]}, 0x24}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000280)=0xe20, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x7f000001}}, 0x1c}}, 0x0) mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="10000128000c0004c0ff0f0000000000ebe96caf5831e7cb00"], 0x28}}, 0x0) 3.361030034s ago: executing program 3 (id=677): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) 3.360723593s ago: executing program 3 (id=678): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRESHEX, @ANYBLOB="00000000000000003800128008000100677470002c000280080004000100000008000200", @ANYRES32, @ANYBLOB="f1ff0000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300ff0f00000639c665d336779d4c3b96406aaec08daf06b275c1afffbce2100b06a44a65479741b1ab34b4703532bd9fbd0f9009c7a3df06c64ddd97ac71c12f613ebd2647360d944ad1f187679c5aa475dd61dbbf9d92703307c7ee220829f69b84b0522dd165d6acf0e29d6c0700f0f266ec77f69ca9513e6e9d1d8b1e7b270bd6d4f8b4201f8e7d62f1a01d7099e77231e45c0521e711eb518d9b818be27be78527c3a9664f7ac7bca05a7fab433dcb263e7acc2668e77b550a9a3d45441b8d91d168ba25dd0bebad9421c08ec8b48aa1944ac6819ade2b6513cb6be1bb6bf1c5b5fa0ed0e4366abaa19a28"], 0x58}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000006100000024001280090001007866726d0000000014000280080001000200000008000200a0311498d2d55279b000fb030000000a000100aaaaaaaaaa000000"], 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0xf4, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0xe0, 0x1, [@m_csum={0xdc, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x5, 0x8}, 0x2}}]}, {0x94, 0x6, "72af9cdc25cf1f47e44b386313492d7d250d6a923b8c008e7065b2313de3f37ed50acb48b44f7cb2e657821407000000000f539733824aeaf5d744a27e5ec075e13d3a2160b7f44b981d5b0d7368e7d54f57db5000467d55c6f5f91810f48ec63490d3d875ae6be396d7ff3b0720845de7306dd1e0ed503df687e8f06aca02cd39d00dac88a3e488aa57156a0eba18f8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xf4}}, 0x0) socket$inet6(0xa, 0x800, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x6, 0x2, 0x74}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x6, 0x2, 0x74}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) openat$comedi(0xffffff9c, &(0x7f0000001e80)='/dev/comedi4\x00', 0x2000, 0x0) r14 = openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r15 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r14, @ANYBLOB=',wfdno=', @ANYRESHEX=r15]) 3.140392363s ago: executing program 3 (id=679): syz_emit_ethernet(0x10e, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000000000061116c0000000000380000000000000000000000000000009508000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x1}) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483"], 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06"], 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xfffffff4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80805659, &(0x7f0000000540)={0x0, @src_change}) r7 = syz_io_uring_setup(0x60aa, &(0x7f0000000400)={0x0, 0x6a48, 0x800, 0x1, 0x285}, &(0x7f0000000480), &(0x7f0000000500), &(0x7f00000005c0)) r8 = io_uring_setup(0x331c, &(0x7f0000000000)={0x0, 0xfa76, 0x20, 0x2, 0x302, 0x0, r7}) r9 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc01c5868, &(0x7f0000000300)={r9, &(0x7f0000000200)='\\-\x00', 0x0, &(0x7f0000000240)={@align=0x200, {0x8, 0x8, 0x800, 0x7fffffffffffffff}}, 0x81, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffe}) r10 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, @isdn={0x22, 0x2, 0x7, 0x8, 0x9}, 0xdc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) syz_genetlink_get_family_id$nl802154(&(0x7f0000003580), r0) 2.580768561s ago: executing program 3 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x94) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000}, 0x50) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000af55dd56f4b3057c00000000", @ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="0000000000000000c8ea000200"/28], 0x48) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f00000004c0)=""/41, 0x29, 0x0, &(0x7f0000000500)=""/54, 0x36}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000040000000000000100000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000ffffffff18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018270000", @ANYRES32=r2, @ANYBLOB="000000005a000000faffffff00000000"], &(0x7f0000000340)='GPL\x00', 0x8000, 0xf, &(0x7f0000000380)=""/15, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x7, 0xa1a2, 0xc}, 0x10, r5, r4, 0x0, 0x0, 0x0, 0x10, 0xffffff22}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d40)={0x0, r3}, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000180), 0x8000, r1}, 0x38) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', r7}, 0x14) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000060000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a3000000000080005400000002124001180090001006d6574610000000014000280080001400000000b0800024045b5000d140000001000010000000000000000000084000a", @ANYRESHEX=r6, @ANYRES16=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) (async, rerun: 32) r9 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 32) r10 = add_key(&(0x7f00000007c0)='ceph\x00', &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000740)='id_resolver\x00', &(0x7f0000000840)=@keyring={'key_or_keyring:', r10}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) lseek(0xffffffffffffffff, 0x851, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r12 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r12, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async) listen(r12, 0x4) read$FUSE(r12, &(0x7f0000000940)={0x2020}, 0x2020) 2.490770636s ago: executing program 3 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x22) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f00000005c0)={0x18, &(0x7f0000000300)={0x40, 0xf, 0x79, {0x79, 0x5, "44f6df0b7041de7517704a994add4162ac882c49b45c24315ce5c821945faafd75b35c1b6da8f615cec963904cfc5df410d6c4e6293d35040f21123a02d731481fd698010f948972096d72a4ff4533eecad731d5eaa658a1d1ebc7fd41ea41afe4861d71596fbdb0aa4fd95fcab22ba693cb8bc98586f5"}}, &(0x7f0000000440)={0x0, 0x3, 0x50, @string={0x50, 0x3, "88c597a1e12dc8c65bcaf438afad8327ce05c47aa9fd3e327c81265028e8353bbc312a07740e86415a2f774ed80d0592d3b543e5086da0606500d1e9c337d9c56df5a951fc3f21862f69c6c51ad8"}}, &(0x7f00000004c0)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "8d2765237bb271161a02ca810a1ea57c"}, @ssp_cap={0x10, 0x10, 0xa, 0xb2, 0x1, 0x3, 0xf000, 0x6, [0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "a2772645c9d5774507567bcf89844e4e"}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x20, 0x7, "e7497d46", "d3ebee18"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x1, 0x5, 0x0, 0x6, 0x4}}}, &(0x7f0000000c80)={0x44, &(0x7f00000007c0)={0x40, 0xa, 0xbd, "14a491cfaf92381419caf9bad0a38875101ba0988d69620de23eab98addc05e0d46b7b644f677c03970c97c67cf5bf882e1d4f7f575e3b646d9059b95feb895e2ae3b849cfa1470abfebd35c3b02f11325983e9c0eeec157b305409188b3ef080544b7f64a310679502ee7f1dc6425025704ec2041d81656a77ef57e623bf2e146c3288f3404d18fc3abbb37998ac1d0743d232676142f3c3a4e149690623e47bc39a862953589655b5a67ba5736d870e127d3d4523eedd8f47bdf6485"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x85}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1e0, 0x20}}, &(0x7f00000009c0)={0x40, 0x7, 0x2}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "fb82"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, '\f`'}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x81}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r3, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) 2.229633352s ago: executing program 2 (id=683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) listen(r0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async, rerun: 32) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r5, 0x6, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="da1ead2c09077e992b05b3ec3393fadd2693fe9b648576880d490ebadae81cb8f7eb8014f6e28dfd5ef0c13eaf88761804cae5ab45ef14faa84c6098d9751425d78f9dcbcd8e285d48d8f81329be252b7a80e0215d2b8d88798256618aea372d960ec0e74ff5eeef6fcfe85019d570e7910f2baa31e8903e340270464415e13d68d438c47799c376c62abb753c15baf312337e90443d7fa90705938e6d8da43cd3cf9f6f4c6c67ca1a"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.05005102s ago: executing program 1 (id=684): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) bind$x25(r1, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async, rerun: 32) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xe0, 0x25, 0x148, 0x0, 0x60, 0x1f4, 0x2a8, 0x2a8, 0x1f4, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@dscp={{0x24}, {0x81}}, @common=@ah={{0x2c}, {[0x7, 0x10], 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @broadcast, 0xff000000, 0x0, 'macsec0\x00', 'wg1\x00', {0xff}, {0xff}, 0x4}, 0x0, 0xcc, 0x114, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x7, 0x7fffffff, 'snmp_trap\x00', {0x96b}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4) 2.049279145s ago: executing program 1 (id=685): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x24000040) statx(0xffffffffffffff9c, 0x0, 0x2900, 0x80, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000001f006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 1.389708796s ago: executing program 0 (id=686): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) move_mount(r2, 0x0, r3, &(0x7f00000000c0)='./file0\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803", 0x3d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.389179947s ago: executing program 2 (id=687): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000040)={0x4, r7, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) chdir(&(0x7f0000000000)='./file0\x00') write$cgroup_int(r0, &(0x7f0000000180)=0xfe5f, 0x12) 1.139365709s ago: executing program 1 (id=688): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001dc0)={&(0x7f0000001d80)=[{0xf68, 0x0, 0x0, 0x0}], 0x1}) 960.589323ms ago: executing program 1 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x183301, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x4, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_int(r5, 0x0, 0xb, 0x0, &(0x7f00000001c0)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x20, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d1}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, 0x0, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)=@delpolicy={0x70, 0x14, 0x200, 0x70bd27, 0x25dfdbfe, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x3, 0x4e21, 0x5, 0xa, 0x80, 0x10, 0x21, 0x0, 0xffffffffffffffff}, 0x0, 0x2}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd28, 0xffffff17}}, @offload={0xc, 0x1c, {r12, 0x2}}, @migrate={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000380)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x100, 0x7}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "0200be", 0x44, 0x2f, 0xff, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x200, 0x40, 0xfffffff9, 0x6, 0x6, 0x81}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x4, 0x245, 0x0, 0x9, 0x1ff}}]}}}]}, 0x78}}, 0x4000010) 960.273817ms ago: executing program 0 (id=690): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x14000000}, 0xfffffffffffffd27}, 0x48) 959.381618ms ago: executing program 0 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x0, 0x4, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xd}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x3, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 900.56569ms ago: executing program 0 (id=692): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000000100)=0x20) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, 0x0) close(r4) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') (async) syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) lsm_get_self_attr(0x68, 0xffffffffffffffff, 0x0, 0x1) (async) lsm_get_self_attr(0x68, 0xffffffffffffffff, 0x0, 0x1) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1e000000040000", @ANYRESDEC=r2, @ANYRES32, @ANYRES32, @ANYBLOB="050000000300000003000000010000000000000000000000008a58da2201000000f2e106be3411e0b756fc67067f"], 0x50) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000000000)) (async) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x80, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x8, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x8001, 0x20543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0xf}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {0x0, 0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x80, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x8, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x8001, 0x20543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0xf}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {0x0, 0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 655.062126ms ago: executing program 1 (id=693): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904bc80"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001dc0)={&(0x7f0000001d80)=[{0x1900, 0x0, 0x0, 0x0}], 0x1}) 724.305µs ago: executing program 0 (id=694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, &(0x7f0000000180)={r1, &(0x7f0000000040)=',8\x00', 0x250000, &(0x7f0000000080)={@align=0x7, {0x1, 0x6c, 0x4, 0x3}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x7fff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000280)={r3, 0x1, 0x6, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 0 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = open(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0xfffffffd, @empty, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="86", 0x1}, {0x0}], 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) flock(r2, 0x2) syz_open_procfs(0x0, 0x0) r7 = openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000001980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffde1) prlimit64(r8, 0xe, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, 0x0, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, 0x0, 0x0) kernel console output (not intermixed with test programs): mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.873457][ T6245] block device autoloading is deprecated and will be removed. [ 94.019555][ T6235] wg2 speed is unknown, defaulting to 1000 [ 94.452974][ T42] audit: type=1326 audit(1781903936.101:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 94.460192][ T42] audit: type=1326 audit(1781903936.101:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 94.469581][ T42] audit: type=1326 audit(1781903936.111:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 94.477371][ T6271] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.478878][ T42] audit: type=1326 audit(1781903936.111:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 94.489897][ T42] audit: type=1326 audit(1781903936.111:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 94.502462][ T42] audit: type=1326 audit(1781903936.111:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 94.516548][ T42] audit: type=1326 audit(1781903936.111:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 94.533911][ T42] audit: type=1326 audit(1781903936.111:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 94.549948][ T42] audit: type=1326 audit(1781903936.111:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 94.557965][ T42] audit: type=1326 audit(1781903936.111:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.1.