last executing test programs: 12.520165794s ago: executing program 2 (id=2586): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000181401000000002000"], 0x20}, 0x1, 0x0, 0x0, 0x4024001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4702, 0x10) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x175) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x800, 0x6) fsetxattr$security_capability(r7, &(0x7f0000000040), &(0x7f0000000300)=@v2={0x2000000, [{0x4, 0xffff6e13}, {0x1, 0xfffffffa}]}, 0x14, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x10012, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 11.545957516s ago: executing program 2 (id=2588): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) ioctl$GIO_UNIMAP(r1, 0x4b66, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r6) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 10.370604214s ago: executing program 2 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test\x00', 0x782, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r3, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) set_mempolicy(0x1, &(0x7f0000000000)=0x7fffffff, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000280)=0x6, 0x4) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x10006, &(0x7f0000003880)={[{@quota}, {}, {@discard_size={'discard', 0x3d, 0x2}}, {@discard_size}, {@discard}, {@discard}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") 10.038386511s ago: executing program 4 (id=2593): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.219061119s ago: executing program 4 (id=2596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 8.228282072s ago: executing program 4 (id=2599): mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./myproc\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20040800, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x6, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) 7.510874249s ago: executing program 1 (id=2601): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7ede) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @remote, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, '\x00', "b11688ddda71423042bd8997699626f7", "d0410cd0", "aac1d07c9349b4c7"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20442, &(0x7f00000003c0)=ANY=[@ANYBLOB="ab3374473a325a800b7aaf27120975c163db8f7a519e93d47414e0da6006138fccade36f77b0a502851ac111ce202677ae909dc3960023f40249115fddd289b9ef66d2d650d8e8a17bcd7794cbb6719fc03c6a7affd5638fec6a223691213afaf012b95cea36f94a0ef18b90e016520caab39fe47029a0f728a23f1f6c85bb60e33b100381c0a2b63585851481eb5318b50fc2ae2e"], 0x1, 0x266, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(0xffffffffffffffff, 0xc00) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x2004412, &(0x7f0000000300)=ANY=[]) 7.332716383s ago: executing program 4 (id=2602): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='esdfs\x00', 0x20000, 0x0) setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x18, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa120000000000007010000f8ffffffb702000008000000b703000002800000850000000600000095"], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0x1, @remote, 'ip6erspan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_vs\x00') getdents(r5, &(0x7f0000000640)=""/32, 0x20) getdents(r5, 0xffffffffffffffff, 0x5a) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r6, 0x401870cb, &(0x7f0000000100)=0x3) read$msr(r5, &(0x7f0000000080)=""/30, 0x1e) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 7.099885428s ago: executing program 2 (id=2603): mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') pread64(r2, &(0x7f0000001340)=""/102390, 0x18ff6, 0x2013) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0xd09b79c36ddbcb7e}, 0x80) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) truncate(&(0x7f0000000080)='config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x6) 6.860226103s ago: executing program 2 (id=2604): close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e2201020301090224"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x5094) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0x97c1) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r4, &(0x7f0000000040)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x7, 0x1000}, 0x1, 0x4}}, 0x755c00) 4.252558493s ago: executing program 1 (id=2611): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.091570757s ago: executing program 3 (id=2612): mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./myproc\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20040800, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x6, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) 4.021983138s ago: executing program 1 (id=2613): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x8, 0x1e1, &(0x7f00000003c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x24044080) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x40, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000000)=0x4) setns(0xc9, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000400), 0x7}, 0xb}], 0x2, 0x2000, 0x0) socket(0x8, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x105, 0x42020054, &(0x7f00000001c0)="010000000000000000000000cf00000000000000dc0500000000000000000000000000000000000001", 0x29) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x1}) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0xc782}], 0x1, 0x0, 0x0, 0x0) 3.965639149s ago: executing program 4 (id=2614): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7ede) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @remote, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, '\x00', "b11688ddda71423042bd8997699626f7", "d0410cd0", "aac1d07c9349b4c7"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20442, &(0x7f00000003c0)=ANY=[@ANYBLOB="ab3374473a325a800b7aaf27120975c163db8f7a519e93d47414e0da6006138fccade36f77b0a502851ac111ce202677ae909dc3960023f40249115fddd289b9ef66d2d650d8e8a17bcd7794cbb6719fc03c6a7affd5638fec6a223691213afaf012b95cea36f94a0ef18b90e016520caab39fe47029a0f728a23f1f6c85bb60e33b100381c0a2b63585851481eb5318b50fc2ae2e"], 0x1, 0x266, &(0x7f0000000800)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(0xffffffffffffffff, 0xc00) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x2004412, &(0x7f0000000300)=ANY=[]) 3.241328106s ago: executing program 0 (id=2615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 3.199653107s ago: executing program 3 (id=2616): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000181401000000002000"], 0x20}, 0x1, 0x0, 0x0, 0x4024001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4702, 0x10) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x175) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x800, 0x6) fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f0000000300)=@v2={0x2000000, [{0x4, 0xffff6e13}, {0x1, 0xfffffffa}]}, 0x14, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x10012, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 3.148037058s ago: executing program 2 (id=2617): close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x5094) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0x97c1) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r3, &(0x7f0000000040)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x7, 0x1000}, 0x1, 0x4}}, 0x755c00) 2.245651439s ago: executing program 0 (id=2619): socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.243920999s ago: executing program 3 (id=2620): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) ioctl$GIO_UNIMAP(r1, 0x4b66, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r6) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 2.027720853s ago: executing program 0 (id=2621): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test\x00', 0x782, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r3, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) set_mempolicy(0x1, &(0x7f0000000000)=0x7fffffff, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) write(r4, &(0x7f0000000280)='0', 0x1) 1.890294587s ago: executing program 0 (id=2622): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.080713126s ago: executing program 0 (id=2623): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x204000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)={0xb, 0x1, {0x2, 0x0, 0x6, 0x2, 0x7}, 0x2}) mount(&(0x7f00000002c0)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='none\x00', &(0x7f0000000080), 0x13484, &(0x7f0000000180)=ANY=[@ANYBLOB="6d656d6f72795f6c6f63616c6576656e74732c6661766f7a64796e6d6f64732c6661768a12ee3e3c2745e83c6976bd8e626f7264796e6d6f64732c706964735f6c6f63616c650000003d73797361646d5f752c736d61636b66737472616e736d7574653d2f6465762f736e642f736571002c5d2c00"]) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r4, &(0x7f0000000040)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x7, 0x1000}, 0x1, 0x4}}, 0x755c00) 1.080479866s ago: executing program 1 (id=2624): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='esdfs\x00', 0x20000, 0x0) setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x18, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa120000000000007010000f8ffffffb702000008000000b703000002800000850000000600000095"], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0x1, @remote, 'ip6erspan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_vs\x00') getdents(r5, &(0x7f0000000640)=""/32, 0x20) getdents(r5, 0xffffffffffffffff, 0x5a) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r6, 0x401870cb, &(0x7f0000000100)=0x3) read$msr(r5, &(0x7f0000000080)=""/30, 0x1e) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.080315606s ago: executing program 3 (id=2625): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x3, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x8, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) sendto$rxrpc(r0, &(0x7f0000000340)="be05621d99de77c0a1798d3d50c7374200b2d2c3bc41728bc53f9fbd5253749e96ce99dc09c38607a83290453d69e513902516cbd72b0fdb9c90ba0bcdd844423f65d5f939eba63086013c97fcf28572af06e450a2839be284a9a05d172617717a1ae539d188889b70575dd6765018af2f217bd0fcf535106eb2f1be77c37c1c12abfedd62e2ffa9a8389bdeb515867830a08155864d", 0x96, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4808444, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 292.806533ms ago: executing program 4 (id=2626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 50.350569ms ago: executing program 0 (id=2627): close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e2201020301090224"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x5094) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0x97c1) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c rejected, failed to enable media [ 421.213256][ T4231] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 421.344900][ T4231] lan78xx: probe of 2-1:1.0 failed with error -71 [ 421.685455][ T4231] usb 2-1: USB disconnect, device number 31 [ 422.680300][ T4265] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 423.116085][ T4265] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 423.130154][ T4265] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 423.157088][ T4265] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 423.183707][ T4265] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 423.215441][ T4265] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 423.381084][ T4265] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 423.390335][ T4230] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 423.410543][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 423.418656][ T4265] usb 2-1: Product: syz [ 423.430159][ T4265] usb 2-1: Manufacturer: syz [ 423.491992][ T4265] cdc_wdm 2-1:1.0: skipping garbage [ 423.498096][ T4265] cdc_wdm 2-1:1.0: skipping garbage [ 423.518979][ T4265] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 423.528513][ T4265] cdc_wdm 2-1:1.0: Unknown control protocol [ 423.601732][ T8091] tmpfs: Unknown parameter 'quota' [ 423.650512][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 424.625174][ T4230] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 424.653691][ T4230] usb 3-1: config 0 has no interface number 0 [ 425.020406][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 4 bytes [ 425.450326][ T4230] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 425.459444][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.503706][ T4230] usb 3-1: Product: syz [ 425.519388][ T4230] usb 3-1: Manufacturer: syz [ 425.529808][ T4230] usb 3-1: SerialNumber: syz [ 425.556638][ T4230] usb 3-1: config 0 descriptor?? [ 426.062977][ T4319] usb 2-1: USB disconnect, device number 32 [ 426.374523][ T8133] tmpfs: Unknown parameter 'quota' [ 427.354332][ T4230] usb 3-1: USB disconnect, device number 30 [ 428.962903][ T8166] tmpfs: Unknown parameter 'quota' [ 429.320229][ T4234] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 429.684657][ T4319] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 429.750311][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.775532][ T4234] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 429.805571][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.837520][ T4234] usb 3-1: config 0 descriptor?? [ 429.930285][ T4319] usb 2-1: Using ep0 maxpacket: 8 [ 430.050956][ T4319] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 430.074926][ T4319] usb 2-1: config 0 has no interface number 0 [ 430.100531][ T26] audit: type=1804 audit(1788772358.137:12): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1244" name="bus" dev="ramfs" ino=45541 res=1 errno=0 [ 430.151454][ T26] audit: type=1804 audit(1788772358.137:13): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1244" name="bus" dev="ramfs" ino=45541 res=1 errno=0 [ 430.270863][ T4319] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 430.297194][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.425492][ T4234] usbhid 3-1:0.0: can't add hid device: -71 [ 430.708911][ T4234] usbhid: probe of 3-1:0.0 failed with error -71 [ 430.728743][ T4234] usb 3-1: USB disconnect, device number 31 [ 430.776462][ T4319] usb 2-1: Product: syz [ 430.799998][ T4319] usb 2-1: Manufacturer: syz [ 430.825253][ T4319] usb 2-1: SerialNumber: syz [ 430.847877][ T4319] usb 2-1: config 0 descriptor?? [ 431.090408][ T4234] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 431.853150][ T4319] usb 2-1: USB disconnect, device number 33 [ 431.926888][ T8206] tmpfs: Unknown parameter 'quota' [ 432.100378][ T4234] usb 3-1: device descriptor read/all, error -71 [ 433.779200][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 434.504396][ T8237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.562686][ T8239] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1264'. [ 434.875424][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 434.914921][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.161249][ T8248] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 435.209981][ T8248] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 435.710279][ T7] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 436.094965][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.114714][ T7] usb 3-1: config 0 has no interfaces? [ 436.281639][ T7] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 436.298938][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.329437][ T7] usb 3-1: Product: syz [ 436.348870][ T7] usb 3-1: Manufacturer: syz [ 436.366067][ T7] usb 3-1: SerialNumber: syz [ 436.383859][ T7] usb 3-1: config 0 descriptor?? [ 437.516453][ T4265] usb 3-1: USB disconnect, device number 34 [ 440.362620][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.369238][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.750468][ T8316] Can't find ip_set type hash: [ 443.860204][ T13] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 444.220293][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.279799][ T13] usb 2-1: config 0 has no interfaces? [ 444.450641][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 445.101838][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.126030][ T13] usb 2-1: Product: syz [ 445.147001][ T13] usb 2-1: Manufacturer: syz [ 445.159397][ T13] usb 2-1: SerialNumber: syz [ 445.189821][ T13] usb 2-1: config 0 descriptor?? [ 445.489575][ T8325] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 445.551380][ T8325] kvm: pic: level sensitive irq not supported [ 445.554047][ T8325] kvm: pic: non byte read [ 446.596304][ T4397] usb 2-1: USB disconnect, device number 34 [ 449.809997][ T8390] sd 0:0:1:0: PR command failed: 2 [ 449.815392][ T8390] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 449.822335][ T8390] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 449.830315][ T7] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 451.150468][ T1111] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 451.250626][ T7] usb 3-1: config 0 has no interfaces? [ 451.340265][ T1111] usb 2-1: device descriptor read/64, error -71 [ 451.410819][ T7] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 451.427603][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.436296][ T7] usb 3-1: Product: syz [ 451.446058][ T7] usb 3-1: Manufacturer: syz [ 451.456204][ T7] usb 3-1: SerialNumber: syz [ 451.487130][ T7] usb 3-1: config 0 descriptor?? [ 451.610320][ T1111] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 451.735802][ T7] usb 3-1: USB disconnect, device number 35 [ 451.810886][ T1111] usb 2-1: device descriptor read/64, error -71 [ 451.930360][ T1111] usb usb2-port1: attempt power cycle [ 452.360208][ T1111] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 452.500954][ T1111] usb 2-1: device descriptor read/8, error -71 [ 452.879727][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 452.930395][ T8430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1319'. [ 455.779564][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 455.821570][ T8493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'. [ 458.544733][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'. [ 458.568097][ T8538] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1354'. [ 459.527274][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.045753][ T8553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.375275][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 460.580253][ T4265] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 461.020277][ T4265] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.509451][ T4265] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 461.520332][ T4265] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.529472][ T4265] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 461.542914][ T4265] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 461.607789][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 461.662677][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1365'. [ 461.829410][ T4265] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.844203][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 461.852948][ T4265] usb 2-1: Product: syz [ 461.858951][ T4265] usb 2-1: Manufacturer: syz [ 462.171513][ T4265] cdc_wdm 2-1:1.0: skipping garbage [ 462.178369][ T4265] cdc_wdm 2-1:1.0: skipping garbage [ 462.228963][ T4265] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 462.260213][ T4265] cdc_wdm 2-1:1.0: Unknown control protocol [ 462.748475][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 462.819993][ T8603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.020155][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 463.541347][ T8608] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1373'. [ 464.170664][ T4233] usb 2-1: USB disconnect, device number 39 [ 464.420555][ T8620] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 464.447737][ T8620] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 465.864785][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'. [ 465.909056][ T8640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1382'. [ 465.988644][ T8640] binder: 8637:8640 ioctl c0306201 0 returned -14 [ 466.227845][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.382783][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1385'. [ 466.442725][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1385'. [ 466.665695][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.964870][ T8663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.722557][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1395'. [ 467.771344][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1395'. [ 467.803466][ T8684] binder: 8679:8684 ioctl c0306201 0 returned -14 [ 468.671329][ T1111] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 468.865144][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 468.876810][ T8705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1402'. [ 469.125885][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.146581][ T1111] usb 3-1: config 0 has no interfaces? [ 469.220421][ T8303] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 469.332563][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 469.341070][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 469.376385][ T8720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.700713][ T8303] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 469.716666][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 469.767255][ T8303] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 469.951453][ T8723] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1408'. [ 469.981287][ T8303] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.002827][ T8303] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 470.037287][ T8303] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 470.140818][ T1111] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 470.166739][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.205483][ T1111] usb 3-1: Product: syz [ 470.209815][ T1111] usb 3-1: Manufacturer: syz [ 470.221397][ T1111] usb 3-1: SerialNumber: syz [ 470.244777][ T1111] usb 3-1: config 0 descriptor?? [ 470.371420][ T8303] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 470.380677][ T8303] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 470.389167][ T8303] usb 2-1: Product: syz [ 470.393540][ T8303] usb 2-1: Manufacturer: syz [ 470.441306][ T8303] cdc_wdm 2-1:1.0: skipping garbage [ 470.448057][ T8303] cdc_wdm 2-1:1.0: skipping garbage [ 470.474142][ T8303] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 470.480446][ T8303] cdc_wdm 2-1:1.0: Unknown control protocol [ 471.290190][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 471.303283][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'. [ 471.330212][ T8749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1415'. [ 471.542956][ T8303] usb 3-1: USB disconnect, device number 36 [ 472.063003][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 472.201123][ T8770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.770679][ T8303] usb 2-1: USB disconnect, device number 40 [ 472.993945][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 473.037119][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1425'. [ 473.667037][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 473.773094][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 474.913874][ T8817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 474.922988][ T8817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 474.955166][ T8817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.764663][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1441'. [ 475.816133][ T8829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1441'. [ 475.990212][ T4286] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 476.510426][ T4286] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.527050][ T4286] usb 2-1: config 0 has no interfaces? [ 476.692252][ T8852] loop2: detected capacity change from 0 to 512 [ 476.706663][ T4286] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 476.723124][ T8852] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 476.745124][ T4286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.765565][ T4286] usb 2-1: Product: syz [ 476.775995][ T4286] usb 2-1: Manufacturer: syz [ 476.786356][ T4286] usb 2-1: SerialNumber: syz [ 476.806251][ T4286] usb 2-1: config 0 descriptor?? [ 476.825341][ T8852] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6 [ 477.370184][ T21] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 477.459932][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 477.483048][ T8866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.810968][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 477.904684][ T21] usb 3-1: not running at top speed; connect to a high speed hub [ 478.190450][ T21] usb 3-1: config 4 has an invalid interface number: 246 but max is 0 [ 478.209097][ T21] usb 3-1: config 4 has no interface number 0 [ 478.249189][ T21] usb 3-1: config 4 interface 246 has no altsetting 0 [ 478.258981][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 478.285207][ T8872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1454'. [ 478.414910][ T21] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=d5.2c [ 478.437170][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.454718][ T21] usb 3-1: Product: syz [ 478.459089][ T21] usb 3-1: Manufacturer: syz [ 478.465166][ T21] usb 3-1: SerialNumber: syz [ 478.484653][ T4286] usb 2-1: USB disconnect, device number 41 [ 480.070087][ C1] hrtimer: interrupt took 38020 ns [ 481.083655][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 481.107854][ T8914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1466'. [ 481.122832][ T21] ftdi_sio 3-1:4.246: FTDI USB Serial Device converter detected [ 481.137111][ T21] usb 3-1: Detected FT-X [ 481.160334][ T21] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 481.180299][ T21] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 481.200222][ T21] ftdi_sio 3-1:4.246: GPIO initialisation failed: -71 [ 481.211230][ T21] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 481.246577][ T21] usb 3-1: USB disconnect, device number 37 [ 481.256901][ T21] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 481.274497][ T21] ftdi_sio 3-1:4.246: device disconnected [ 482.081464][ T8934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 482.734692][ T8934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.331210][ T8946] loop1: detected capacity change from 0 to 512 [ 483.405634][ T8946] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 483.423921][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 483.727793][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1479'. [ 484.302701][ T8946] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6 [ 484.480327][ T13] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 484.830199][ T7] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 484.950327][ T13] usb 3-1: config 0 has no interfaces? [ 485.110463][ T13] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 485.119821][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.136875][ T13] usb 3-1: Product: syz [ 485.146580][ T13] usb 3-1: Manufacturer: syz [ 485.156880][ T13] usb 3-1: SerialNumber: syz [ 485.177308][ T13] usb 3-1: config 0 descriptor?? [ 485.260272][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 485.304200][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 485.390342][ T7] usb 2-1: config 4 has an invalid interface number: 246 but max is 0 [ 485.399220][ T7] usb 2-1: config 4 has no interface number 0 [ 485.405582][ T7] usb 2-1: config 4 interface 246 has no altsetting 0 [ 485.425516][ T13] usb 3-1: USB disconnect, device number 38 [ 485.570417][ T7] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=d5.2c [ 485.579762][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.588632][ T7] usb 2-1: Product: syz [ 485.593011][ T7] usb 2-1: Manufacturer: syz [ 485.597684][ T7] usb 2-1: SerialNumber: syz [ 485.942843][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 487.761607][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1493'. [ 487.939718][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1493'. [ 488.841408][ T7] ftdi_sio 2-1:4.246: FTDI USB Serial Device converter detected [ 488.877230][ T7] usb 2-1: Detected FT-X [ 488.900420][ T7] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 488.920331][ T7] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 488.950294][ T7] ftdi_sio 2-1:4.246: GPIO