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 95.526790][ T6288] bridge_slave_0: left allmulticast mode [ 95.528745][ T6288] bridge_slave_0: left promiscuous mode [ 95.531823][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.541075][ T6288] bridge_slave_1: left allmulticast mode [ 95.543551][ T6288] bridge_slave_1: left promiscuous mode [ 95.545665][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.557287][ T6288] bond0: (slave bond_slave_0): Releasing backup interface [ 95.564168][ T6288] bond0: (slave bond_slave_1): Releasing backup interface [ 95.574907][ T6288] team0: Port device team_slave_0 removed [ 95.588392][ T6288] team0: Port device team_slave_1 removed [ 95.594920][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.599969][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.605705][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.608416][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.613027][ T6288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.010435][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 96.198436][ T6326] netlink: 'syz.3.91': attribute type 2 has an invalid length. [ 96.237260][ T6329] trusted_key: syz.3.92 sent an empty control message without MSG_MORE. [ 96.268882][ T2326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.376099][ T6339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 96.428867][ T6339] warning: `syz.3.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.695833][ T6351] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.080636][ T5099] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 97.082961][ T6369] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 97.109645][ T6373] xt_cluster: node mask cannot exceed total number of nodes [ 97.158971][ T2326] usb 5-1: Using ep0 maxpacket: 32 [ 97.162162][ T2326] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.165384][ T2326] usb 5-1: config 8 has an invalid interface number: 94 but max is 0 [ 97.168151][ T2326] usb 5-1: config 8 has no interface number 0 [ 97.170292][ T2326] usb 5-1: config 8 interface 94 has no altsetting 0 [ 97.174565][ T2326] usb 5-1: string descriptor 0 read error: -22 [ 97.176630][ T2326] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 97.179651][ T2326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.184604][ T2326] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 97.388782][ T2326] gspca_sn9c2028: read1 error -32 [ 97.391073][ T2326] gspca_sn9c2028: read1 error -32 [ 97.393048][ T2326] gspca_sn9c2028: read1 error -32 [ 97.394691][ T2326] sn9c2028 5-1:8.94: probe with driver sn9c2028 failed with error -32 [ 98.406320][ T6385] syz.3.103 (6385) used greatest stack depth: 18512 bytes left [ 98.476454][ T6393] comedi comedi0: comedi_config --init_data is deprecated [ 98.768458][ T2326] usb 5-1: USB disconnect, device number 2 [ 98.876995][ T6410] FAULT_INJECTION: forcing a failure. [ 98.876995][ T6410] name failslab, interval 1, probability 0, space 0, times 0 [ 98.881236][ T6410] CPU: 0 UID: 0 PID: 6410 Comm: syz.0.109 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.881254][ T6410] Tainted: [L]=SOFTLOCKUP [ 98.881257][ T6410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.881264][ T6410] Call Trace: [ 98.881267][ T6410] [ 98.881271][ T6410] dump_stack_lvl+0x100/0x190 [ 98.881286][ T6410] should_fail_ex.cold+0x5/0xa [ 98.881297][ T6410] ? __kmalloc_noprof+0xba/0x840 [ 98.881310][ T6410] ? io_bind_prep+0x22d/0x4a0 [ 98.881325][ T6410] should_failslab+0xc2/0x120 [ 98.881334][ T6410] __kmalloc_noprof+0xe0/0x840 [ 98.881347][ T6410] io_bind_prep+0x22d/0x4a0 [ 98.881361][ T6410] io_submit_sqes+0xa03/0x2480 [ 98.881376][ T6410] __do_sys_io_uring_enter+0xa88/0x1b10 [ 98.881389][ T6410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.881404][ T6410] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 98.881419][ T6410] ? __fget_files+0x21f/0x3d0 [ 98.881435][ T6410] ? fput+0x79/0x100 [ 98.881453][ T6410] ? ksys_write+0x1ac/0x250 [ 98.881469][ T6410] ? __pfx_ksys_write+0x10/0x10 [ 98.881483][ T6410] ? rcu_is_watching+0x12/0xc0 [ 98.881499][ T6410] __do_fast_syscall_32+0xe7/0x970 [ 98.881514][ T6410] do_fast_syscall_32+0x32/0x70 [ 98.881528][ T6410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.881541][ T6410] RIP: 0023:0xf705efec [ 98.881553][ T6410] Code: Unable to access opcode bytes at 0xf705efc2. [ 98.881557][ T6410] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 98.881568][ T6410] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 98.881574][ T6410] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 98.881580][ T6410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.881586][ T6410] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.881591][ T6410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.881600][ T6410] [ 98.995835][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 99.007417][ T6415] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 99.014249][ T6414] netlink: 100 bytes leftover after parsing attributes in process `syz.0.111'. [ 99.017783][ T6414] netlink: 100 bytes leftover after parsing attributes in process `syz.0.111'. [ 99.393715][ T6430] netlink: 'syz.1.116': attribute type 2 has an invalid length. [ 99.986265][ T6435] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 100.034206][ T6437] FAULT_INJECTION: forcing a failure. [ 100.034206][ T6437] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.038760][ T6437] CPU: 2 UID: 0 PID: 6437 Comm: syz.0.119 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.038784][ T6437] Tainted: [L]=SOFTLOCKUP [ 100.038804][ T6437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.038815][ T6437] Call Trace: [ 100.038820][ T6437] [ 100.038826][ T6437] dump_stack_lvl+0x100/0x190 [ 100.038846][ T6437] should_fail_ex.cold+0x5/0xa [ 100.038863][ T6437] _copy_from_user+0x2e/0xd0 [ 100.038880][ T6437] kstrtouint_from_user+0xd6/0x1d0 [ 100.038916][ T6437] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 100.038938][ T6437] ? nilfs_palloc_freev+0x8f0/0x14e0 [ 100.038961][ T6437] proc_fail_nth_write+0x83/0x220 [ 100.038983][ T6437] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.039005][ T6437] ? __pfx___might_resched+0x10/0x10 [ 100.039027][ T6437] vfs_write+0x2aa/0x1050 [ 100.039052][ T6437] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.039079][ T6437] ? __pfx_vfs_write+0x10/0x10 [ 100.039101][ T6437] ? rcu_is_watching+0x12/0xc0 [ 100.039118][ T6437] ? __fget_files+0x21f/0x3d0 [ 100.039133][ T6437] ksys_write+0x12a/0x250 [ 100.039147][ T6437] ? __pfx_ksys_write+0x10/0x10 [ 100.039161][ T6437] ? rcu_is_watching+0x12/0xc0 [ 100.039175][ T6437] ? rcu_is_watching+0x12/0xc0 [ 100.039190][ T6437] do_int80_emulation+0x14b/0x720 [ 100.039213][ T6437] asm_int80_emulation+0x1a/0x20 [ 100.039228][ T6437] RIP: 0023:0xf71971eb [ 100.039239][ T6437] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.039254][ T6437] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 100.039269][ T6437] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f544d5d0 [ 100.039278][ T6437] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.039287][ T6437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.039296][ T6437] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.039304][ T6437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.039318][ T6437] [ 100.455178][ T6449] netlink: 'syz.2.122': attribute type 3 has an invalid length. [ 100.608287][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 100.672602][ T6454] vlan2: entered promiscuous mode [ 100.674849][ T6454] bridge0: entered promiscuous mode [ 100.854266][ T6466] Cannot find set identified by id 0 to match [ 100.877748][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 100.879827][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 100.981732][ T6468] ceph: No mds server is up or the cluster is laggy [ 101.183226][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 101.298885][ T5840] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 101.448946][ T5840] usb 8-1: Using ep0 maxpacket: 8 [ 101.451799][ T5840] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 101.455017][ T5840] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.457938][ T5840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.460977][ T5840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.463998][ T5840] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.467886][ T5840] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.470954][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.570181][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 101.583806][ T6496] netlink: 100 bytes leftover after parsing attributes in process `syz.2.133'. [ 101.586844][ T6496] netlink: 100 bytes leftover after parsing attributes in process `syz.2.133'. [ 101.678040][ T5840] usb 8-1: GET_CAPABILITIES returned 0 [ 101.679890][ T5840] usbtmc 8-1:16.0: can't read capabilities [ 101.734742][ T5350] usb 8-1: USB disconnect, device number 2 [ 102.202860][ T6517] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 102.404675][ T6520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.139'. [ 102.408775][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 103.058873][ T5350] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 103.188907][ T5350] usb 6-1: device descriptor read/64, error -71 [ 103.259962][ T6528] xt_addrtype: ipv6 does not support BROADCAST matching [ 103.319921][ T6532] wg2 speed is unknown, defaulting to 1000 [ 103.449740][ T5350] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 103.477745][ T6537] syz.2.142 uses obsolete (PF_INET,SOCK_PACKET) [ 103.549174][ T5847] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.588870][ T5350] usb 6-1: device descriptor read/64, error -71 [ 103.678897][ T5847] usb 5-1: device descriptor read/64, error -71 [ 103.699003][ T5350] usb usb6-port1: attempt power cycle [ 103.918865][ T5847] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.038896][ T5350] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 104.059281][ T5350] usb 6-1: device descriptor read/8, error -71 [ 104.069055][ T5847] usb 5-1: device descriptor read/64, error -71 [ 104.189121][ T5847] usb usb5-port1: attempt power cycle [ 104.299018][ T5350] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 104.319256][ T5350] usb 6-1: device descriptor read/8, error -71 [ 104.429187][ T5350] usb usb6-port1: unable to enumerate USB device [ 104.538917][ T5847] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.559256][ T5847] usb 5-1: device descriptor read/8, error -71 [ 104.677089][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 104.677105][ T42] audit: type=1400 audit(1781903946.321:49): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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f2fs: Unknown parameter 'barrierqg\už m:%p.[_K' [ 104.745081][ T6561] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 104.808933][ T5847] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.829527][ T5847] usb 5-1: device descriptor read/8, error -71 [ 104.938967][ T5847] usb usb5-port1: unable to enumerate USB device [ 105.092736][ T6563] IPv6: syztnl0: Disabled Multicast RS [ 105.990990][ T6575] binder: BINDER_SET_CONTEXT_MGR already set [ 105.993650][ T6575] binder: 6574:6575 ioctl 4018620d 80000480 returned -16 [ 105.999035][ T6575] binder: 6574:6575 ioctl c0306201 80000640 returned -22 [ 106.002555][ T6575] binder: 6574:6575 ioctl 2282 80000180 returned -22 [ 106.007380][ T6575] binder: 6574:6575 ioctl 402c542b 80000280 returned -22 [ 106.011336][ T6575] binder: 6574:6575 ioctl c0306201 800004c0 returned -14 [ 106.015143][ T6575] binder: 6574:6575 ioctl c0306201 800001c0 returned -14 [ 106.133677][ T6578] Bluetooth: MGMT ver 1.23 [ 106.424231][ T42] audit: type=1326 audit(1781903948.071:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 106.435489][ T6589] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.439066][ T42] audit: type=1326 audit(1781903948.071:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 106.450393][ T42] audit: type=1326 audit(1781903948.081:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.161" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 106.458649][ T42] audit: type=1326 audit(1781903948.081:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 106.469548][ T42] audit: type=1326 audit(1781903948.081:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.161" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 106.476363][ T42] audit: type=1326 audit(1781903948.081:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 106.484128][ T42] audit: type=1326 audit(1781903948.081:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.161" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 106.494804][ T42] audit: type=1326 audit(1781903948.081:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 106.502033][ T42] audit: type=1326 audit(1781903948.091:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 106.677984][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 106.686649][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 107.318951][ T6604] 9pnet_virtio: no channels available for device syz [ 107.838419][ T1163] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 108.680608][ T6634] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.703019][ T6632] tmpfs: Unknown parameter 'mpolol' [ 109.047290][ T6645] wg2 speed is unknown, defaulting to 1000 [ 109.609117][ T56] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 109.780453][ T56] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 109.786114][ T56] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 109.793900][ T56] usb 5-1: config 0 has no interface number 0 [ 109.795775][ T56] usb 5-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 109.808956][ T56] usb 5-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 109.813598][ T56] usb 5-1: config 0 interface 143 has no altsetting 0 [ 109.819993][ T56] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 109.828909][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.831498][ T56] usb 5-1: Product: syz [ 109.832811][ T56] usb 5-1: Manufacturer: syz [ 109.834227][ T56] usb 5-1: SerialNumber: syz [ 109.841285][ T56] usb 5-1: config 0 descriptor?? [ 110.059838][ T56] usb 5-1: USB disconnect, device number 7 [ 110.354695][ T6690] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 110.357006][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.368222][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 110.450055][ T6691] vhci_hcd: connection closed [ 110.450226][ T5799] vhci_hcd vhci_hcd.3: stop threads [ 110.453511][ T5799] vhci_hcd vhci_hcd.3: release socket [ 110.455341][ T5799] vhci_hcd vhci_hcd.3: disconnect device [ 110.488895][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.498001][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 110.505559][ T6695] vlan2: entered allmulticast mode [ 110.507595][ T6695] bond0: entered allmulticast mode [ 110.509337][ T6695] bond_slave_0: entered allmulticast mode [ 110.511191][ T6695] bond_slave_1: entered allmulticast mode [ 110.514532][ T6695] netlink: 14 bytes leftover after parsing attributes in process `syz.3.194'. [ 110.523436][ T6695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.526290][ T6695] bond_slave_0: left allmulticast mode [ 110.529242][ T6695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.532267][ T6695] bond_slave_1: left allmulticast mode [ 110.534377][ T6695] bond0 (unregistering): Released all slaves [ 110.638855][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 110.641998][ T9] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 110.644984][ T9] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 110.648321][ T9] usb 5-1: config 0 has no interface number 0 [ 110.650733][ T9] usb 5-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 110.654205][ T9] usb 5-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 110.658330][ T9] usb 5-1: config 0 interface 143 has no altsetting 0 [ 110.662840][ T9] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 110.665642][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.668113][ T9] usb 5-1: Product: syz [ 110.669511][ T9] usb 5-1: Manufacturer: syz [ 110.671146][ T9] usb 5-1: SerialNumber: syz [ 110.673642][ T9] usb 5-1: config 0 descriptor?? [ 110.811811][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 110.815649][ T6710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.199'. [ 110.916988][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.921298][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.931508][ T9] usb 5-1: USB disconnect, device number 8 [ 111.051541][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 111.999415][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 112.007592][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 112.227235][ T6750] netlink: 48 bytes leftover after parsing attributes in process `syz.1.208'. [ 112.439102][ T6758] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 112.976797][ T6779] netlink: 348 bytes leftover after parsing attributes in process `syz.2.215'. [ 113.744912][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 113.776634][ T6797] binfmt_misc: Unknown parameter 'I[_}Vs%2l /yQl>N M&F~J"ַȣࡒCI' [ 113.807169][ T6801] binder_alloc: 6792: binder_alloc_buf, no vma [ 113.896094][ T6802] wg2 speed is unknown, defaulting to 1000 [ 114.097568][ T6818] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.721999][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 114.743689][ T6822] can0: slcan on ttynull. [ 114.979158][ T6822] can0 (unregistered): slcan off ttynull. [ 115.059026][ T5847] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 115.127238][ T6850] dummy0: entered promiscuous mode [ 115.131875][ T6850] erspan0: entered promiscuous mode [ 115.135468][ T6850] hsr1: entered allmulticast mode [ 115.137674][ T6850] dummy0: entered allmulticast mode [ 115.140275][ T6850] erspan0: entered allmulticast mode [ 115.224745][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 115.229023][ T5847] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 115.232542][ T5847] usb 7-1: config 0 has no interface number 0 [ 115.235185][ T5847] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.239634][ T5847] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 115.243914][ T5847] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 115.247914][ T5847] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.255285][ T5847] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 115.258918][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.261440][ T5847] usb 7-1: Product: syz [ 115.262826][ T5847] usb 7-1: Manufacturer: syz [ 115.264437][ T5847] usb 7-1: SerialNumber: syz [ 115.266899][ T5847] usb 7-1: config 0 descriptor?? [ 115.272715][ T5847] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input6 [ 115.355235][ T6857] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.685545][ T5350] usb 7-1: USB disconnect, device number 3 [ 116.247705][ T2326] libceph: connect (1)[c::]:6789 error -101 [ 116.249771][ T2326] libceph: mon0 (1)[c::]:6789 connect error [ 116.536775][ T2326] libceph: connect (1)[c::]:6789 error -101 [ 116.536834][ T2326] libceph: mon0 (1)[c::]:6789 connect error [ 117.039188][ T2326] libceph: connect (1)[c::]:6789 error -101 [ 117.041284][ T2326] libceph: mon0 (1)[c::]:6789 connect error [ 117.069193][ T6922] ubi: mtd0 is already attached to ubi16 [ 117.903461][ T6918] wg2 speed is unknown, defaulting to 1000 [ 117.924114][ T6928] veth1_to_batadv: entered promiscuous mode [ 117.926183][ T6928] macsec1: entered promiscuous mode [ 117.927191][ T6880] ceph: No mds server is up or the cluster is laggy [ 118.013648][ T6920] could not allocate digest TFM handle blake2b-512 [ 118.087664][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 118.087675][ T42] audit: type=1326 audit(1781903959.731:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 118.096804][ T42] audit: type=1326 audit(1781903959.741:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 118.103553][ T42] audit: type=1326 audit(1781903959.751:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71671eb code=0x7ffc0000 [ 118.110501][ T42] audit: type=1326 audit(1781903959.751:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 118.118336][ T42] audit: type=1326 audit(1781903959.751:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 118.137466][ T6937] input: syz0 as /devices/virtual/input/input7 [ 118.141937][ T42] audit: type=1326 audit(1781903959.761:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 118.151296][ T42] audit: type=1326 audit(1781903959.761:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 118.198984][ T42] audit: type=1326 audit(1781903959.761:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 118.207558][ T42] audit: type=1326 audit(1781903959.761:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 118.217080][ T42] audit: type=1326 audit(1781903959.761:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 118.242476][ T6944] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.355888][ T6948] sch_tbf: peakrate 1144786952152247913 is lower than or equals to rate 14721371165588982144 ! [ 118.400150][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 118.410493][ T6948] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 118.410831][ T6954] ip6t_srh: unknown srh invflags 4000 [ 118.527983][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 119.148456][ T6974] xt_SECMARK: invalid mode: 0 [ 119.198226][ T6978] netlink: 'syz.3.263': attribute type 10 has an invalid length. [ 119.203307][ T6978] syz_tun: entered promiscuous mode [ 119.437670][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 120.656245][ T6986] tmpfs: User quota block hardlimit too large. [ 120.730194][ T6995] fuse: Bad value for 'fd' [ 120.928474][ T7002] overlay: Unknown parameter '/' [ 121.937689][ T7020] netlink: 72 bytes leftover after parsing attributes in process `syz.2.276'. [ 121.963903][ T7020] 9p: Bad value for 'rfdno' [ 122.310496][ T7042] netlink: 84 bytes leftover after parsing attributes in process `syz.0.283'. [ 122.314711][ T7042] netlink: 84 bytes leftover after parsing attributes in process `syz.0.283'. [ 122.318365][ T7043] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.321565][ T7043] overlayfs: failed to set xattr on upper [ 122.323421][ T7043] overlayfs: ...falling back to redirect_dir=nofollow. [ 122.325710][ T7043] overlayfs: ...falling back to metacopy=off. [ 122.327819][ T7043] overlayfs: ...falling back to index=off. [ 122.330518][ T7043] overlayfs: ...falling back to uuid=null. [ 122.396750][ T7054] netlink: 292 bytes leftover after parsing attributes in process `syz.0.286'. [ 122.437588][ T7059] Illegal XDP return value 4294967274 on prog (id 47) dev N/A, expect packet loss! [ 122.522817][ T7064] netlink: 'syz.0.289': attribute type 4 has an invalid length. [ 122.525973][ T7064] netlink: 17 bytes leftover after parsing attributes in process `syz.0.289'. [ 122.531398][ T7064] overlayfs: failed to resolve './file2': -2 [ 122.635040][ T7071] gtp0: entered allmulticast mode [ 123.003306][ T56] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.158949][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 123.166316][ T56] usb 5-1: config 4 has an invalid interface number: 248 but max is 1 [ 123.172052][ T56] usb 5-1: config 4 has an invalid interface number: 31 but max is 1 [ 123.175461][ T56] usb 5-1: config 4 has an invalid interface number: 206 but max is 1 [ 123.178780][ T56] usb 5-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 123.182752][ T56] usb 5-1: config 4 has no interface number 0 [ 123.185030][ T56] usb 5-1: config 4 has no interface number 1 [ 123.187453][ T56] usb 5-1: config 4 has no interface number 2 [ 123.189966][ T56] usb 5-1: config 4 interface 248 altsetting 20 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 123.194346][ T56] usb 5-1: config 4 interface 31 altsetting 211 has an invalid descriptor for endpoint zero, skipping [ 123.198761][ T56] usb 5-1: too many endpoints for config 4 interface 206 altsetting 95: 191, using maximum allowed: 30 [ 123.203564][ T56] usb 5-1: config 4 interface 206 altsetting 95 has 0 endpoint descriptors, different from the interface descriptor's value: 191 [ 123.208994][ T56] usb 5-1: config 4 interface 248 has no altsetting 0 [ 123.211782][ T56] usb 5-1: config 4 interface 31 has no altsetting 0 [ 123.214791][ T56] usb 5-1: config 4 interface 206 has no altsetting 0 [ 123.219209][ T56] usb 5-1: New USB device found, idVendor=1199, idProduct=9060, bcdDevice=2a.96 [ 123.223085][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.228606][ T56] usb 5-1: Product: ࠾ [ 123.232655][ T56] usb 5-1: Manufacturer: 鶗ۜ⟃왊⤙訫봲꣖ꥩ↜痢套஡㒱〣췵쬘夠ⷭ⠍큃㓜윺姠⥝፹捼ቕ퍫㹷 [ 123.243221][ T56] usb 5-1: SerialNumber: 颂鍹Ӽ辒핺쇛떄㜛뿓Đ칳鬓䠊⫌㘐⢅塐멖╭憧憂꣯☝䋗ଉﹹ炃싰철⸊턽ᬉ౭ꄛ䎰ݩ蓁軫ﴶ慿ʟᅹງ喥᪭ᮖ勜ిﲗﻔ翣뻞釮䬢狟枞﵆텋᧲쉛圿忽撑ᐢ꜆㇏簁伓駢齉ㆿ꪿⑭衼䕠뙋䰿ݽ勗ꄞ뮊୲Ꮇ떪｡㚸뇡䜢䨮璗͝㞬ꜭ [ 123.401308][ T7117] can0: slcan on ttyS3. [ 123.474364][ T56] usb 5-1: USB disconnect, device number 9 [ 123.483340][ T7117] can0 (unregistered): slcan off ttyS3. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) [ 123.520490][ T5832] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 123.541581][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 123.548877][ T1132] ata1: failed to read log page 10h (errno=-5) [ 123.553544][ T1132] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 123.558587][ T1132] ata1.00: irq_stat 0x41000000 [ 123.560514][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 123.564945][ T1132] ata1.00: cmd 60/40:70:ee:3a:01/05:00:00:00:00/40 tag 14 ncq dma 688128 in [ 123.564945][ T1132] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 123.570379][ T1132] ata1.00: status: { DRDY } [ 123.571789][ T1132] ata1.00: error: { ABRT } [ 123.573922][ T1132] ata1.00: configured for UDMA/100 [ 123.575819][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 123.579720][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 123.582122][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 123.584661][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 3a ee 00 05 40 00 [ 123.587241][ T1132] I/O error, dev sda, sector 80622 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 123.591162][ T1132] ata1: EH complete [ 123.719035][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 123.722215][ T5832] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.725356][ T5832] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.729504][ T5832] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 123.732425][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.734919][ T5832] usb 6-1: Product: syz [ 123.736203][ T5832] usb 6-1: Manufacturer: syz [ 123.737618][ T5832] usb 6-1: SerialNumber: syz [ 123.946244][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.302'. [ 123.972054][ T7142] bridge_slave_0: left allmulticast mode [ 123.973978][ T7142] bridge_slave_0: left promiscuous mode [ 123.976007][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.034136][ T42] kauditd_printk_skb: 66 callbacks suppressed [ 124.034171][ T42] audit: type=1326 audit(1781903965.681:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.043128][ T42] audit: type=1326 audit(1781903965.681:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.049825][ T42] audit: type=1326 audit(1781903965.691:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.058783][ T42] audit: type=1326 audit(1781903965.691:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.068488][ T42] audit: type=1326 audit(1781903965.691:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.076246][ T42] audit: type=1326 audit(1781903965.691:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.092432][ T42] audit: type=1326 audit(1781903965.691:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.103134][ T7142] bridge_slave_1: left allmulticast mode [ 124.105565][ T7142] bridge_slave_1: left promiscuous mode [ 124.108114][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.108721][ T42] audit: type=1326 audit(1781903965.701:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.117684][ T42] audit: type=1326 audit(1781903965.701:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.124641][ T42] audit: type=1326 audit(1781903965.701:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705efec code=0x7ffc0000 [ 124.295933][ T7142] team0: Port device team_slave_0 removed [ 124.662364][ T7142] team0: Port device team_slave_1 removed [ 124.666464][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.669536][ T7142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.674019][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.679579][ T7142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.710850][ T7142] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.858841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.967989][ T7162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 124.969991][ T7162] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.974145][ T7162] vhci_hcd vhci_hcd.0: Device attached [ 124.984813][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.990681][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.268917][ T50] usb 42-1: SetAddress Request (6) to port 0 [ 125.270933][ T50] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 125.597928][ T7163] vhci_hcd: connection reset by peer [ 125.600720][ T5823] vhci_hcd vhci_hcd.2: stop threads [ 125.603043][ T5823] vhci_hcd vhci_hcd.2: release socket [ 125.605481][ T5823] vhci_hcd vhci_hcd.2: disconnect device [ 125.808875][ T5847] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.960347][ T5847] usb 5-1: config index 0 descriptor too short (expected 65512, got 45) [ 125.965514][ T5847] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 125.969423][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.972691][ T5847] usb 5-1: Product: syz [ 125.974406][ T5847] usb 5-1: Manufacturer: syz [ 125.976264][ T5847] usb 5-1: SerialNumber: syz [ 126.197353][ T5847] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 126.207466][ T5847] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 126.211244][ T5847] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 126.215752][ T5847] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 126.223354][ T5847] usb 5-1: USB disconnect, device number 10 [ 126.303722][ T5832] usb 6-1: USB disconnect, device number 6 [ 126.329157][ T7173] libceph: connect (1)[c::]:6789 error -101 [ 126.333006][ T7173] libceph: mon0 (1)[c::]:6789 connect error [ 126.385796][ T7179] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.589398][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 126.591800][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 