initialisation failed: -71 [ 489.013320][ T7] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 489.033542][ T7] usb 2-1: USB disconnect, device number 42 [ 489.061115][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 489.078370][ T7] ftdi_sio 2-1:4.246: device disconnected [ 489.210179][ T21] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 489.650790][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.774891][ T21] usb 3-1: config 0 has no interfaces? [ 490.079984][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 490.187485][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 490.223145][ T9046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1506'. [ 490.232632][ T21] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 490.249047][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.269555][ T21] usb 3-1: Product: syz [ 490.277268][ T21] usb 3-1: Manufacturer: syz [ 490.282335][ T21] usb 3-1: SerialNumber: syz [ 490.304223][ T21] usb 3-1: config 0 descriptor?? [ 490.379793][ T9042] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 490.394585][ T9042] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 490.627938][ T9026] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 490.647828][ T9026] kvm: pic: level sensitive irq not supported [ 490.648049][ T9026] kvm: pic: non byte read [ 490.665560][ T9026] kvm: pic: level sensitive irq not supported [ 490.665673][ T9026] kvm: pic: non byte read [ 490.676927][ T9026] kvm: pic: level sensitive irq not supported [ 490.676997][ T9026] kvm: pic: non byte read [ 490.698757][ T9026] kvm: pic: level sensitive irq not supported [ 490.698861][ T9026] kvm: pic: non byte read [ 490.710522][ T9026] kvm: pic: level sensitive irq not supported [ 490.710600][ T9026] kvm: pic: non byte read [ 490.785174][ T1111] usb 3-1: USB disconnect, device number 39 [ 491.750245][ T4265] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 492.021138][ T4265] usb 3-1: device descriptor read/64, error -71 [ 492.403553][ T4265] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 492.720235][ T4265] usb 3-1: device descriptor read/64, error -71 [ 492.851945][ T4265] usb usb3-port1: attempt power cycle [ 493.003748][ T7] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 493.370181][ T4265] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 493.378798][ T7] usb 2-1: config 0 has no interfaces? [ 493.470798][ T4265] usb 3-1: device descriptor read/8, error -71 [ 493.540515][ T7] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 493.556021][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.564792][ T7] usb 2-1: Product: syz [ 493.569111][ T7] usb 2-1: Manufacturer: syz [ 493.580980][ T7] usb 2-1: SerialNumber: syz [ 493.602049][ T7] usb 2-1: config 0 descriptor?? [ 493.750213][ T4265] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 493.766677][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1521'. [ 493.783124][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1521'. [ 493.845183][ T7] usb 2-1: USB disconnect, device number 43 [ 493.865948][ T4265] usb 3-1: device descriptor read/8, error -71 [ 493.903111][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 493.956365][ T26] audit: type=1804 audit(1788772421.987:14): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1525" name="bus" dev="ramfs" ino=49182 res=1 errno=0 [ 493.982575][ T26] audit: type=1804 audit(1788772422.017:15): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1525" name="bus" dev="ramfs" ino=49182 res=1 errno=0 [ 494.011095][ T4265] usb usb3-port1: unable to enumerate USB device [ 494.930245][ T9123] sd 0:0:1:0: PR command failed: 2 [ 494.935479][ T9123] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 494.942348][ T9123] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 495.850566][ T4397] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 496.061229][ T4397] usb 3-1: device descriptor read/64, error -71 [ 496.330245][ T4397] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 496.531034][ T4397] usb 3-1: device descriptor read/64, error -71 [ 496.539735][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1533'. [ 496.563062][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1533'. [ 496.660396][ T4397] usb usb3-port1: attempt power cycle [ 496.989688][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 497.070341][ T4397] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 497.160589][ T4397] usb 3-1: device descriptor read/8, error -71 [ 497.430307][ T4397] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 497.520397][ T4397] usb 3-1: device descriptor read/8, error -71 [ 497.583703][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 497.650252][ T4397] usb usb3-port1: unable to enumerate USB device [ 498.774423][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1544'. [ 498.897260][ T1111] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 498.988363][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 499.189065][ T9188] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 499.215932][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 499.346310][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.367406][ T1111] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 499.496140][ T1111] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 499.515736][ T1111] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 499.545568][ T1111] usb 3-1: Manufacturer: syz [ 499.571075][ T1111] usb 3-1: config 0 descriptor?? [ 499.833418][ T1111] usb 3-1: USB disconnect, device number 48 [ 501.553285][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'. [ 501.640162][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1558'. [ 501.813304][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.819803][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.854831][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 502.210146][ T8303] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 502.570395][ T8303] usb 3-1: config 0 has no interfaces? [ 502.730274][ T8303] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 502.739411][ T8303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.760934][ T8303] usb 3-1: Product: syz [ 502.765152][ T8303] usb 3-1: Manufacturer: syz [ 502.769758][ T8303] usb 3-1: SerialNumber: syz [ 502.901546][ T8303] usb 3-1: config 0 descriptor?? [ 503.146550][ T1111] usb 3-1: USB disconnect, device number 49 [ 503.302188][ T9251] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 503.310246][ T9251] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 504.217144][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'. [ 504.227694][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 504.270638][ T9271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1574'. [ 504.473732][ T9265] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 504.648111][ T9265] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 505.066684][ T9282] sd 0:0:1:0: PR command failed: 2 [ 505.072273][ T9282] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 505.079149][ T9282] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 505.945746][ T4397] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 506.440366][ T4397] usb 3-1: config 0 has no interfaces? [ 506.601262][ T4397] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 506.713651][ T4397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.939539][ T4397] usb 3-1: Product: syz [ 507.036611][ T4397] usb 3-1: Manufacturer: syz [ 507.193637][ T4397] usb 3-1: SerialNumber: syz [ 507.261436][ T4397] usb 3-1: config 0 descriptor?? [ 507.419638][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'. [ 507.448672][ T9322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1588'. [ 507.491929][ T9313] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 507.505602][ T4319] usb 3-1: USB disconnect, device number 50 [ 507.516426][ T9313] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 510.148737][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1603'. [ 510.176943][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1603'. [ 510.550247][ T4397] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 510.912854][ T4397] usb 3-1: config 0 has no interfaces? [ 511.160369][ T4397] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 511.169811][ T4397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.178264][ T4397] usb 3-1: Product: syz [ 511.182785][ T4397] usb 3-1: Manufacturer: syz [ 511.187615][ T4397] usb 3-1: SerialNumber: syz [ 511.198460][ T9384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.216818][ T4397] usb 3-1: config 0 descriptor?? [ 511.224505][ T9384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.464937][ T7] usb 3-1: USB disconnect, device number 51 [ 511.855186][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 512.042640][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 512.095031][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1614'. [ 513.413512][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.423294][ T9428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.714160][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'. [ 514.041921][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 514.061169][ T9445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1628'. [ 514.166827][ T9448] sd 0:0:1:0: PR command failed: 2 [ 514.172683][ T9448] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 514.179450][ T9448] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 514.308465][ T9451] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 514.445992][ T9451] kvm: pic: level sensitive irq not supported [ 514.446077][ T9451] kvm: pic: non byte read [ 514.464351][ T1111] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 514.700819][ T1111] usb 2-1: device descriptor read/64, error -71 [ 514.904701][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'. [ 514.989559][ T4319] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 514.997260][ T1111] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 515.200198][ T1111] usb 2-1: device descriptor read/64, error -71 [ 515.250372][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 515.293306][ T9471] No such timeout policy "syz1" [ 515.333111][ T1111] usb usb2-port1: attempt power cycle [ 515.451029][ T4319] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 515.528098][ T4319] usb 3-1: config 0 has no interface number 0 [ 515.790541][ T1111] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 515.799098][ T4319] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 515.930199][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.939257][ T4319] usb 3-1: Product: syz [ 515.944000][ T4319] usb 3-1: Manufacturer: syz [ 515.948961][ T4319] usb 3-1: SerialNumber: syz [ 515.959653][ T4319] usb 3-1: config 0 descriptor?? [ 516.073585][ T1111] usb 2-1: device descriptor read/8, error -71 [ 516.209285][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 516.233633][ T9477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.344871][ T4319] usb 3-1: USB disconnect, device number 52 [ 516.390847][ T1111] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 516.511699][ T1111] usb 2-1: device descriptor read/8, error -71 [ 516.650358][ T1111] usb usb2-port1: unable to enumerate USB device [ 517.358709][ T9490] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 517.407077][ T9490] kvm: pic: level sensitive irq not supported [ 517.407191][ T9490] kvm: pic: non byte read [ 517.688893][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 517.725758][ T9504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1646'. [ 518.872560][ T4319] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 519.240757][ T4319] usb 2-1: Using ep0 maxpacket: 8 [ 519.360250][ T4319] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 519.368626][ T4319] usb 2-1: config 0 has no interface number 0 [ 519.438670][ T8303] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 519.540791][ T4319] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 519.550007][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.566528][ T4319] usb 2-1: Product: syz [ 519.572392][ T4319] usb 2-1: Manufacturer: syz [ 519.577093][ T4319] usb 2-1: SerialNumber: syz [ 519.597465][ T4319] usb 2-1: config 0 descriptor?? [ 519.840317][ T8303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.860158][ T8303] usb 3-1: config 0 has no interfaces? [ 519.882622][ T4319] usb 2-1: USB disconnect, device number 48 [ 520.064829][ T8303] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 520.074022][ T8303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.087786][ T8303] usb 3-1: Product: syz [ 520.100313][ T8303] usb 3-1: Manufacturer: syz [ 520.104987][ T8303] usb 3-1: SerialNumber: syz [ 520.121748][ T8303] usb 3-1: config 0 descriptor?? [ 520.433513][ T9540] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 521.099454][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 521.924849][ T4397] usb 3-1: USB disconnect, device number 53 [ 523.563741][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 523.913859][ T9634] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 523.925849][ T9634] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 523.984829][ T4319] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 524.370445][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.395426][ T4319] usb 3-1: config 0 has no interfaces? [ 524.690233][ T4319] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 524.720204][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.728253][ T4319] usb 3-1: Product: syz [ 524.732871][ T4319] usb 3-1: Manufacturer: syz [ 524.737505][ T4319] usb 3-1: SerialNumber: syz [ 524.758929][ T4319] usb 3-1: config 0 descriptor?? [ 525.053140][ T9630] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 525.112448][ T9630] kvm: pic: level sensitive irq not supported [ 525.112531][ T9630] kvm: pic: non byte read [ 525.254724][ T4230] usb 3-1: USB disconnect, device number 54 [ 525.984765][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 526.533000][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.544689][ T9683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.265482][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 