127.099298][ T7173] libceph: connect (1)[c::]:6789 error -101 [ 127.101355][ T7173] libceph: mon0 (1)[c::]:6789 connect error [ 127.118735][ T7181] ceph: No mds server is up or the cluster is laggy [ 128.424390][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.435588][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.442889][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.447301][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.452004][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.456366][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.461414][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.465456][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.470151][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 129.910305][ T7249] __nla_validate_parse: 24 callbacks suppressed [ 129.910324][ T7249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.333'. [ 129.949033][ T5832] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 130.016347][ T5823] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.019986][ T5823] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.023558][ T5823] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.027137][ T5823] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.100111][ T5832] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 130.103558][ T5832] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.107717][ T5832] usb 7-1: config 0 has no interface number 0 [ 130.110674][ T5832] usb 7-1: config 0 interface 205 has no altsetting 0 [ 130.115570][ T5832] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 130.119343][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.122620][ T5832] usb 7-1: Product: syz [ 130.124373][ T5832] usb 7-1: Manufacturer: syz [ 130.124387][ T5832] usb 7-1: SerialNumber: syz [ 130.129498][ T5832] usb 7-1: config 0 descriptor?? [ 130.134146][ T5832] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 130.138623][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 130.160741][ T5832] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 130.164617][ T5832] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 130.169349][ T5832] usb 7-1: media controller created [ 130.174374][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.181699][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 130.184161][ T5832] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 130.190411][ T5832] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input8 [ 130.196129][ T5832] dvb-usb: schedule remote query interval to 150 msecs. [ 130.199078][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 130.218888][ T5832] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 130.348939][ T50] usb 42-1: device descriptor read/8, error -110 [ 130.360682][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 130.364296][ T5832] dvb-usb: error while querying for an remote control event. [ 130.392846][ T7273] netlink: 'syz.0.339': attribute type 10 has an invalid length. [ 130.401123][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.405323][ T7273] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 130.538870][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 130.540713][ T5832] dvb-usb: error while querying for an remote control event. [ 130.708962][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 130.711606][ T5832] dvb-usb: error while querying for an remote control event. [ 130.742670][ T50] usb usb42-port1: attempt power cycle [ 130.806403][ T7286] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.878888][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 130.881193][ T5832] dvb-usb: error while querying for an remote control event. [ 130.984831][ T7291] netlink: 92 bytes leftover after parsing attributes in process `syz.1.345'. [ 131.038999][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 131.042430][ T5832] dvb-usb: error while querying for an remote control event. [ 131.199014][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 131.201254][ T5832] dvb-usb: error while querying for an remote control event. [ 131.321648][ T50] usb usb42-port1: unable to enumerate USB device [ 131.353682][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 131.358976][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 131.361654][ T5832] dvb-usb: error while querying for an remote control event. [ 131.520396][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 131.539015][ T5832] dvb-usb: error while querying for an remote control event. [ 131.699020][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 131.701749][ T5832] dvb-usb: error while querying for an remote control event. [ 131.849412][ T50] usb 7-1: USB disconnect, device number 4 [ 131.917634][ T50] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 132.811664][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 132.928930][ T5832] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.079780][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 133.082584][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 133.086009][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 133.089237][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 133.093934][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 133.101322][ T5832] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 133.105062][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.107925][ T5832] usb 5-1: Product: syz [ 133.109611][ T5832] usb 5-1: Manufacturer: syz [ 133.111193][ T5832] usb 5-1: SerialNumber: syz [ 133.114347][ T5832] usb 5-1: config 0 descriptor?? [ 133.118200][ T5832] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 133.118406][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 133.122421][ T5133] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.128315][ T5133] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.134493][ T5133] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.137937][ T5133] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.158307][ T5133] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.161908][ T5746] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.165438][ T5133] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.177033][ T5133] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.419824][ T7313] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.453228][ T5832] usb 5-1: USB disconnect, device number 11 [ 133.790008][ T7335] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.002310][ T7338] netlink: 'syz.0.361': attribute type 13 has an invalid length. [ 134.061880][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 134.455679][ T7356] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.642181][ T7368] xt_TCPMSS: Only works on TCP SYN packets [ 135.667920][ T7368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.373'. [ 135.926252][ T7373] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 135.928209][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 136.038931][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 136.169639][ T7376] ./bus: Can't lookup blockdev [ 136.299344][ T50] usb 44-1: SetAddress Request (2) to port 0 [ 136.301339][ T50] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 136.385316][ T7389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.790852][ T7374] vhci_hcd: connection reset by peer [ 136.793430][ T5823] vhci_hcd vhci_hcd.3: stop threads [ 136.803092][ T5823] vhci_hcd vhci_hcd.3: release socket [ 136.809015][ T5823] vhci_hcd vhci_hcd.3: disconnect device [ 136.825800][ T7391] /dev/sg0: Can't lookup blockdev [ 136.879815][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.378'. [ 137.470527][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.473187][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.650633][ T7401] 9p: Bad value for 'rfdno' [ 137.650674][ T7400] 9p: Bad value for 'rfdno' [ 137.652787][ T7401] kernel read not supported for file /eth0 (pid: 7401 comm: syz.3.380) [ 137.657618][ T42] kauditd_printk_skb: 115 callbacks suppressed [ 137.657633][ T42] audit: type=1800 audit(1781903979.301:291): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.380" name="eth0" dev="mqueue" ino=17609 res=0 errno=0 [ 137.670111][ T5099] Bluetooth: hci0: Malformed LE Event: 0x0d [ 137.754906][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 137.758699][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 137.763101][ T7411] loop5: detected capacity change from 0 to 2640 [ 137.767373][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.770753][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.773425][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.777357][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.781186][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.785280][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.788655][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.793568][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.796917][ T7411] ldm_validate_partition_table(): Disk read failed. [ 137.800004][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.803450][ T7411] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.806910][ T7411] Dev loop5: unable to read RDB block 0 [ 137.809985][ T7411] loop5: unable to read partition table [ 137.812576][ T7411] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 137.841262][ T7411] netlink: 'syz.1.383': attribute type 1 has an invalid length. [ 137.849308][ T7411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.863231][ T7411] bond1: (slave veth3): Enslaving as an active interface with a down link [ 137.872505][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 137.875654][ T7411] bond1: (slave batadv1): making interface the new active one [ 137.878624][ T7411] batadv1: entered promiscuous mode [ 137.880776][ T7411] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 137.998952][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 138.017076][ T7416] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.108344][ T7424] loop8: detected capacity change from 0 to 7 [ 138.111158][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.114874][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.118841][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.124345][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.128845][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.132502][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.136536][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.141518][ T7424] ldm_validate_partition_table(): Disk read failed. [ 138.145081][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.148672][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.150265][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 138.152948][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.162556][ T7424] Dev loop8: unable to read RDB block 0 [ 138.165308][ T7424] loop8: unable to read partition table [ 138.167821][ T7424] loop8: partition table beyond EOD, truncated [ 138.168952][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.172378][ T7424] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 138.176719][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 138.193083][ T24] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 138.193106][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.193124][ T24] usb 8-1: Product: syz [ 138.193138][ T24] usb 8-1: Manufacturer: syz [ 138.193151][ T24] usb 8-1: SerialNumber: syz [ 138.194361][ T24] usb 8-1: config 0 descriptor?? [ 138.238976][ T7426] Invalid logical block size (8) [ 138.326827][ T7431] fuse: Bad value for 'fd' [ 138.334774][ T7428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.387'. [ 138.413676][ T24] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 138.613997][ T24] usb 8-1: USB disconnect, device number 3 [ 138.642181][ T7442] wg2 speed is unknown, defaulting to 1000 [ 138.666697][ T7439] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 138.679622][ T7439] bond2: entered promiscuous mode [ 138.682227][ T7439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.693763][ T7439] bond2 (unregistering): Released all slaves [ 138.813815][ T7442] can: request_module (can-proto-0) failed. [ 138.839480][ T7453] tmpfs: Bad value for 'mpol' [ 139.058911][ T845] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.208949][ T845] usb 5-1: device descriptor read/64, error -71 [ 139.387038][ T7464] : renamed from bond_slave_0 [ 139.458891][ T845] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.588900][ T845] usb 5-1: device descriptor read/64, error -71 [ 139.699740][ T845] usb usb5-port1: attempt power cycle [ 140.030554][ T7478] overlay: Unknown parameter 'fscontext' [ 140.048982][ T845] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.069360][ T845] usb 5-1: device descriptor read/8, error -71 [ 140.151692][ T7487] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 140.156049][ T7487] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 140.161221][ T7487] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 140.166161][ T7487] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.173571][ T7487] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 140.281663][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 140.308905][ T845] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 140.329290][ T845] usb 5-1: device descriptor read/8, error -71 [ 140.451274][ T845] usb usb5-port1: unable to enumerate USB device [ 141.389377][ T50] usb 44-1: device descriptor read/8, error -110 [ 141.779932][ T50] usb usb44-port1: attempt power cycle [ 142.027349][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 142.343969][ T50] usb usb44-port1: unable to enumerate USB device [ 142.646061][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 142.952961][ T7521] wg2 speed is unknown, defaulting to 1000 [ 143.806081][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 144.399370][ T7557] netlink: 116 bytes leftover after parsing attributes in process `syz.3.422'. [ 145.267997][ T7566] befs: (loop0): No write support. Marking filesystem read-only [ 145.271287][ T7566] befs: (loop0): unable to read superblock [ 145.349734][ T7574] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 145.352617][ T7574] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 145.358026][ T7574] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 145.955875][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 146.008451][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 146.390375][ T7613] program syz.2.