529.310332][ T9716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.340388][ T4314] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 529.900165][ T4397] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 530.143711][ T4397] usb 3-1: Using ep0 maxpacket: 8 [ 530.260518][ T4397] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 530.279802][ T4397] usb 3-1: config 0 has no interface number 0 [ 530.462406][ T4397] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 530.489336][ T4397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.518463][ T4397] usb 3-1: Product: syz [ 530.531461][ T4397] usb 3-1: Manufacturer: syz [ 530.539276][ T4397] usb 3-1: SerialNumber: syz [ 530.585801][ T4397] usb 3-1: config 0 descriptor?? [ 531.663301][ T4397] usb 3-1: USB disconnect, device number 55 [ 533.853446][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.865763][ T9769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 534.133942][ T9774] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 538.914904][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.935180][ T9822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.187725][ T9833] loop1: detected capacity change from 0 to 128 [ 541.893164][ T9833] hpfs: bad mount options. [ 542.384713][ T9838] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 542.402079][ T9838] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 542.600229][ T21] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 543.100380][ T21] usb 3-1: config 0 has no interfaces? [ 543.260796][ T21] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 543.275270][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.292744][ T21] usb 3-1: Product: syz [ 543.298282][ T21] usb 3-1: Manufacturer: syz [ 543.306747][ T21] usb 3-1: SerialNumber: syz [ 543.321735][ T21] usb 3-1: config 0 descriptor?? [ 543.469161][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 544.727368][ T9841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1765'. [ 544.767339][ T21] usb 3-1: USB disconnect, device number 56 [ 544.880224][ T1111] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 545.280318][ T1111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.327927][ T1111] usb 2-1: config 0 has no interfaces? [ 545.530388][ T1111] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 545.548160][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.574991][ T1111] usb 2-1: Product: syz [ 545.579228][ T1111] usb 2-1: Manufacturer: syz [ 545.599067][ T1111] usb 2-1: SerialNumber: syz [ 545.641033][ T1111] usb 2-1: config 0 descriptor?? [ 545.695769][ T4230] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 546.004405][ T9858] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 546.728986][ T4230] usb 3-1: device descriptor read/64, error -71 [ 547.000228][ T4230] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 547.190156][ T4230] usb 3-1: device descriptor read/64, error -71 [ 547.310960][ T4230] usb usb3-port1: attempt power cycle [ 547.720303][ T4230] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 547.820396][ T4230] usb 3-1: device descriptor read/8, error -71 [ 547.997457][ T1111] usb 2-1: USB disconnect, device number 49 [ 548.090172][ T4230] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 548.190533][ T4230] usb 3-1: device descriptor read/8, error -71 [ 548.310330][ T4230] usb usb3-port1: unable to enumerate USB device [ 548.723207][ T9896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 549.080514][ T9896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.044871][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 551.210274][ T1111] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 551.590647][ T1111] usb 2-1: config 0 has no interfaces? [ 551.750556][ T1111] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 551.884311][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.927579][ T1111] usb 2-1: Product: syz [ 551.942996][ T1111] usb 2-1: Manufacturer: syz [ 551.956682][ T1111] usb 2-1: SerialNumber: syz [ 552.123888][ T1111] usb 2-1: config 0 descriptor?? [ 552.863222][ T9908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1784'. [ 552.944598][ T2301] usb 2-1: USB disconnect, device number 50 [ 553.166051][ T4279] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 553.406129][ T4279] usb 3-1: device descriptor read/64, error -71 [ 553.690439][ T4279] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 553.950301][ T4279] usb 3-1: device descriptor read/64, error -71 [ 554.086736][ T4279] usb usb3-port1: attempt power cycle [ 554.610249][ T21] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 554.640285][ T4279] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 554.761424][ T4279] usb 3-1: device descriptor read/8, error -71 [ 554.850203][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 554.980388][ T21] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 554.989908][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.001834][ T21] usb 2-1: config 0 descriptor?? [ 555.040150][ T4279] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 555.172509][ T4279] usb 3-1: device descriptor read/8, error -71 [ 555.282449][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 555.300479][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 555.318296][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 555.349644][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 555.376449][ T21] usb 2-1: media controller created [ 555.397040][ T4279] usb usb3-port1: unable to enumerate USB device [ 555.464687][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 555.560321][ T21] az6027: usb out operation failed. (-71) [ 555.580342][ T21] az6027: usb out operation failed. (-71) [ 555.595446][ T21] stb0899_attach: Driver disabled by Kconfig [ 555.606525][ T21] az6027: no front-end attached [ 555.606525][ T21] [ 555.634247][ T21] az6027: usb out operation failed. (-71) [ 555.648016][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 555.669956][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 555.698534][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 555.714192][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 555.738819][ T21] usb 2-1: USB disconnect, device number 51 [ 555.859401][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 556.560837][ T9985] tipc: Enabling of bearer rejected, failed to enable media [ 556.739010][ T4279] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 557.156163][ T4279] usb 2-1: config 0 has no interfaces? [ 557.320230][ T21] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 557.350279][ T4279] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 557.359479][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.380148][ T4279] usb 2-1: Product: syz [ 557.384367][ T4279] usb 2-1: Manufacturer: syz [ 557.389437][ T4279] usb 2-1: SerialNumber: syz [ 557.412802][ T4279] usb 2-1: config 0 descriptor?? [ 557.520302][ T21] usb 3-1: device descriptor read/64, error -71 [ 557.754002][ T9979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1804'. [ 557.776627][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 557.790276][ T21] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 557.808549][ T23] usb 2-1: USB disconnect, device number 52 [ 558.080190][ T21] usb 3-1: device descriptor read/64, error -71 [ 558.746830][ T21] usb usb3-port1: attempt power cycle [ 559.096556][T10023] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 559.220244][ T21] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 559.320898][ T21] usb 3-1: device descriptor read/8, error -71 [ 559.590845][ T21] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 559.690297][ T21] usb 3-1: device descriptor read/8, error -71 [ 559.810857][ T21] usb usb3-port1: unable to enumerate USB device [ 560.200165][ T21] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 560.493357][ T4314] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 560.617767][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 560.720368][ T21] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 560.748876][ T21] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 560.776000][ T21] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 560.802436][ T21] usb 2-1: config 220 has no interface number 2 [ 560.822381][ T21] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 560.857621][ T21] usb 2-1: config 220 interface 0 has no altsetting 0 [ 560.867031][ T21] usb 2-1: config 220 interface 76 has no altsetting 0 [ 560.874591][ T21] usb 2-1: config 220 interface 1 has no altsetting 0 [ 561.025096][T10061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1831'. [ 561.040424][ T21] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 561.055198][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.066989][ T21] usb 2-1: Product: syz [ 561.076989][ T21] usb 2-1: Manufacturer: syz [ 561.084620][ T21] usb 2-1: SerialNumber: syz [ 561.490426][ T21] usb 2-1: selecting invalid altsetting 0 [ 561.496814][ T21] usb 2-1: selecting invalid altsetting 0 [ 561.526151][ T21] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 561.535849][ T21] usb 2-1: No valid video chain found. [ 561.631383][ T21] usb 2-1: selecting invalid altsetting 0 [ 561.637189][ T21] usbtest: probe of 2-1:220.1 failed with error -22 [ 561.661459][ T21] usb 2-1: USB disconnect, device number 53 [ 561.979109][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 562.456977][T10098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1846'. [ 563.250509][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.256940][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.483028][T10118] tipc: Enabling of bearer rejected, failed to enable media [ 563.660278][ T23] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 563.871229][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 564.340429][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 564.350829][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.358953][ T23] usb 2-1: Product: syz [ 564.363659][ T23] usb 2-1: Manufacturer: syz [ 564.368306][ T23] usb 2-1: SerialNumber: syz [ 564.600169][ T21] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 564.640280][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 564.690219][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 564.970309][ T21] usb 3-1: config 0 has no interfaces? [ 565.990799][ T21] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 565.999905][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.019322][ T21] usb 3-1: Product: syz [ 566.028314][ T21] usb 3-1: Manufacturer: syz [ 566.037508][ T21] usb 3-1: SerialNumber: syz [ 566.059094][ T21] usb 3-1: config 0 descriptor?? [ 566.304299][T10133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1858'. [ 566.373560][ T21] usb 3-1: USB disconnect, device number 69 [ 566.382923][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 566.400212][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 567.041314][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 567.070234][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 567.148407][T10172] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 567.264373][T10172] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 567.842551][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 567.890322][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 567.927416][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 567.991348][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 568.173534][T10193] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 568.195161][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 568.218222][T10193] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 568.299030][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 568.350227][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 568.359778][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 568.391530][ T23] lan78xx: probe of 2-1:1.0 failed with error -71 [ 568.449033][ T23] usb 2-1: USB disconnect, device number 54 [ 569.750167][ T4319] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 570.140295][ T4319] usb 3-1: config 0 has no interfaces? [ 570.361564][ T4319] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 570.406320][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.497167][ T4319] usb 3-1: Product: syz [ 570.539528][ T4319] usb 3-1: Manufacturer: syz [ 570.589183][ T4319] usb 3-1: SerialNumber: syz [ 570.745801][ T4319] usb 3-1: config 0 descriptor?? [ 571.116581][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1885'. [ 571.128570][ T23] usb 3-1: USB disconnect, device number 70 [ 571.206610][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 572.320647][T10247] loop2: detected capacity change from 0 to 512 [ 572.400199][T10247] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 572.628143][T10247] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6 [ 573.252340][T10261] tipc: Enabling of bearer rejected, failed to enable media [ 573.719157][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 574.149570][T10280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 574.203057][T10280] net_ratelimit: 2 callbacks suppressed [ 574.203210][T10280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.783627][T10284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 575.156401][T10284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 577.348369][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 579.140356][ T21] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 579.399913][T10338] tipc: Enabling of bearer rejected, failed to enable media [ 579.500415][ T21] usb 2-1: config 0 has no interfaces? [ 579.670394][ T21] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 579.689903][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.719312][ T21] usb 2-1: Product: syz [ 579.729945][ T21] usb 2-1: Manufacturer: syz [ 579.734981][ T21] usb 2-1: SerialNumber: syz [ 579.771486][ T21] usb 2-1: config 0 descriptor?? [ 579.969377][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 580.038726][ T4230] usb 2-1: USB disconnect, device number 55 [ 580.591075][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 580.609575][T10362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.291022][T10376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.567725][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1941'. [ 582.819339][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 583.340224][ T21] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 583.400981][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.660278][ T21] usb 3-1: not running at top speed; connect to a high speed hub [ 583.740243][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.760250][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 583.780147][ T21] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 583.789348][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.851910][ T21] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 583.879850][ T21] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 583.902271][ T21] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 583.917703][ T21] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 583.937143][ T21] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 583.964950][ T21] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 584.275480][ T26] audit: type=1804 audit(1788772512.307:16): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1953" name="bus" dev="ramfs" ino=54014 res=1 errno=0 [ 584.505535][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 586.150214][ T21] usb 3-1: USB disconnect, device number 71 [ 586.354886][ T21] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 586.509242][ T21] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 586.596949][ T21] keyspan 3-1:1.0: device disconnected [ 587.827042][T10435] No such timeout policy "syz1" [ 588.793030][T10441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 588.807570][T10441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.983665][T10453] No such timeout policy "syz1" [ 590.134318][T10455] No such timeout policy "syz1" [ 590.163459][T10455] loop1: detected capacity change from 0 to 128 [ 590.190415][ T4319] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 590.283107][T10455] hpfs: bad mount options. [ 590.456223][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 590.620786][ T4319] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 590.732672][ T4319] usb 3-1: config 0 has no interface number 0 [ 592.369488][ T4314] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 592.516361][ T4319] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 592.526883][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.536332][ T4319] usb 3-1: Product: syz [ 592.540833][ T4319] usb 3-1: Manufacturer: syz [ 592.545461][ T4319] usb 3-1: SerialNumber: syz [ 592.554901][ T4319] usb 3-1: config 0 descriptor?? [ 592.841934][ T4319] usb 3-1: USB disconnect, device number 72 [ 593.410245][ T4319] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 593.690221][ T4319] usb 3-1: Using ep0 maxpacket: 16 [ 593.812757][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.823117][ T4319] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 593.910331][ T4319] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 593.919555][ T4319] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 593.927737][ T4319] usb 3-1: Manufacturer: syz [ 593.956768][ T4319] usb 3-1: config 0 descriptor?? [ 594.010274][ T21] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 594.204314][ T4234] usb 3-1: USB disconnect, device number 73 [ 594.250206][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 594.370333][ T21] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 594.387330][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.415059][T10495] No such timeout policy "syz1" [ 594.420585][ T21] usb 2-1: config 0 descriptor?? [ 594.680603][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 594.708564][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 594.770452][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 594.777649][ T21] usb 2-1: media controller created [ 594.811656][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.890225][ T21] az6027: usb out operation failed. (-71) [ 594.920603][ T21] az6027: usb out operation failed. (-71) [ 594.928938][ T21] stb0899_attach: Driver disabled by Kconfig [ 594.955920][ T21] az6027: no front-end attached [ 594.955920][ T21] [ 595.025330][ T21] az6027: usb out operation failed. (-71) [ 595.040123][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 595.060245][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 595.110164][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 595.130470][T10501] No such timeout policy "syz1" [ 595.160671][T10501] loop2: detected capacity change from 0 to 128 [ 595.185678][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 595.201376][T10501] hpfs: bad mount options. [ 595.510107][ T21] usb 2-1: USB disconnect, device number 56 [ 596.140575][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 596.144799][T10509] No such timeout policy "syz1" [ 596.203356][T10511] No such timeout policy "syz1" [ 596.232574][T10511] loop1: detected capacity change from 0 to 128 [ 596.495864][T10511] hpfs: bad mount options. [ 598.706906][T10544] sd 0:0:1:0: PR command failed: 2 [ 598.719163][T10544] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 598.788609][T10544] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 600.141438][T10562] No such timeout policy "syz1" [ 600.172034][T10562] loop1: detected capacity change from 0 to 128 [ 600.624757][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 600.701793][T10562] hpfs: bad mount options. [ 600.928451][T10564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.015710][ T4230] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 601.077679][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 601.485349][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 601.589370][T10579] No such timeout policy "syz1" [ 601.620349][T10579] loop1: detected capacity change from 0 to 128 [ 602.361267][T10579] hpfs: bad mount options. [ 602.421697][ T4230] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 602.429983][ T4230] usb 3-1: config 0 has no interface number 0 [ 602.854001][T10590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 602.875272][T10590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.980195][ T4230] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 603.989594][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.041549][ T4230] usb 3-1: config 0 descriptor?? [ 604.080389][ T4230] usb 3-1: can't set config #0, error -71 [ 604.101097][ T4230] usb 3-1: USB disconnect, device number 74 [ 604.490118][ T4230] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 604.610414][ T4279] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 604.637101][T10606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 604.870263][T10606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.130201][ T4230] usb 3-1: config 0 has no interfaces? [ 605.224280][T10614] No such timeout policy "syz1" [ 605.351082][ T4230] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 605.375651][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.420252][ T4230] usb 3-1: Product: syz [ 605.443280][ T4230] usb 3-1: Manufacturer: syz [ 605.469189][ T4230] usb 3-1: SerialNumber: syz [ 605.872801][ T4230] usb 3-1: config 0 descriptor?? [ 606.010407][ T4279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.160352][ T4279] usb 2-1: config 0 has no interfaces? [ 606.188280][ T21] usb 3-1: USB disconnect, device number 75 [ 606.643284][T10624] No such timeout policy "syz1" [ 608.197982][ T4279] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 608.300440][T10637] No such timeout policy "syz1" [ 608.753917][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.762118][ T4279] usb 2-1: Product: syz [ 608.816856][ T4279] usb 2-1: config 0 descriptor?? [ 608.846396][ T4279] usb 2-1: can't set config #0, error -71 [ 608.933498][ T4279] usb 2-1: USB disconnect, device number 57 [ 609.276784][T10649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 609.286385][T10649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.655434][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 612.980356][ T4319] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 613.260200][ T23] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 613.396447][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.410009][ T4319] usb 3-1: config 0 has no interfaces? [ 613.560769][ T23] usb 2-1: no configurations [ 613.565529][ T23] usb 2-1: can't read configurations, error -22 [ 613.600352][ T4319] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 613.619897][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.633140][ T4319] usb 3-1: Product: syz [ 613.650138][ T4319] usb 3-1: Manufacturer: syz [ 613.659539][ T4319] usb 3-1: SerialNumber: syz [ 613.681675][ T4319] usb 3-1: config 0 descriptor?? [ 613.730219][ T23] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 614.015196][T10666] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 614.030301][ T23] usb 2-1: no configurations [ 614.035437][ T23] usb 2-1: can't read configurations, error -22 [ 614.048267][ T23] usb usb2-port1: attempt power cycle [ 614.480238][ T23] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 614.630472][ T23] usb 2-1: no configurations [ 614.640670][ T23] usb 2-1: can't read configurations, error -22 [ 614.806499][ T23] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 614.960301][ T23] usb 2-1: no configurations [ 614.965048][ T23] usb 2-1: can't read configurations, error -22 [ 614.988409][ T23] usb usb2-port1: unable to enumerate USB device [ 615.101700][T10685] tipc: Enabling of bearer rejected, failed to enable media [ 615.216879][ T4319] usb 3-1: USB disconnect, device number 76 [ 617.552226][T10701] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 617.568916][T10701] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 617.868178][ T21] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 619.130430][ T21] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 619.150181][ T21] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 619.175544][ T21] usb 3-1: config 220 interface 0 has no altsetting 0 [ 619.370387][ T21] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 619.389874][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.419273][ T21] usb 3-1: Product: syz [ 619.439409][ T21] usb 3-1: Manufacturer: syz [ 619.454383][ T21] usb 3-1: SerialNumber: syz [ 619.940942][ T21] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 619.950418][ T21] usb 3-1: No valid video chain found. [ 620.016565][ T21] usb 3-1: USB disconnect, device number 77 [ 623.331947][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 623.345357][T10749] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 625.083535][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.089865][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.990290][ T4234] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 627.291873][T10792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 627.356764][T10792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.480855][ T4234] usb 2-1: not running at top speed; connect to a high speed hub [ 627.638670][ T4234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.745300][ T4234] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 628.003725][ T4234] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 628.043524][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.131750][ T4234] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 628.147491][ T4234] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 628.189318][ T4234] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 628.221842][ T4234] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 628.229611][ T4234] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 628.269831][ T4234] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 628.487423][ T4234] usb 2-1: USB disconnect, device number 62 [ 628.506009][ T4234] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 628.562348][ T4234] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 628.599791][ T4234] keyspan 2-1:1.0: device disconnected [ 628.759832][T10813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 628.789869][T10813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.610253][ T7] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 633.673994][T10865] bridge0: port 3(syz_tun) entered blocking state [ 633.691147][T10865] bridge0: port 3(syz_tun) entered disabled state [ 633.708132][T10865] device syz_tun entered promiscuous mode [ 633.720953][T10865] bridge0: port 3(syz_tun) entered blocking state [ 633.728017][T10865] bridge0: port 3(syz_tun) entered forwarding state [ 633.991541][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 634.070330][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.089235][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 634.118242][T10869] loop2: detected capacity change from 0 to 1024 [ 634.176946][T10869] EXT4-fs (loop2): inline encryption not supported [ 634.186596][ T7] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 634.271367][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.308210][T10869] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 634.402463][ T7] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 634.427242][ T7] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 634.529733][ T7] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 634.556256][ T7] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 634.591475][ T7] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 634.636744][ T7] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 634.861318][T10881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 634.886427][T10881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.701379][T10883] bridge0: port 3(syz_tun) entered blocking state [ 635.708072][T10883] bridge0: port 3(syz_tun) entered disabled state [ 635.715828][T10883] device syz_tun entered promiscuous mode [ 635.723066][T10883] bridge0: port 3(syz_tun) entered blocking state [ 635.729566][T10883] bridge0: port 3(syz_tun) entered forwarding state [ 635.880981][ T21] usb 2-1: USB disconnect, device number 63 [ 635.959165][ T21] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 636.024380][ T21] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 636.165645][ T21] keyspan 2-1:1.0: device disconnected [ 637.118375][ T4319] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 637.490856][ T4319] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 637.538882][ T4319] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 637.670864][ T4319] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 637.831140][ T4319] usb 2-1: config 220 has no interface number 2 [ 637.858039][ T4319] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.918210][ T4319] usb 2-1: config 220 interface 0 has no altsetting 0 [ 637.958786][ T4319] usb 2-1: config 220 interface 76 has no altsetting 0 [ 637.987332][ T4319] usb 2-1: config 220 interface 1 has no altsetting 0 [ 638.170498][ T4319] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 638.190732][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.211157][ T4319] usb 2-1: Product: syz [ 638.215571][ T4319] usb 2-1: Manufacturer: syz [ 638.230180][ T4319] usb 2-1: SerialNumber: syz [ 638.609017][T10942] No such timeout policy "syz1" [ 638.630289][ T4319] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 638.637076][ T4319] usb 2-1: No valid video chain found. [ 638.750305][ T4319] usb 2-1: USB disconnect, device number 64 [ 639.368613][T10947] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 639.420337][T10947] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 639.485319][T10958] bridge0: port 3(syz_tun) entered blocking state [ 639.492104][T10958] bridge0: port 3(syz_tun) entered disabled state [ 639.499665][T10958] device syz_tun entered promiscuous mode [ 639.530660][T10958] bridge0: port 3(syz_tun) entered blocking state [ 639.537238][T10958] bridge0: port 3(syz_tun) entered forwarding state [ 640.915991][T10972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 641.117058][T10972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 643.017698][T11005] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 643.028211][T11005] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 644.348819][T11016] loop1: detected capacity change from 0 to 128 [ 644.666605][T11036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 644.916620][T11036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.150110][ T4265] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 646.515725][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2143'. [ 646.731650][ T4265] usb 2-1: not running at top speed; connect to a high speed hub [ 646.857029][T11065] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 646.880395][T11065] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 646.980330][ T4265] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.010104][ T4265] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 647.030264][ T4265] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 647.059946][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.116313][T11078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 647.161661][ T4265] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 647.178133][ T4265] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 647.204900][ T4265] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 647.235059][ T4265] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 647.250162][ T4265] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 647.269991][ T4265] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 647.283905][T11078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.599287][ T4234] usb 2-1: USB disconnect, device number 65 [ 648.622507][ T4234] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 648.655779][ T4234] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 648.678949][ T4234] keyspan 2-1:1.0: device disconnected [ 649.341110][T11095] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 649.359971][T11095] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 649.720974][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2157'. [ 650.178366][T11119] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 650.194094][T11119] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 650.340278][ T8303] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 650.630264][ T8303] usb 3-1: device descriptor read/64, error -71 [ 650.943412][ T8303] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 651.170227][ T8303] usb 3-1: device descriptor read/64, error -71 [ 651.351159][ T8303] usb usb3-port1: attempt power cycle [ 651.995312][T11139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 652.164804][T11139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.712673][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'. [ 652.780313][ T1111] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 652.952841][ T8303] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 653.443121][T11179] sd 0:0:1:0: PR command failed: 2 [ 653.448597][T11179] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 653.455403][T11179] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 653.463928][ T8303] usb 3-1: device not accepting address 80, error -71 [ 653.883085][ T1111] usb 2-1: config 0 has no interfaces? [ 654.674669][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 654.960422][ T1111] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 655.005032][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.033831][ T1111] usb 2-1: Product: syz [ 655.038067][ T1111] usb 2-1: Manufacturer: syz [ 655.058532][ T1111] usb 2-1: SerialNumber: syz [ 655.086719][ T1111] usb 2-1: config 0 descriptor?? [ 655.580342][ T4611] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 656.287390][ T1111] usb 2-1: USB disconnect, device number 66 [ 656.757010][T11228] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 656.780631][T11228] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 657.237490][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 657.574750][T11244] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 657.609144][T11244] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 660.240531][T11275] tipc: Started in network mode [ 660.245712][T11275] tipc: Node identity 5efc0094f473, cluster identity 4711 [ 660.259448][T11275] tipc: Enabled bearer , priority 0 [ 660.272311][T11275] tipc: Resetting bearer [ 660.288641][T11274] tipc: Disabling bearer [ 660.523186][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 663.515323][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 663.570141][ T1111] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 663.910187][ T4265] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 664.533328][ T1111] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 664.579847][ T1111] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 664.830125][ T1111] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 664.842598][ T1111] usb 3-1: config 220 has no interface number 2 [ 664.849252][ T1111] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 664.865570][ T1111] usb 3-1: config 220 interface 0 has no altsetting 0 [ 664.874838][ T1111] usb 3-1: config 220 interface 76 has no altsetting 0 [ 664.883278][ T1111] usb 3-1: config 220 interface 1 has no altsetting 0 [ 665.331015][ T4265] usb 2-1: config 0 has no interfaces? [ 665.571418][T11344] tipc: Enabling of bearer rejected, failed to enable media [ 665.676916][ T4265] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 665.708850][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.729857][ T1111] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 665.771196][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.774281][ T4265] usb 2-1: Product: syz [ 665.781830][ T1111] usb 3-1: Product: syz [ 665.836430][ T4265] usb 2-1: Manufacturer: syz [ 665.863427][ T4265] usb 2-1: SerialNumber: syz [ 665.883746][ T1111] usb 3-1: Manufacturer: syz [ 665.910129][ T1111] usb 3-1: SerialNumber: syz [ 665.981076][ T4265] usb 2-1: config 0 descriptor?? [ 666.361753][ T1111] usb 3-1: can't set config #220, error -71 [ 666.384784][ T1111] usb 3-1: USB disconnect, device number 82 [ 666.533743][ T4265] usb 2-1: USB disconnect, device number 67 [ 666.961048][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 668.866127][T11373] bridge0: port 3(syz_tun) entered blocking state [ 668.883056][T11373] bridge0: port 3(syz_tun) entered disabled state [ 668.921129][T11373] device syz_tun entered promiscuous mode [ 668.927333][T11373] bridge0: port 3(syz_tun) entered blocking state [ 668.933890][T11373] bridge0: port 3(syz_tun) entered forwarding state [ 671.689186][T11392] loop1: detected capacity change from 0 to 1024 [ 671.802006][T11392] EXT4-fs (loop1): inline encryption not supported [ 671.990319][T11392] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 672.279471][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 673.269884][T11421] No such timeout policy "syz1" [ 673.281004][T11421] loop1: detected capacity change from 0 to 128 [ 673.312736][T11421] hpfs: bad mount options. [ 674.924600][T11420] loop2: detected capacity change from 0 to 32768 [ 675.070126][ T2301] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 675.860236][ T2301] usb 2-1: no configurations [ 675.865409][ T2301] usb 2-1: can't read configurations, error -22 [ 676.040164][ T2301] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 677.121047][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'. [ 677.190296][ T2301] usb 2-1: no configurations [ 677.196567][ T2301] usb 2-1: can't read configurations, error -22 [ 677.995135][ T2301] usb usb2-port1: attempt power cycle [ 679.820989][ T4233] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 679.957110][T11478] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 681.160537][ T4233] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 681.170155][ T4233] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 681.192463][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 681.287314][ T4233] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 681.299004][ T4233] usb 3-1: config 220 has no interface number 2 [ 681.311058][ T4233] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 681.350090][ T4233] usb 3-1: config 220 interface 0 has no altsetting 0 [ 681.356929][ T4233] usb 3-1: config 220 interface 76 has no altsetting 0 [ 681.384523][ T4233] usb 3-1: config 220 interface 1 has no altsetting 0 [ 681.476361][ T4233] usb 3-1: string descriptor 0 read error: -71 [ 681.488558][ T4233] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 681.528100][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.660346][ T4233] usb 3-1: can't set config #220, error -71 [ 682.275523][ T4233] usb 3-1: USB disconnect, device number 83 [ 682.640136][ T4233] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 683.310670][ T4233] usb 3-1: config 0 has no interfaces? [ 683.630429][ T4233] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 683.639536][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.949940][T11526] ipvlan0: Caught tx_queue_len zero misconfig [ 684.282411][ T4233] usb 3-1: Product: syz [ 684.287189][ T4233] usb 3-1: Manufacturer: syz [ 684.407791][ T4233] usb 3-1: SerialNumber: syz [ 685.276932][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2293'. [ 685.319580][ T4233] usb 3-1: config 0 descriptor?? [ 685.360384][ T4233] usb 3-1: can't set config #0, error -71 [ 685.446630][ T4233] usb 3-1: USB disconnect, device number 84 [ 685.840277][ T4233] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 686.123202][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.129582][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.201824][ T4233] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 686.218699][ T4233] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 686.272345][ T4233] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 686.320341][ T4233] usb 3-1: config 220 has no interface number 2 [ 686.341226][ T4233] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 686.550349][ T4233] usb 3-1: config 220 interface 0 has no altsetting 0 [ 686.557989][ T4233] usb 3-1: config 220 interface 76 has no altsetting 0 [ 686.617436][ T4233] usb 3-1: config 220 interface 1 has no altsetting 0 [ 687.304522][ T8072] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 687.580608][ T4233] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 687.619435][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.679673][ T4233] usb 3-1: Product: syz [ 687.705300][ T4233] usb 3-1: Manufacturer: syz [ 688.157603][ T4233] usb 3-1: SerialNumber: syz [ 689.075860][ T4233] usb 3-1: can't set config #220, error -71 [ 689.398960][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 689.709834][ T4233] usb 3-1: USB disconnect, device number 85 [ 689.922870][T11585] loop2: detected capacity change from 0 to 16 [ 689.959863][T11585] erofs: (device loop2): mounted with root inode @ nid 36. [ 690.723934][T11596] tipc: Enabled bearer , priority 0 [ 690.774998][T11596] device syzkaller0 entered promiscuous mode [ 690.897720][T11596] tipc: Resetting bearer [ 690.948416][T11594] tipc: Resetting bearer [ 691.012592][T11594] tipc: Disabling bearer [ 692.771538][T11607] rnbd_client L599: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 697.831379][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 697.961391][ T8073] rtrs_client L1771: : Resolving route failed, err: -19 [ 698.086896][T11607] rtrs_client L2614: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 701.459571][ T1111] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 702.670532][ T1111] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 702.700159][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.739237][ T1111] usb 2-1: Product: syz [ 702.783822][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'. [ 704.361387][ T1111] usb 2-1: Manufacturer: syz [ 704.366075][ T1111] usb 2-1: SerialNumber: syz [ 705.610166][ T1111] usb 2-1: can't set config #1, error -71 [ 705.619270][ T1111] usb 2-1: USB disconnect, device number 71 [ 705.696224][T11686] tipc: Enabling of bearer rejected, failed to enable media [ 705.811435][T11694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.266078][T11701] ipvlan0: Caught tx_queue_len zero misconfig [ 