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.647963][ T7598] syzkaller0: entered promiscuous mode [ 146.649874][ T7598] syzkaller0: entered allmulticast mode [ 146.679073][ T50] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 146.928922][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 146.933275][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 146.939253][ T50] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 146.942702][ T50] usb 6-1: config 8 has no interface number 0 [ 146.946100][ T50] usb 6-1: config 8 interface 188 has no altsetting 0 [ 146.957723][ T50] usb 6-1: string descriptor 0 read error: -22 [ 146.962915][ T50] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 146.970903][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 146.974544][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.984780][ T50] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 146.991669][ T50] dw2102: su3000_power_ctrl: 1, initialized 0 [ 146.998620][ T50] dvb-usb: bulk message failed: -22 (2/0) [ 147.011837][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.015406][ T50] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 147.018485][ T50] usb 6-1: media controller created [ 147.020370][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 147.022283][ T50] dw2102: i2c transfer failed. [ 147.023922][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 147.025795][ T50] dw2102: i2c transfer failed. [ 147.027335][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 147.029460][ T50] dw2102: i2c transfer failed. [ 147.031065][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 147.033026][ T50] dw2102: i2c transfer failed. [ 147.034591][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 147.036459][ T50] dw2102: i2c transfer failed. [ 147.038061][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 147.039947][ T50] dw2102: i2c transfer failed. [ 147.041682][ T50] dvb-usb: MAC address: 02:02:02:02:02:02 [ 147.055057][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.068646][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 147.070877][ T50] dw2102: command 0x0e transfer failed. [ 147.072689][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 147.074521][ T50] dw2102: command 0x0e transfer failed. [ 147.239003][ T845] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 147.388907][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 147.390896][ T50] dw2102: command 0x0e transfer failed. [ 147.392899][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 147.394793][ T50] dw2102: command 0x0e transfer failed. [ 147.396602][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 147.398620][ T50] dw2102: command 0x51 transfer failed. [ 147.401483][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.406394][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.410817][ T845] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.416605][ T845] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.420667][ T50] DVB: Unable to find symbol ds3000_attach() [ 147.420670][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.421779][ T845] usb 8-1: config 0 descriptor?? [ 147.423596][ T50] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 147.478902][ T50] rc_core: IR keymap rc-su3000 not found [ 147.481397][ T50] Registered IR keymap rc-empty [ 147.487514][ T50] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 147.494553][ T50] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input10 [ 147.502254][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 147.505326][ T50] dw2102: su3000_power_ctrl: 0, initialized 1 [ 147.507665][ T50] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 147.515003][ T50] usb 6-1: USB disconnect, device number 7 [ 147.564953][ T50] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 147.730059][ T7643] binder: 7642:7643 ioctl 941c 0 returned -22 [ 147.741193][ T7643] [U] v3f"S/4:XTzWtlW= [ 147.744039][ T7643] [U] J"e:" [ 147.790956][ T7649] wg2 speed is unknown, defaulting to 1000 [ 147.839112][ T7639] netlink: 36 bytes leftover after parsing attributes in process `syz.3.445'. [ 147.850497][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 147.857477][ T845] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 147.860538][ T845] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 147.870392][ T845] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 147.872835][ T845] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 147.875615][ T845] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 147.878440][ T845] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 147.880837][ T845] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 147.885445][ T845] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 147.893996][ T7655] netlink: 56 bytes leftover after parsing attributes in process `syz.1.450'. [ 147.927534][ T7655] wg2 speed is unknown, defaulting to 1000 [ 148.063634][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 148.085997][ T7639] syzkaller1: entered promiscuous mode [ 148.088439][ T7639] syzkaller1: entered allmulticast mode [ 149.071245][ T7676] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 149.073270][ T7676] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.076734][ T7676] vhci_hcd vhci_hcd.0: Device attached [ 149.079495][ T5799] batadv1: left promiscuous mode [ 149.154958][ T7676] rdma_rxe: rxe_newlink: failed to add wg2 [ 149.178886][ T5757] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 149.268884][ T5847] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 149.338931][ T50] usb 38-1: SetAddress Request (2) to port 0 [ 149.338935][ T5757] usb 6-1: Using ep0 maxpacket: 32 [ 149.340498][ T5757] usb 6-1: unable to get BOS descriptor or descriptor too short [ 149.340828][ T50] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 149.343425][ T5757] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 149.350279][ T5757] usb 6-1: config 8 has no interface number 0 [ 149.352224][ T5757] usb 6-1: config 8 interface 188 has no altsetting 0 [ 149.358278][ T5757] usb 6-1: string descriptor 0 read error: -22 [ 149.360577][ T5757] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 149.363424][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.368168][ T5757] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 149.371071][ T5757] dw2102: su3000_power_ctrl: 1, initialized 0 [ 149.458100][ T5757] dvb-usb: bulk message failed: -22 (2/0) [ 149.462736][ T5757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.468954][ T5099] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 149.469060][ T5757] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 149.472502][ T5099] Bluetooth: hci1: Injecting HCI hardware error event [ 149.472582][ T64] Bluetooth: hci1: hardware error 0x00 [ 149.477749][ T5757] usb 6-1: media controller created [ 149.482049][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 149.484282][ T5757] dw2102: i2c transfer failed. [ 149.486226][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 149.488369][ T5757] dw2102: i2c transfer failed. [ 149.490013][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 149.492530][ T5757] dw2102: i2c transfer failed. [ 149.494564][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 149.496323][ T5757] dw2102: i2c transfer failed. [ 149.498027][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 149.500426][ T5757] dw2102: i2c transfer failed. [ 149.502118][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 149.504090][ T5757] dw2102: i2c transfer failed. [ 149.506058][ T5757] dvb-usb: MAC address: 02:02:02:02:02:02 [ 149.511896][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.520176][ T5757] dvb-usb: bulk message failed: -22 (3/0) [ 149.522794][ T5757] dw2102: command 0x0e transfer failed. [ 149.524867][ T5757] dvb-usb: bulk message failed: -22 (3/0) [ 149.526605][ T5757] dw2102: command 0x0e transfer failed. [ 149.598181][ T7682] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 149.600888][ T7682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.618912][ T7682] vhci_hcd vhci_hcd.0: Device attached [ 149.623636][ T7677] vhci_hcd: connection reset by peer [ 149.631092][ T5799] vhci_hcd vhci_hcd.0: stop threads [ 149.633439][ T5799] vhci_hcd vhci_hcd.0: release socket [ 149.637311][ T5799] vhci_hcd vhci_hcd.0: disconnect device [ 149.838903][ T5757] dvb-usb: bulk message failed: -22 (3/0) [ 149.840742][ T5757] dw2102: command 0x0e transfer failed. [ 149.842462][ T5757] dvb-usb: bulk message failed: -22 (3/0) [ 149.844149][ T5757] dw2102: command 0x0e transfer failed. [ 149.845798][ T5757] dvb-usb: bulk message failed: -22 (1/0) [ 149.847739][ T5757] dw2102: command 0x51 transfer failed. [ 149.860750][ T5757] DVB: Unable to find symbol ds3000_attach() [ 149.862686][ T5757] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 149.878894][ T29] usb 42-1: SetAddress Request (10) to port 0 [ 149.880800][ T29] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 149.898962][ T5757] rc_core: IR keymap rc-su3000 not found [ 149.901626][ T5757] Registered IR keymap rc-empty [ 149.904671][ T5757] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 149.909377][ T5757] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input12 [ 149.914054][ T5757] dvb-usb: schedule remote query interval to 150 msecs. [ 149.916641][ T5757] dw2102: su3000_power_ctrl: 0, initialized 1 [ 149.919169][ T5757] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 149.923805][ T5757] usb 6-1: USB disconnect, device number 8 [ 149.937470][ T5757] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 149.942152][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 149.950334][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 149.957540][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 149.964373][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 150.080128][ T1041] usb 8-1: USB disconnect, device number 4 [ 150.208738][ T7683] vhci_hcd: connection reset by peer [ 150.212412][ T5799] vhci_hcd vhci_hcd.2: stop threads [ 150.214577][ T5799] vhci_hcd vhci_hcd.2: release socket [ 150.216384][ T5799] vhci_hcd vhci_hcd.2: disconnect device [ 150.250432][ T42] audit: type=1326 audit(1781903991.901:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.461" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 150.302188][ T7705] netlink: 220 bytes leftover after parsing attributes in process `syz.0.461'. [ 150.344185][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 150.348338][ T7706] x_tables: duplicate underflow at hook 1 [ 150.896952][ T7716] wg2 speed is unknown, defaulting to 1000 [ 151.062204][ T7719] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 151.339035][ T5832] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 151.380218][ T845] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 151.488877][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 151.491954][ T5832] usb 6-1: unable to get BOS descriptor or descriptor too short [ 151.495525][ T5832] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 151.498542][ T5832] usb 6-1: config 8 has no interface number 0 [ 151.500783][ T5832] usb 6-1: config 8 interface 188 has no altsetting 0 [ 151.505367][ T5832] usb 6-1: string descriptor 0 read error: -22 [ 151.507523][ T5832] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 151.510944][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.516582][ T5832] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 151.519896][ T5832] dw2102: su3000_power_ctrl: 1, initialized 0 [ 151.522459][ T5832] dvb-usb: bulk message failed: -22 (2/0) [ 151.526652][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.528878][ T845] usb 5-1: Using ep0 maxpacket: 16 [ 151.530259][ T5832] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 151.533820][ T5832] usb 6-1: media controller created [ 151.534590][ T845] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 151.535438][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 151.538351][ T845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.540278][ T5832] dw2102: i2c transfer failed. [ 151.542805][ T845] usb 5-1: Product: syz [ 151.544193][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 151.544201][ T5832] dw2102: i2c transfer failed. [ 151.544206][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 151.544212][ T5832] dw2102: i2c transfer failed. [ 151.544216][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 151.545812][ T845] usb 5-1: Manufacturer: syz [ 151.547486][ T5832] dw2102: i2c transfer failed. [ 151.547493][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 151.547500][ T5832] dw2102: i2c transfer failed. [ 151.547504][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 151.547510][ T5832] dw2102: i2c transfer failed. [ 151.547513][ T5832] dvb-usb: MAC address: 02:02:02:02:02:02 [ 151.548920][ T64] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 151.549803][ T845] usb 5-1: SerialNumber: syz [ 151.550385][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.555002][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 151.576478][ T5832] dw2102: command 0x0e transfer failed. [ 151.578284][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 151.580192][ T5832] dw2102: command 0x0e transfer failed. [ 151.598940][ T5839] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 151.758948][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 151.761885][ T5839] usb 7-1: config 0 has no interfaces? [ 151.765239][ T5839] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 151.768477][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 151.771735][ T5839] usb 7-1: Product: syz [ 151.773140][ T5839] usb 7-1: Manufacturer: syz [ 151.774658][ T5839] usb 7-1: SerialNumber: syz [ 151.777818][ T5839] usb 7-1: config 0 descriptor?? [ 151.784214][ T845] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 151.788350][ T845] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 151.791728][ T845] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 151.794314][ T845] usb 5-1: media controller created [ 151.798579][ T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.888888][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 151.891165][ T5832] dw2102: command 0x0e transfer failed. [ 151.893054][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 151.894898][ T5832] dw2102: command 0x0e transfer failed. [ 151.896634][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 151.898463][ T5832] dw2102: command 0x51 transfer failed. [ 151.917124][ T5832] DVB: Unable to find symbol ds3000_attach() [ 151.919088][ T5832] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 151.958934][ T5832] rc_core: IR keymap rc-su3000 not found [ 151.960967][ T5832] Registered IR keymap rc-empty [ 151.963141][ T5832] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 151.966598][ T5832] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input13 [ 151.970808][ T5832] dvb-usb: schedule remote query interval to 150 msecs. [ 151.972938][ T5832] dw2102: su3000_power_ctrl: 0, initialized 1 [ 151.974785][ T5832] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 151.978068][ T5832] usb 6-1: USB disconnect, device number 9 [ 151.985790][ T7726] dvb-usb: bulk message failed: -22 (7/0) [ 151.987741][ T7726] dw2102: i2c transfer failed. [ 151.991961][ T64] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 151.992326][ T5839] usb 7-1: USB disconnect, device number 5 [ 151.993688][ T7726] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 152.003594][ T7726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.012523][ T7726] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 152.015934][ T7726] bond1: (slave batadv1): making interface the new active one [ 152.019279][ T7726] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 152.029386][ T845] zl10353_read_register: readreg error (reg=127, ret==-110) [ 152.029626][ T7726] bond1 (unregistering): (slave batadv1): Releasing active interface [ 152.035831][ T7726] bond1 (unregistering): Released all slaves [ 152.037438][ T845] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 152.115750][ T5832] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 152.121635][ T24] usb 5-1: USB