706.840236][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 707.434750][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 708.170243][T11713] tipc: Enabled bearer , priority 0 [ 708.418253][T11717] loop2: detected capacity change from 0 to 32768 [ 708.445509][T11713] device syzkaller0 entered promiscuous mode [ 708.493254][T11717] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.2348 (11717) [ 708.521620][T11717] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 708.531895][T11717] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 708.541839][T11717] BTRFS info (device loop2): use zstd compression, level 3 [ 708.549114][T11717] BTRFS info (device loop2): force clearing of disk cache [ 708.556359][T11717] BTRFS info (device loop2): enabling disk space caching [ 708.563608][T11717] BTRFS info (device loop2): disk space caching is enabled [ 708.570879][T11717] BTRFS info (device loop2): has skinny extents [ 708.752327][T11712] tipc: Resetting bearer [ 708.869643][T11712] tipc: Disabling bearer [ 709.107308][T11717] BTRFS info (device loop2): enabling ssd optimizations [ 709.127273][T11717] BTRFS info (device loop2): clearing free space tree [ 709.135868][T11717] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 709.147215][T11717] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 710.650927][T11745] rnbd_client L599: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 710.897254][ T8073] rtrs_client L1771: : Resolving route failed, err: -19 [ 710.957300][T11745] rtrs_client L2614: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 711.897739][T11766] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 711.936812][T11766] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 713.368620][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 713.796385][T11788] loop1: detected capacity change from 0 to 64 [ 714.068311][T11795] tipc: Enabling of bearer rejected, failed to enable media [ 714.566520][T11801] loop2: detected capacity change from 0 to 16 [ 714.696978][T11801] erofs: (device loop2): mounted with root inode @ nid 36. [ 716.671797][T11812] overlayfs: failed to clone lowerpath [ 719.018492][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'. [ 719.997293][ T8073] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 724.219478][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 731.641728][T11905] loop1: detected capacity change from 0 to 16 [ 732.342065][T11905] erofs: (device loop1): mounted with root inode @ nid 36. [ 732.893951][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 736.650268][T11761] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 737.020822][T11761] usb 3-1: config 0 interface 0 altsetting 192 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 737.070301][T11761] usb 3-1: config 0 interface 0 altsetting 192 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 737.566027][T11761] usb 3-1: config 0 interface 0 altsetting 192 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.518324][T11761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 738.526584][T11761] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 738.538414][T11761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.602809][T11761] usb 3-1: config 0 descriptor?? [ 738.620997][T11927] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 738.940909][T11761] usbhid 3-1:0.0: can't add hid device: -71 [ 738.947659][T11761] usbhid: probe of 3-1:0.0 failed with error -71 [ 739.053211][T11761] usb 3-1: USB disconnect, device number 86 [ 739.208736][ T8073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.342823][T11931] wg0 speed is unknown, defaulting to 1000 [ 740.544138][ T4318] infiniband syz2: set down [ 740.571696][ T1111] wg0 speed is unknown, defaulting to 1000 [ 740.661325][ T8073] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.471067][ T4265] Bluetooth: hci5: command 0x0409 tx timeout [ 742.195827][T11761] wg0 speed is unknown, defaulting to 1000 [ 742.543965][ T8073] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.978759][ T8073] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.041045][ T8303] Bluetooth: hci5: command 0x041b tx timeout [ 744.235301][T11962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 744.371883][T11962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 745.005859][T11971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 745.092701][T11971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 746.232380][ T4230] Bluetooth: hci5: command 0x040f tx timeout [ 747.685683][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.692827][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.278569][T11931] chnl_net:caif_netlink_parms(): no params data found [ 748.287232][ T8303] Bluetooth: hci5: command 0x0419 tx timeout [ 750.802104][T12010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.044722][ T8072] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 753.531661][T11931] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.539636][T11931] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.674215][T11931] device bridge_slave_0 entered promiscuous mode [ 753.814497][T11931] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.833366][T11931] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.943412][T11931] device bridge_slave_1 entered promiscuous mode [ 754.561823][T11931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.536607][T11931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.869833][T11931] team0: Port device team_slave_0 added [ 755.908735][T11931] team0: Port device team_slave_1 added [ 756.187891][T11931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.268834][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.457838][T11931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.656644][T11931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.683060][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.900093][T11931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.373302][T11931] device hsr_slave_0 entered promiscuous mode [ 757.411551][T11931] device hsr_slave_1 entered promiscuous mode [ 757.597943][T11931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.691701][T11931] Cannot create hsr debugfs directory [ 761.374057][T12076] rnbd_client L599: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 761.477537][ T4314] rtrs_client L1771: : Resolving route failed, err: -19 [ 761.663872][T12076] rtrs_client L2614: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 763.022827][T12088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 763.060457][T12088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 763.125907][T12097] loop1: detected capacity change from 0 to 16 [ 763.235392][T12097] erofs: (device loop1): mounted with root inode @ nid 36. [ 766.268876][T12127] loop1: detected capacity change from 0 to 16 [ 766.475387][T12127] erofs: (device loop1): mounted with root inode @ nid 36. [ 766.494179][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 766.588975][T12125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 767.380334][ T8073] device hsr_slave_0 left promiscuous mode [ 767.420477][ T8073] device hsr_slave_1 left promiscuous mode [ 767.456346][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.490189][ T8073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.531564][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.539043][ T8073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.715613][ T8073] device bridge_slave_1 left promiscuous mode [ 767.725001][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.770170][ T8073] device bridge_slave_0 left promiscuous mode [ 767.781385][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.813278][ T8073] rdma_rxe: ignoring netdev event = 10 for wg0 [ 767.845032][ T8073] device veth1_macvtap left promiscuous mode [ 767.863353][ T8073] device veth0_macvtap left promiscuous mode [ 767.869506][ T8073] device veth1_vlan left promiscuous mode [ 767.914722][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 768.131184][ T8073] device veth0_vlan left promiscuous mode [ 769.362844][ T8073] infiniband syz2: set down [ 769.639772][ T8073] team0 (unregistering): Port device team_slave_1 removed [ 769.659047][ T8073] team0 (unregistering): Port device team_slave_0 removed [ 769.684671][ T8073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.717348][ T8073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.758340][ T144] smc: removing ib device syz2 [ 769.927482][ T8073] bond0 (unregistering): Released all slaves [ 770.299792][T11760] wg0 speed is unknown, defaulting to 1000 [ 771.450292][T11931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 771.542823][T11931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 771.651672][T11931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 771.816745][T11931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 772.915435][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'. [ 773.052925][T11931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.094675][T11931] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.122306][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 773.140506][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 773.160522][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 773.213036][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 773.480320][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.487497][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.600826][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 773.677998][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 773.759475][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.766844][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.805519][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 773.857507][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 773.951005][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 773.976343][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 773.987782][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 774.021437][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 774.062064][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 774.081477][T12200] loop2: detected capacity change from 0 to 32768 [ 774.088961][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 774.113042][T12214] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 774.123710][T12214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.231380][T12223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 774.244862][T12223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.273902][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 774.305905][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 774.721649][T11931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.642474][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 775.732924][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 775.765857][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 776.162921][T12254] rnbd_client L599: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 776.181556][T12254] rtrs_client L2062: : Failed to resolve address, err: -19 [ 776.189711][T12254] rtrs_client L2614: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 777.484111][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 777.491758][ T4230] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 777.532456][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 777.603695][T11931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.920550][ T4230] usb 3-1: config 0 has no interfaces? [ 778.101059][ T4230] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 778.281514][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 778.299944][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.308832][ T4230] usb 3-1: Product: syz [ 778.320772][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 778.418115][ T4230] usb 3-1: Manufacturer: syz [ 778.443593][ T4230] usb 3-1: SerialNumber: syz [ 778.454667][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 778.490288][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 778.501645][ T4230] usb 3-1: config 0 descriptor?? [ 778.529846][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 778.620088][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 778.681901][T11931] device veth0_vlan entered promiscuous mode [ 779.201845][T11931] device veth1_vlan entered promiscuous mode [ 780.063426][T11931] device veth0_macvtap entered promiscuous mode [ 780.089122][T11757] usb 3-1: USB disconnect, device number 87 [ 780.097148][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 780.154005][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 780.211686][T11931] device veth1_macvtap entered promiscuous mode [ 780.289831][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.317881][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.368870][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.447611][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.537329][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.647209][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.698112][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.799721][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.852087][T11931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.898988][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 780.951647][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 780.959782][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 780.983578][T12307] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 781.055433][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 781.122207][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.178141][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.234410][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.245405][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.256037][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.310001][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.333947][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.368926][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.395756][T11931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.415549][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 