disconnect, device number 16 [ 152.595527][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.597976][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.632950][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.637128][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.780074][ T7771] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.803194][ T5757] syz0: Port: 1 Link DOWN [ 152.805166][ T5823] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.812845][ T5823] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.818761][ T5823] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.821658][ T5823] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.937921][ T7774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 154.428963][ T50] usb 38-1: device descriptor read/8, error -110 [ 154.819553][ T50] usb usb38-port1: attempt power cycle [ 154.908995][ T29] usb 42-1: device descriptor read/8, error -110 [ 155.212665][ T7788] __nla_validate_parse: 1 callbacks suppressed [ 155.212679][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.487'. [ 155.271503][ T7794] wg2 speed is unknown, defaulting to 1000 [ 155.299239][ T29] usb usb42-port1: attempt power cycle [ 155.379413][ T50] usb usb38-port1: unable to enumerate USB device [ 155.628881][ T1041] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 155.647547][ T7799] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.088882][ T1041] usb 7-1: Using ep0 maxpacket: 16 [ 156.092445][ T1041] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.096542][ T1041] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.100375][ T1041] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.103380][ T1041] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.106397][ T1041] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.112266][ T1041] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.115192][ T1041] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.117674][ T1041] usb 7-1: Manufacturer: syz [ 156.120140][ T1041] usb 7-1: config 0 descriptor?? [ 156.139249][ T29] usb usb42-port1: unable to enumerate USB device [ 156.211108][ T7806] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.398944][ T1041] rc_core: IR keymap rc-hauppauge not found [ 156.403841][ T1041] Registered IR keymap rc-empty [ 156.406961][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.429085][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.450166][ T1041] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 156.455695][ T1041] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 156.462252][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.478933][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.498916][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.518986][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.538938][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.559294][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.578914][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.599026][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.618897][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.632641][ T7816] fuse: Unknown parameter '00000000000000000000' [ 156.638905][ T1041] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 156.659665][ T1041] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 156.663244][ T1041] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.670950][ T1041] usb 7-1: USB disconnect, device number 6 [ 156.768119][ T7821] netlink: 'syz.1.496': attribute type 10 has an invalid length. [ 156.771343][ T7821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.496'. [ 156.777723][ T7821] team0: Port device geneve1 added [ 157.034435][ T42] audit: type=1326 audit(1781903998.681:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.499" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 157.058889][ T5840] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 157.208865][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 157.212669][ T5840] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 157.216224][ T5840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.220232][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.224345][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.228433][ T5840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.233835][ T5840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.237551][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.445728][ T5840] usb 6-1: GET_CAPABILITIES returned 0 [ 157.447629][ T5840] usbtmc 6-1:16.0: can't read capabilities [ 157.526105][ T7834] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 157.538110][ T7834] bond0: entered promiscuous mode [ 157.540709][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.552341][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.555413][ T7834] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 157.561020][ T7834] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 157.566671][ T7834] bond0: (slave ip6gre1): making interface the new active one [ 157.569950][ T7834] ip6gre1: entered promiscuous mode [ 157.573206][ T7834] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 157.584000][ T7834] bond0 (unregistering): (slave ip6gre1): Releasing backup interface [ 157.586780][ T7834] ip6gre1: left promiscuous mode [ 157.589247][ T7834] bond0 (unregistering): Released all slaves [ 158.398958][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 159.340301][ T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 159.343785][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.347185][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 159.350015][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 159.352643][ T24] usb 5-1: Product: syz [ 159.353968][ T24] usb 5-1: Manufacturer: syz [ 159.355404][ T24] usb 5-1: SerialNumber: syz [ 159.357839][ T24] usb 5-1: config 0 descriptor?? [ 159.361255][ T24] usb 5-1: selecting invalid altsetting 0 [ 159.564510][ T24] usb 5-1: USB disconnect, device number 17 [ 159.826026][ T1041] usb 6-1: USB disconnect, device number 10 [ 160.059860][ T7871] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.076464][ T42] audit: type=1804 audit(1781904001.721:294): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.513" name="/newroot/126/file0" dev="tmpfs" ino=711 res=1 errno=0 [ 161.189474][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 161.370794][ T42] audit: type=1326 audit(1781904003.021:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7895 comm="syz.0.521" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x0 [ 161.614696][ T7905] tipc: Started in network mode [ 161.616372][ T7905] tipc: Node identity 6202bbd3f113, cluster identity 4711 [ 161.618578][ T7905] tipc: Enabled bearer , priority 0 [ 161.657061][ T7905] netlink: 44 bytes leftover after parsing attributes in process `syz.3.522'. [ 161.660959][ T7905] tipc: Resetting bearer [ 161.687755][ T7904] tipc: Disabling bearer [ 162.640825][ T7919] binder: Binderfs stats mode cannot be changed during a remount [ 162.745446][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 162.862731][ T7919] wg2 speed is unknown, defaulting to 1000 [ 162.890791][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 164.050101][ T7950] netdevsim netdevsim2 : renamed from netdevsim0 [ 164.809233][ T1041] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 164.881417][ T8008] wg2 speed is unknown, defaulting to 1000 [ 165.028897][ T1041] usb 7-1: Using ep0 maxpacket: 32 [ 165.034557][ T1041] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.037936][ T1041] usb 7-1: config 0 has no interfaces? [ 165.046660][ T1041] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 165.049822][ T1041] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 165.052563][ T1041] usb 7-1: Product: syz [ 165.054140][ T1041] usb 7-1: Manufacturer: syz [ 165.056243][ T1041] usb 7-1: SerialNumber: syz [ 165.067887][ T1041] usb 7-1: config 0 descriptor?? [ 165.583640][ T1041] usb 7-1: USB disconnect, device number 7 [ 166.383405][ T8053] netlink: 'syz.2.551': attribute type 10 has an invalid length. [ 166.390594][ T8053] team0: Port device dummy0 added [ 166.453713][ T8055] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 166.464247][ T8055] CIFS mount error: No usable UNC path provided in device string! [ 166.464247][ T8055] [ 166.467696][ T8055] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 166.556702][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.189809][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 167.338865][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 167.341898][ T29] usb 5-1: config 0 has no interfaces? [ 167.346063][ T29] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 167.349786][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.352477][ T29] usb 5-1: Product: syz [ 167.353993][ T29] usb 5-1: Manufacturer: syz [ 167.355552][ T29] usb 5-1: SerialNumber: syz [ 167.377393][ T29] usb 5-1: config 0 descriptor?? [ 167.499486][ T5832] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 167.592109][ T8086] 9p: Bad value for 'wfdno' [ 167.658988][ T5832] usb 7-1: Using ep0 maxpacket: 32 [ 167.663185][ T5832] usb 7-1: unable to get BOS descriptor or descriptor too short [ 167.666688][ T5832] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 167.669468][ T5832] usb 7-1: config 8 has no interface number 0 [ 167.671438][ T5832] usb 7-1: config 8 interface 188 has no altsetting 0 [ 167.676384][ T5832] usb 7-1: string descriptor 0 read error: -22 [ 167.678575][ T5832] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 167.681677][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.689799][ T5832] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 167.698958][ T5832] dw2102: su3000_power_ctrl: 1, initialized 0 [ 167.700990][ T5832] dvb-usb: bulk message failed: -22 (2/0) [ 167.712052][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.719932][ T5832] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 167.723259][ T5832] usb 7-1: media controller created [ 167.725165][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 167.726956][ T5832] dw2102: i2c transfer failed. [ 167.728438][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 167.736261][ T5832] dw2102: i2c transfer failed. [ 167.737798][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 167.740292][ T5832] dw2102: i2c transfer failed. [ 167.741795][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 167.743547][ T5832] dw2102: i2c transfer failed. [ 167.745034][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 167.746803][ T5832] dw2102: i2c transfer failed. [ 167.748299][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 167.750086][ T5832] dw2102: i2c transfer failed. [ 167.751580][ T5832] dvb-usb: MAC address: 02:02:02:02:02:02 [ 167.755950][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.763115][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 167.764990][ T5832] dw2102: command 0x0e transfer failed. [ 167.766743][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 167.768434][ T5832] dw2102: command 0x0e transfer failed. [ 167.828144][ T29] usb 5-1: USB disconnect, device number 18 [ 168.089616][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 168.092553][ T5832] dw2102: command 0x0e transfer failed. [ 168.094585][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 168.096590][ T5832] dw2102: command 0x0e transfer failed. [ 168.098870][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 168.100713][ T5832] dw2102: command 0x51 transfer failed. [ 168.113529][ T5832] DVB: Unable to find symbol ds3000_attach() [ 168.115417][ T5832] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 168.158981][ T5832] rc_core: IR keymap rc-su3000 not found [ 168.161346][ T5832] Registered IR keymap rc-empty [ 168.164146][ T5832] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 168.174346][ T5832] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input15 [ 168.186827][ T5832] dvb-usb: schedule remote query interval to 150 msecs. [ 168.192288][ T5832] dw2102: su3000_power_ctrl: 0, initialized 1 [ 168.196132][ T5832] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 168.203507][ T5832] usb 7-1: USB disconnect, device number 8 [ 168.221429][ T5832] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 168.717955][ T8158] netlink: 'syz.2.574': attribute type 4 has an invalid length. [ 168.763636][ T8158] tmpfs: Unknown parameter 'usrquotaO' [ 168.873395][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 169.399972][ T8179] ip6t_rpfilter: unknown options [ 169.460349][ T8181] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 169.490410][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.510339][ T8181] netlink: 164 bytes leftover after parsing attributes in process `syz.0.578'. [ 169.697127][ T64] Bluetooth: hci3: link tx timeout [ 169.699949][ T64] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.703186][ T5099] Bluetooth: hci3: link tx timeout [ 169.705368][ T5099] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.724057][ T5099] Bluetooth: hci3: link tx timeout [ 169.726536][ T5099] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.749136][ T5099] Bluetooth: hci3: link tx timeout [ 169.750902][ T5099] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.961994][ T5099] Bluetooth: hci3: link tx timeout [ 169.964210][ T5099] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.012643][ T5099] Bluetooth: hci3: unexpected event for opcode 0x200a [ 170.069117][ T5099] Bluetooth: hci3: link tx timeout [ 170.071565][ T5099] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.153844][ T5099] Bluetooth: hci3: link tx timeout [ 170.155937][ T5099] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.285569][ T8206] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 170.337948][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.584'. [ 170.345776][ T8208] fuse: Unknown parameter '0x0000000000000006' [ 170.348962][ T8208] Invalid source name [ 170.350364][ T8208] UBIFS error (pid: 8208): cannot open "./file0", error -22 [ 170.520968][ T8210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.585'. [ 170.558572][ T8212] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 170.561764][ T8212] netlink: 'syz.1.586': attribute type 2 has an invalid length. [ 170.592457][ T8217] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.929248][ T8236] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 170.932004][ T8236] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 170.936589][ T8236] vhci_hcd vhci_hcd.0: Device attached [ 170.989541][ T5099] Bluetooth: hci3: link tx timeout [ 170.989560][ T5099] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.077833][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.593'. [ 171.077850][ T8240] netlink: 'syz.2.593': attribute type 2 has an invalid length. [ 171.077857][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'. [ 171.198954][ T29] usb 40-1: SetAddress Request (6) to port 0 [ 171.200899][ T29] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 171.429066][ T5099] Bluetooth: hci3: link tx timeout [ 171.430698][ T5099] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.475347][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.596'. [ 171.889689][ T42] audit: type=1326 audit(1781904013.521:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.898997][ T42] audit: type=1326 audit(1781904013.521:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.906017][ T42] audit: type=1326 audit(1781904013.521:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.912500][ T42] audit: type=1326 audit(1781904013.521:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.919128][ T42] audit: type=1326 audit(1781904013.521:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.925706][ T42] audit: type=1326 audit(1781904013.521:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.932251][ T42] audit: type=1326 audit(1781904013.521:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.938748][ T42] audit: type=1326 audit(1781904013.521:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.945166][ T42] audit: type=1326 audit(1781904013.521:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.953123][ T42] audit: type=1326 audit(1781904013.521:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.3.600" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 171.993549][ T8237] vhci_hcd: connection reset by peer [ 171.999081][ T5823] vhci_hcd vhci_hcd.1: stop threads [ 172.000713][ T5823] vhci_hcd vhci_hcd.1: release socket [ 172.002808][ T5823] vhci_hcd vhci_hcd.1: disconnect device [ 172.119609][ T8275] /dev/sr0: Can't open blockdev [ 172.640481][ T8290] netlink: 200 bytes leftover after parsing attributes in process `syz.3.605'. [ 172.691104][ T8284] Process accounting resumed [ 172.763954][ T8304] 9pnet_virtio: no channels available for device syz [ 172.837002][ T8310] overlayfs: failed to resolve './bus': -2 [ 172.841281][ T8311] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 172.928950][ T24] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 172.967348][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 173.090586][ T24] usb 6-1: No LPM exit latency info found, disabling LPM. [ 173.094106][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 173.097511][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 173.102644][ T8323] binder: Bad value for 'stats' [ 173.609392][ T8331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.630368][ T8331] wg2 speed is unknown, defaulting to 1000 [ 175.679227][ T24] usb 6-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice= 0.40 [ 175.686740][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.693673][ T24] usb 6-1: can't set config #1, error -71 [ 175.701847][ T24] usb 6-1: USB disconnect, device number 11 [ 175.948927][ T8333] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 175.958954][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 175.960920][ T8333] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 176.269005][ T29] usb 40-1: device descriptor read/8, error -110 [ 176.606500][ T8333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.609263][ T8333] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.662652][ T29] usb usb40-port1: attempt power cycle [ 176.879980][ T845] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 176.883077][ T5840] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 177.059107][ T845] usb 7-1: Using ep0 maxpacket: 32 [ 177.061963][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 177.071150][ T845] usb 7-1: unable to get BOS descriptor or descriptor too short [ 177.080554][ T5840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.093409][ T5840] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 177.100764][ T845] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 177.105482][ T845] usb 7-1: config 8 has no interface number 0 [ 177.108149][ T5840] usb 5-1: config 8 has no interface number 0 [ 177.111577][ T845] usb 7-1: config 8 interface 188 has no altsetting 0 [ 177.114780][ T5840] usb 5-1: config 8 interface 188 has no altsetting 0 [ 177.141284][ T5840] usb 5-1: string descriptor 0 read error: -22 [ 177.148767][ T5840] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 177.149638][ T845] usb 7-1: string descriptor 0 read error: -22 [ 177.155066][ T8396] netlink: 959 bytes leftover after parsing attributes in process `syz.1.631'. [ 177.155820][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.165566][ T845] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 177.167661][ T8391] cdrom: dropping to single frame dma [ 177.187919][ T845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.213131][ T5840] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 177.219792][ T29] usb usb40-port1: unable to enumerate USB device [ 177.226552][ T5840] dw2102: su3000_power_ctrl: 1, initialized 0 [ 177.237303][ T5840] dvb-usb: bulk message failed: -22 (2/0) [ 177.244825][ T845] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 177.255312][ T845] dw2102: su3000_power_ctrl: 1, initialized 0 [ 177.260595][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.264199][ T845] dvb-usb: bulk message failed: -22 (2/0) [ 177.267881][ T5840] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 177.274580][ T845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.278082][ T5840] usb 5-1: media controller created [ 177.280543][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 177.284474][ T845] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 177.287264][ T5840] dw2102: i2c transfer failed. [ 177.288888][ T845] usb 7-1: media controller created [ 177.290601][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 177.292492][ T845] dvb-usb: bulk message failed: -22 (6/0) [ 177.294391][ T5840] dw2102: i2c transfer failed. [ 177.295947][ T845] dw2102: i2c transfer failed. [ 177.297513][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 177.299247][ T845] dvb-usb: bulk message failed: -22 (6/0) [ 177.301066][ T5840] dw2102: i2c transfer failed. [ 177.302651][ T845] dw2102: i2c transfer failed. [ 177.304237][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 177.306043][ T8403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'. [ 177.306095][ T845] dvb-usb: bulk message failed: -22 (6/0) [ 177.311784][ T5840] dw2102: i2c transfer failed. [ 177.313357][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 177.315198][ T5840] dw2102: i2c transfer failed. [ 177.316773][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 177.318630][ T845] dw2102: i2c transfer failed. [ 177.320221][ T845] dvb-usb: bulk message failed: -22 (6/0) [ 177.322055][ T5840] dw2102: i2c transfer failed. [ 177.323644][ T5840] dvb-usb: MAC address: 02:02:02:02:02:02 [ 177.325471][ T845] dw2102: i2c transfer failed. [ 177.327055][ T845] dvb-usb: bulk message failed: -22 (6/0) [ 177.334078][ T845] dw2102: i2c transfer failed. [ 177.339215][ T845] dvb-usb: bulk message failed: -22 (6/0) [ 177.344986][ T845] dw2102: i2c transfer failed. [ 177.349583][ T845] dvb-usb: MAC address: 02:02:02:02:02:02 [ 177.358600][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.401543][ T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.425798][ T8341] FAULT_INJECTION: forcing a failure. [ 177.425798][ T8341] name failslab, interval 1, probability 0, space 0, times 0 [ 177.430077][ T8341] CPU: 0 UID: 0 PID: 8341 Comm: syz.2.622 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.430095][ T8341] Tainted: [L]=SOFTLOCKUP [ 177.430099][ T8341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.430105][ T8341] Call Trace: [ 177.430109][ T8341] [ 177.430113][ T8341] dump_stack_lvl+0x100/0x190 [ 177.430127][ T8341] should_fail_ex.cold+0x5/0xa [ 177.430138][ T8341] ? fs_reclaim_acquire+0x70/0x100 [ 177.430150][ T8341] ? tomoyo_realpath_from_path+0xb6/0x690 [ 177.430162][ T8341] should_failslab+0xc2/0x120 [ 177.430172][ T8341] __kmalloc_noprof+0xe0/0x840 [ 177.430184][ T8341] ? kfree+0x1e5/0x6c0 [ 177.430196][ T8341] tomoyo_realpath_from_path+0xb6/0x690 [ 177.430210][ T8341] tomoyo_path_number_perm+0x23c/0x580 [ 177.430225][ T8341] ? tomoyo_path_number_perm+0x22e/0x580 [ 177.430242][ T8341] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.430259][ T8341] ? get_pid_task+0x106/0x250 [ 177.430270][ T8341] ? ksys_write+0x12a/0x250 [ 177.430279][ T8341] ? lock_release+0x24d/0x310 [ 177.430296][ T8341] ? rcu_is_watching+0x12/0xc0 [ 177.430307][ T8341] ? __fget_files+0x215/0x3d0 [ 177.430315][ T8341] ? hook_file_ioctl_common+0x149/0x410 [ 177.430326][ T8341] ? lock_release+0x24d/0x310 [ 177.430340][ T8341] ? __fget_files+0x21f/0x3d0 [ 177.430350][ T8341] security_file_ioctl_compat+0xd3/0x230 [ 177.430367][ T8341] __ia32_compat_sys_ioctl+0xc2/0x360 [ 177.430382][ T8341] __do_fast_syscall_32+0xe7/0x970 [ 177.430398][ T8341] do_fast_syscall_32+0x32/0x70 [ 177.430412][ T8341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.430426][ T8341] RIP: 0023:0xf708efec [ 177.430438][ T8341] Code: Unable to access opcode bytes at 0xf708efc2. [ 177.430443][ T8341] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 177.430453][ T8341] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 177.430460][ T8341] RDX: 0000000080001dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.430466][ T8341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.430472][ T8341] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.430478][ T8341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.430487][ T8341] [ 177.430491][ T8341] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.471094][ T845] dvb-usb: bulk message failed: -22 (3/0) [ 177.481022][ T8341] dvb-usb: bulk message failed: -22 (3/0) [ 177.522264][ T8341] dw2102: i2c transfer failed. [ 177.544003][ T845] dw2102: command 0x0e transfer failed. [ 177.568275][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 177.570285][ T845] dvb-usb: bulk message failed: -22 (3/0) [ 177.572201][ T5840] dw2102: command 0x0e transfer failed. [ 177.573969][ T845] dw2102: command 0x0e transfer failed. [ 177.575753][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 177.577644][ T5840] dw2102: command 0x0e transfer failed. [ 177.743060][ T8419] libceph: resolve '96.' (ret=-3): failed [ 177.888890][ T845] dvb-usb: bulk message failed: -22 (3/0) [ 177.891406][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 177.894005][ T845] dw2102: command 0x0e transfer failed. [ 177.896471][ T5840] dw2102: command 0x0e transfer failed. [ 177.898921][ T845] dvb-usb: bulk message failed: -22 (3/0) [ 177.901399][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 177.903862][ T845] dw2102: command 0x0e transfer failed. [ 177.906256][ T5840] dw2102: command 0x0e transfer failed. [ 177.908733][ T845] dvb-usb: bulk message failed: -22 (1/0) [ 177.911190][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 177.913622][ T845] dw2102: command 0x51 transfer failed. [ 177.915961][ T5840] dw2102: command 0x51 transfer failed. [ 177.931487][ T5840] DVB: Unable to find symbol ds3000_attach() [ 177.936314][ T5840] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 177.943750][ T845] DVB: Unable to find symbol ds3000_attach() [ 177.946600][ T845] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 177.998892][ T5840] rc_core: IR keymap rc-su3000 not found [ 178.001339][ T845] rc_core: IR keymap rc-su3000 not found [ 178.003855][ T845] Registered IR keymap rc-empty [ 178.005967][ T5840] Registered IR keymap rc-empty [ 178.008653][ T5840] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 178.015387][ T845] rc rc1: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc1 [ 178.027136][ T845] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc1/input17 [ 178.029034][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 178.032513][ T5840] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input16 [ 178.034253][ T5099] Bluetooth: hci3: command 0x0406 tx timeout [ 178.041987][ T5840] dvb-usb: schedule remote query interval to 150 msecs. [ 178.045325][ T845] dvb-usb: schedule remote query interval to 150 msecs. [ 178.051181][ T5840] dw2102: su3000_power_ctrl: 0, initialized 1 [ 178.053617][ T845] dw2102: su3000_power_ctrl: 0, initialized 1 [ 178.058249][ T5840] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 178.061979][ T845] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 178.070435][ T845] usb 7-1: USB disconnect, device number 9 [ 178.079507][ T845] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 178.179158][ T8430] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 178.208934][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 178.210953][ T5840] dw2102: i2c transfer failed. [ 178.368903][ T845] dvb-usb: bulk message failed: -22 (1/0) [ 178.371219][ T845] dw2102: i2c transfer failed. [ 178.538910][ T845] dvb-usb: bulk message failed: -22 (1/0) [ 178.541273][ T845] dw2102: i2c transfer failed. [ 178.698952][ T845] dvb-usb: bulk message failed: -22 (1/0) [ 178.701307][ T845] dw2102: i2c transfer failed. [ 178.843684][ T9] usb 5-1: USB disconnect, device number 19 [ 178.857535][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 178.889536][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 178.902611][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 178.910256][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 180.108929][ T5099] Bluetooth: hci3: command 0x0406 tx timeout [ 180.208478][ T8473] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 180.211512][ T8473] netlink: 224 bytes leftover after parsing attributes in process `syz.3.647'. [ 180.819029][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 180.979266][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 181.623834][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 181.628429][ T9] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 181.632519][ T9] usb 7-1: config 8 has no interface number 0 [ 181.659116][ T9] usb 7-1: config 8 interface 188 has no altsetting 0 [ 181.663404][ T9] usb 7-1: string descriptor 0 read error: -22 [ 181.665342][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 181.668168][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.674725][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 181.678397][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 181.680317][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 181.685779][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.688999][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 181.691716][ T9] usb 7-1: media controller created [ 181.693320][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.695100][ T9] dw2102: i2c transfer failed. [ 181.696610][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.698345][ T9] dw2102: i2c transfer failed. [ 181.700236][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.702052][ T9] dw2102: i2c transfer failed. [ 181.703559][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.705299][ T9] dw2102: i2c transfer failed. [ 181.706784][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.708512][ T9] dw2102: i2c transfer failed. [ 181.710264][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.712026][ T9] dw2102: i2c transfer failed. [ 181.713534][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 181.717830][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.727273][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 181.729739][ T9] dw2102: command 0x0e transfer failed. [ 181.731489][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 181.733274][ T9] dw2102: command 0x0e transfer failed. [ 182.265955][ T8502] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 182.283226][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 182.284999][ T9] dw2102: command 0x0e transfer failed. [ 182.286694][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 182.288435][ T9] dw2102: command 0x0e transfer failed. [ 182.291928][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 182.293699][ T9] dw2102: command 0x51 transfer failed. [ 182.348552][ T8481] dvb-usb: bulk message failed: -22 (3/0) [ 182.350604][ T8481] dw2102: i2c transfer failed. [ 182.492569][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 182.731046][ T9] DVB: Unable to find symbol ds3000_attach() [ 182.732959][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 183.079280][ T9] rc_core: IR keymap rc-su3000 not found [ 183.081902][ T9] Registered IR keymap rc-empty [ 183.085129][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 183.091580][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input18 [ 183.096439][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 183.098966][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 183.101544][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 183.106101][ T9] usb 7-1: USB disconnect, device number 10 [ 183.194756][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 183.388896][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 183.947019][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'. [ 183.966876][ T8515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.975206][ T8519] program syz.2.659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.268912][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 184.309018][ T5840] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 184.418894][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 184.422943][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.428095][ T24] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 184.432127][ T24] usb 5-1: config 8 has no interface number 0 [ 184.434077][ T24] usb 5-1: config 8 interface 188 has no altsetting 0 [ 184.441736][ T24] usb 5-1: string descriptor 0 read error: -22 [ 184.444888][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 184.449670][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.459840][ T5840] usb 7-1: Using ep0 maxpacket: 32 [ 184.464384][ T24] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 184.467823][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 184.469545][ T5840] usb 7-1: unable to get BOS descriptor or descriptor too short [ 184.473352][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 184.476772][ T5840] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 184.480340][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.484724][ T5840] usb 7-1: config 8 has no interface number 0 [ 184.485091][ T24] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 184.488990][ T5840] usb 7-1: config 8 interface 188 has no altsetting 0 [ 184.490387][ T24] usb 5-1: media controller created [ 184.497580][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 184.500903][ T24] dw2102: i2c transfer failed. [ 184.501921][ T5840] usb 7-1: string descriptor 0 read error: -22 [ 184.505153][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 184.505595][ T5840] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 184.507680][ T24] dw2102: i2c transfer failed. [ 184.511003][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.519147][ T5840] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 184.521436][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 184.527042][ T24] dw2102: i2c transfer failed. [ 184.527064][ T5840] dw2102: su3000_power_ctrl: 1, initialized 0 [ 184.531178][ T5840] dvb-usb: bulk message failed: -22 (2/0) [ 184.531211][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 184.538097][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.542466][ T24] dw2102: i2c transfer failed. [ 184.542599][ T5840] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 184.544220][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 184.544232][ T24] dw2102: i2c transfer failed. [ 184.544241][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 184.544251][ T24] dw2102: i2c transfer failed. [ 184.555309][ T5840] usb 7-1: media controller created [ 184.560952][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 184.560975][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 184.565470][ T5840] dw2102: i2c transfer failed. [ 184.567735][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 184.571783][ T5840] dw2102: i2c transfer failed. [ 184.574846][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 184.575968][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.577147][ T5840] dw2102: i2c transfer failed. [ 184.583264][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 184.585890][ T5840] dw2102: i2c transfer failed. [ 184.588109][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 184.592314][ T5840] dw2102: i2c transfer failed. [ 184.594298][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 184.594467][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 184.598459][ T5840] dw2102: i2c transfer failed. [ 184.600649][ T5840] dvb-usb: MAC address: 02:02:02:02:02:02 [ 184.601716][ T24] dw2102: command 0x0e transfer failed. [ 184.607247][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 184.612019][ T24] dw2102: command 0x0e transfer failed. [ 184.620279][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.645840][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 184.648732][ T5840] dw2102: command 0x0e transfer failed. [ 184.651085][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 184.653796][ T5840] dw2102: command 0x0e transfer failed. [ 184.928897][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 184.930914][ T24] dw2102: command 0x0e transfer failed. [ 184.933141][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 184.935547][ T24] dw2102: command 0x0e transfer failed. [ 184.937699][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 184.939828][ T24] dw2102: command 0x51 transfer failed. [ 184.942177][ T8527] dvb-usb: bulk message failed: -22 (3/0) [ 184.944648][ T8527] dw2102: i2c transfer failed. [ 184.958911][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 184.961525][ T5840] dw2102: command 0x0e transfer failed. [ 184.962186][ T24] DVB: Unable to find symbol ds3000_attach() [ 184.963947][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 184.966242][ T24] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 184.968552][ T5840] dw2102: command 0x0e transfer failed. [ 184.974453][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 184.976845][ T5840] dw2102: command 0x51 transfer failed. [ 184.996793][ T5840] DVB: Unable to find symbol ds3000_attach() [ 184.999154][ T5840] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 185.028853][ T24] rc_core: IR keymap rc-su3000 not found [ 185.030663][ T24] Registered IR keymap rc-empty [ 185.032499][ T24] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 185.041966][ T24] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input19 [ 185.052159][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 185.057704][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 185.059954][ T5840] rc_core: IR keymap rc-su3000 not found [ 185.059966][ T5840] Registered IR keymap rc-empty [ 185.060375][ T5840] rc rc1: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc1 [ 185.076777][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 185.087981][ T5840] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc1/input20 [ 185.092374][ T24] usb 5-1: USB disconnect, device number 20 [ 185.096714][ T5840] dvb-usb: schedule remote query interval to 150 msecs. [ 185.099180][ T5840] dw2102: su3000_power_ctrl: 0, initialized 1 [ 185.101165][ T5840] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 185.111221][ T5840] usb 7-1: USB disconnect, device number 11 [ 185.129154][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 185.140836][ T5840] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 185.355615][ T8561] tls_set_device_offload: netdev not found [ 185.658082][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 185.930675][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 186.058901][ T5840] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 186.218910][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 186.222924][ T5840] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 186.225814][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.228276][ T5840] usb 6-1: Product: Є [ 186.229710][ T5840] usb 6-1: Manufacturer: 煂讘房ﵗ壑䠶냸⬹흁猘ቬ貝聎泖ೀ잎㗷댹ꇨ경᪓ᄉ秤该෿蠀伟ﾼࣦ淸髧⮟ᶜ㬻ꧧ퉰콀㟰።禊ﳠᯝ蔱鳣姆탌Ꞗﯲⵡ䋚ཇ⤤溭蒏랑톗ꦶꖷ䡊웆沪腮趞ļ镡䮁쁐ޜ堗梺ꘀ풏⪸ [ 186.237631][ T5840] usb 6-1: SerialNumber: ю [ 186.480611][ T5840] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.483949][ T5840] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 186.490896][ T5840] usb 6-1: USB disconnect, device number 12 [ 187.819863][ T8615] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.688968][ T5840] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 188.848870][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 188.852843][ T5840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 188.856992][ T5840] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 188.860383][ T5840] usb 6-1: config 8 has no interface number 0 [ 188.863012][ T5840] usb 6-1: config 8 interface 188 has no altsetting 0 [ 188.868496][ T5840] usb 6-1: string descriptor 0 read error: -22 [ 188.871383][ T5840] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 188.875125][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.884279][ T5840] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 188.890738][ T5840] dw2102: su3000_power_ctrl: 1, initialized 0 [ 188.893275][ T5840] dvb-usb: bulk message failed: -22 (2/0) [ 188.899785][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.905760][ T5840] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 188.909323][ T5840] usb 6-1: media controller created [ 188.911583][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 188.913960][ T5840] dw2102: i2c transfer failed. [ 188.916017][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 188.918371][ T5840] dw2102: i2c transfer failed. [ 188.920666][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 188.923141][ T5840] dw2102: i2c transfer failed. [ 188.925148][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 188.927632][ T5840] dw2102: i2c transfer failed. [ 188.929704][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 188.932086][ T5840] dw2102: i2c transfer failed. [ 188.934138][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 188.936539][ T5840] dw2102: i2c transfer failed. [ 188.938693][ T5840] dvb-usb: MAC address: 02:02:02:02:02:02 [ 188.946417][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.960310][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 188.964411][ T5840] dw2102: command 0x0e transfer failed. [ 188.966778][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 188.969094][ T5840] dw2102: command 0x0e transfer failed. [ 189.288862][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 189.290728][ T5840] dw2102: command 0x0e transfer failed. [ 189.292608][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 189.294519][ T5840] dw2102: command 0x0e transfer failed. [ 189.296939][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 189.299545][ T5840] dw2102: command 0x51 transfer failed. [ 189.301872][ T8636] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 189.305621][ T8636] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 189.308602][ T8636] CPU: 3 UID: 0 PID: 8636 Comm: syz.1.693 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.311764][ T8636] Tainted: [L]=SOFTLOCKUP [ 189.313085][ T8636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.316198][ T8636] RIP: 0010:su3000_i2c_transfer+0x607/0xd90 [ 189.318019][ T8636] Code: 41 fd f9 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10 [ 189.324272][ T8636] RSP: 0000:ffffc9000ddc7bc0 EFLAGS: 00010246 [ 189.326122][ T8636] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc9000cfe2000 [ 189.328530][ T8636] RDX: 0000000000000000 RSI: ffffffff880b8a30 RDI: ffff88801336a6e8 [ 189.330970][ T8636] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00 [ 189.333381][ T8636] R10: 0000000000001900 R11: ffffffff81d4886c R12: dffffc0000000000 [ 189.335785][ T8636] R13: ffff888029db8a02 R14: 0000000000000000 R15: ffff888029db8a00 [ 189.338183][ T8636] FS: 0000000000000000(0000) GS:ffff88809742a000(0063) knlGS:00000000f54a6b40 [ 189.340895][ T8636] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 189.342896][ T8636] CR2: 00000000f7218850 CR3: 0000000073d3f000 CR4: 0000000000352ef0 [ 189.345294][ T8636] Call Trace: [ 189.346367][ T8636] [ 189.347304][ T8636] ? do_raw_spin_lock+0x128/0x260 [ 189.348850][ T8636] __i2c_transfer+0x5d9/0x1740 [ 189.350322][ T8636] ? trace_irq_enable.constprop.0+0x122/0x160 [ 189.352245][ T8636] ? __pfx___i2c_transfer+0x10/0x10 [ 189.353918][ T8636] ? rt_mutex_slowtrylock+0x93/0x100 [ 189.355484][ T8636] i2c_transfer+0x15f/0x380 [ 189.356847][ T8636] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 189.358337][ T8636] compat_i2cdev_ioctl+0x469/0x540 [ 189.359822][ T8636] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 189.361525][ T8636] ? __fget_files+0x21f/0x3d0 [ 189.363074][ T8636] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 189.364784][ T8636] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 189.366447][ T8636] __do_fast_syscall_32+0xe7/0x970 [ 189.368049][ T8636] do_fast_syscall_32+0x32/0x70 [ 189.369554][ T8636] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.371469][ T8636] RIP: 0023:0xf7fe2fec [ 189.372787][ T8636] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 189.374842][ T8636] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 189.377378][ T8636] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 189.379766][ T8636] RDX: 0000000080001dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.382209][ T8636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.384670][ T8636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.387075][ T8636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.389475][ T8636] [ 189.390437][ T8636] Modules linked in: [ 189.391869][ T8636] ---[ end trace 0000000000000000 ]--- [ 189.397500][ T8636] RIP: 0010:su3000_i2c_transfer+0x607/0xd90 [ 189.399462][ T8636] Code: 41 fd f9 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10 [ 189.405854][ T8636] RSP: 0000:ffffc9000ddc7bc0 EFLAGS: 00010246 [ 189.408421][ T5840] DVB: Unable to find symbol ds3000_attach() [ 189.411323][ T5840] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 189.414782][ T8636] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc9000cfe2000 [ 189.418027][ T8636] RDX: 0000000000000000 RSI: ffffffff880b8a30 RDI: ffff88801336a6e8 [ 189.421817][ T8636] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00 [ 189.425243][ T8636] R10: 0000000000001900 R11: ffffffff81d4886c R12: dffffc0000000000 [ 189.428617][ T8636] R13: ffff888029db8a02 R14: 0000000000000000 R15: ffff888029db8a00 [ 189.432479][ T8636] FS: 0000000000000000(0000) GS:ffff88809742a000(0063) knlGS:00000000f54a6b40 [ 189.436326][ T8636] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 189.439358][ T8636] CR2: 00007fec36c5dad0 CR3: 0000000073d3f000 CR4: 0000000000352ef0 [ 189.442694][ T8636] Kernel panic - not syncing: Fatal exception [ 189.446027][ T8636] Kernel Offset: disabled [ 189.447826][ T8636] Rebooting in 86400 seconds..