781.433048][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 781.458722][T11931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.482136][T11931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.520135][T11931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.553554][T11931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.552047][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.559913][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.586822][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 782.665232][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.684387][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.713447][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 782.763354][T12329] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 782.825950][T12329] CIFS mount error: No usable UNC path provided in device string! [ 782.825950][T12329] [ 782.851715][T12329] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 784.100329][T11759] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 784.335542][ T4314] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 784.380180][T11759] usb 2-1: device descriptor read/64, error -71 [ 784.670243][T11759] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 784.679871][T12351] No such timeout policy "syz1" [ 784.690175][T12351] loop3: detected capacity change from 0 to 128 [ 784.743351][T12351] hpfs: bad mount options. [ 785.097105][T11759] usb 2-1: device descriptor read/64, error -71 [ 785.668817][T11759] usb usb2-port1: attempt power cycle [ 786.226572][T11759] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 786.480256][T11759] usb 2-1: device not accepting address 74, error -71 [ 786.549579][T12373] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 786.622637][T12373] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 787.761755][T12357] loop3: detected capacity change from 0 to 32768 [ 788.043947][T12386] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 788.468398][T12390] loop2: detected capacity change from 0 to 16 [ 788.887679][T12390] erofs: (device loop2): mounted with root inode @ nid 36. [ 790.800151][ T4265] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 790.982151][T12402] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 790.990405][T12402] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 791.178221][ T4265] usb 3-1: config 0 has no interfaces? [ 791.870459][T12419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 791.878119][T12419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 792.530623][ T4265] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 792.590228][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.641556][ T4265] usb 3-1: Product: syz [ 792.646434][ T4265] usb 3-1: Manufacturer: syz [ 792.662606][T12419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 792.781273][ T4265] usb 3-1: SerialNumber: syz [ 793.632128][ T4265] usb 3-1: config 0 descriptor?? [ 793.650440][ T4265] usb 3-1: can't set config #0, error -71 [ 793.669123][ T4265] usb 3-1: USB disconnect, device number 88 [ 794.321514][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2524'. [ 795.143555][T12443] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 798.470172][ T4230] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 798.949747][ T4230] usb 4-1: device descriptor read/64, error -71 [ 799.950364][ T4230] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 801.409288][ T4230] usb 4-1: device descriptor read/64, error -71 [ 801.570967][ T4230] usb usb4-port1: attempt power cycle [ 802.490176][ T4230] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 802.610374][ T4230] usb 4-1: device descriptor read/8, error -71 [ 802.804448][T12499] loop2: detected capacity change from 0 to 16 [ 802.900028][T11760] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 803.216293][T12499] erofs: (device loop2): mounted with root inode @ nid 36. [ 803.230192][ T4230] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 803.920998][ T4230] usb 4-1: device descriptor read/8, error -71 [ 803.980683][T11760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.000657][T11760] usb 2-1: config 0 has no interfaces? [ 804.040800][ T4230] usb usb4-port1: unable to enumerate USB device [ 804.690544][T11760] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 804.744815][T11760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.981457][T11760] usb 2-1: Product: syz [ 804.985685][T11760] usb 2-1: Manufacturer: syz [ 804.997097][T11760] usb 2-1: SerialNumber: syz [ 805.513543][T11760] usb 2-1: config 0 descriptor?? [ 806.050246][T11759] usb 2-1: USB disconnect, device number 76 [ 808.660488][T12543] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 808.668483][T12543] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 809.041897][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.049792][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.406424][T12555] loop2: detected capacity change from 0 to 16 [ 810.538466][T12555] erofs: (device loop2): mounted with root inode @ nid 36. [ 811.971245][T11757] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 812.370822][T11757] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.391410][T11757] usb 3-1: config 0 has no interfaces? [ 813.405831][T11757] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 813.429144][T11757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.464807][T11757] usb 3-1: Product: syz [ 813.469172][T11757] usb 3-1: Manufacturer: syz [ 813.940246][T12591] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 814.236862][T11757] usb 3-1: SerialNumber: syz [ 814.251893][T11757] usb 3-1: config 0 descriptor?? [ 814.264931][T12599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 814.307096][T12599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 815.143224][T11760] usb 3-1: USB disconnect, device number 89 [ 816.052798][ T8072] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 816.109816][T12615] loop3: detected capacity change from 0 to 16 [ 816.380290][T12615] erofs: (device loop3): mounted with root inode @ nid 36. [ 816.883602][T12619] loop1: detected capacity change from 0 to 16 [ 816.947028][T12619] erofs: (device loop1): mounted with root inode @ nid 36. [ 817.409396][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 818.068536][T12610] loop2: detected capacity change from 0 to 128 [ 818.281441][T12610] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 819.000008][ T23] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 819.450982][ T23] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 819.522692][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.662843][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 819.777279][ T23] usb 2-1: config 1 has no interface number 0 [ 819.856518][ T23] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 820.003462][ T23] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 820.190383][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.209861][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.238652][ T23] usb 2-1: Product: syz [ 820.263617][ T23] usb 2-1: Manufacturer: syz [ 820.284960][ T23] usb 2-1: SerialNumber: syz [ 821.785080][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2577'. [ 822.161926][ T23] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 822.245879][ T23] usb 2-1: USB disconnect, device number 77 [ 822.547567][T12673] loop1: detected capacity change from 0 to 32768 [ 822.586937][T12673] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2578 (12673) [ 822.627640][T12673] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 822.636739][T12673] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 822.646381][T12673] BTRFS info (device loop1): use zstd compression, level 3 [ 822.653683][T12673] BTRFS info (device loop1): force clearing of disk cache [ 822.660932][T12673] BTRFS info (device loop1): enabling disk space caching [ 822.668027][T12673] BTRFS info (device loop1): disk space caching is enabled [ 822.675343][T12673] BTRFS info (device loop1): has skinny extents [ 823.100355][T12673] BTRFS info (device loop1): enabling ssd optimizations [ 823.110016][T12673] BTRFS info (device loop1): clearing free space tree [ 823.117233][T12673] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 823.127038][T12673] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 823.886918][T12667] loop2: detected capacity change from 0 to 32768 [ 824.059540][T12672] loop3: detected capacity change from 0 to 128 [ 827.390902][T12748] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 827.837304][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2590'. [ 829.530371][ T4233] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 830.500764][ T4233] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 830.509562][ T4233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.589023][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 830.639216][ T4233] usb 4-1: config 1 has no interface number 0 [ 830.698731][ T4233] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 830.734187][ T4233] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 830.930310][ T4233] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.952034][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.967401][ T4233] usb 4-1: Product: syz [ 830.972197][ T4233] usb 4-1: Manufacturer: syz [ 830.976831][ T4233] usb 4-1: SerialNumber: syz [ 831.388733][T12788] loop1: detected capacity change from 0 to 128 [ 831.467320][T12788] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 831.780073][T12603] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 832.774457][ T4233] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 832.784263][ T4233] usb 4-1: USB disconnect, device number 6 [ 833.006840][T12812] IPVS: lc: FWM 3 0x00000003 - no destination available [ 833.014900][T12603] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.026575][T12603] usb 3-1: config 0 has no interfaces? [ 833.868828][T12603] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 833.878412][T12603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.886831][T12603] usb 3-1: Product: syz [ 833.891312][T12603] usb 3-1: Manufacturer: syz [ 833.896167][T12603] usb 3-1: SerialNumber: syz [ 833.914862][T12603] usb 3-1: config 0 descriptor?? [ 834.048111][T12823] loop1: detected capacity change from 0 to 16 [ 834.160296][T12823] erofs: (device loop1): mounted with root inode @ nid 36. [ 834.841974][T11758] usb 3-1: USB disconnect, device number 90 [ 835.193488][T12838] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 835.240436][T12836] loop3: detected capacity change from 0 to 1024 [ 835.320227][T12836] EXT4-fs (loop3): inline encryption not supported [ 835.546490][T12836] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 837.667131][T12873] sd 0:0:1:0: PR command failed: 2 [ 837.672457][T12873] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 837.679251][T12873] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 838.120115][T11758] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 838.141038][T12881] ================================================================== [ 838.149816][T12881] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 838.157233][T12881] Read of size 8 at addr ffff888028a03418 by task syz.3.2628/12881 [ 838.165215][T12881] [ 838.167649][T12881] CPU: 1 PID: 12881 Comm: syz.3.2628 Not tainted syzkaller #0 [ 838.175183][T12881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 838.185304][T12881] Call Trace: [ 838.188682][T12881] [ 838.191727][T12881] dump_stack_lvl+0x188/0x250 [ 838.196545][T12881] ? show_regs_print_info+0x20/0x20 [ 838.201804][T12881] ? _printk+0xda/0x130 [ 838.205999][T12881] ? dvb_device_open+0xc5/0x360 [ 838.210936][T12881] ? load_image+0x410/0x410 [ 838.215481][T12881] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 838.221066][T12881] print_address_description+0x60/0x2d0 [ 838.226652][T12881] ? dvb_device_open+0xc5/0x360 [ 838.231536][T12881] kasan_report+0xdf/0x130 [ 838.236061][T12881] ? dvb_device_open+0xc5/0x360 [ 838.240949][T12881] dvb_device_open+0xc5/0x360 [ 838.245667][T12881] chrdev_open+0x585/0x5f0 [ 838.250244][T12881] ? cd_forget+0x160/0x160 [ 838.254727][T12881] ? fsnotify_perm+0x3a7/0x560 [ 838.259719][T12881] ? cd_forget+0x160/0x160 [ 838.264182][T12881] do_dentry_open+0x7f7/0xf90 [ 838.268919][T12881] ? vfs_open+0x2b/0x80 [ 838.273117][T12881] path_openat+0x2718/0x2fb0 [ 838.277764][T12881] ? __kasan_slab_alloc+0xa9/0xc0 [ 838.282842][T12881] ? do_filp_open+0x400/0x400 [ 838.287580][T12881] do_filp_open+0x1df/0x400 [ 838.292124][T12881] ? vfs_tmpfile+0x300/0x300 [ 838.296778][T12881] ? _raw_spin_unlock+0x24/0x40 [ 838.301747][T12881] ? alloc_fd+0x59e/0x650 [ 838.306213][T12881] do_sys_openat2+0x14b/0x500 [ 838.310922][T12881] ? __lock_acquire+0x7b50/0x7b50 [ 838.316002][T12881] ? do_sys_open+0xe0/0xe0 [ 838.320451][T12881] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 838.326474][T12881] ? lock_chain_count+0x20/0x20 [ 838.331369][T12881] __x64_sys_openat+0x135/0x160 [ 838.336265][T12881] do_syscall_64+0x4c/0xa0 [ 838.340739][T12881] ? clear_bhb_loop+0x30/0x80 [ 838.345522][T12881] ? clear_bhb_loop+0x30/0x80 [ 838.350240][T12881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 838.356211][T12881] RIP: 0033:0x7fe120a7498e [ 838.360732][T12881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 838.380528][T12881] RSP: 002b:00007fe11eceab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 838.389056][T12881] RAX: ffffffffffffffda RBX: 00007fe11eceb6c0 RCX: 00007fe120a7498e [ 838.397068][T12881] RDX: 0000000000000002 RSI: 00007fe11eceac00 RDI: ffffffffffffff9c [ 838.405083][T12881] RBP: 00007fe11eceac00 R08: 0000000000000000 R09: 0000000000000000 [ 838.413181][T12881] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 838.421228][T12881] R13: 00007fe120d3c128 R14: 00007fe120d3c090 R15: 00007fff03bf5118 [ 838.429259][T12881] [ 838.432336][T12881] [ 838.434679][T12881] Allocated by task 1: [ 838.438847][T12881] __kasan_kmalloc+0xaf/0xe0 [ 838.443468][T12881] dvb_register_device+0x300/0x1dc0 [ 838.448701][T12881] dvb_register_frontend+0x629/0x900 [ 838.454019][T12881] vidtv_bridge_probe+0x9c1/0xf30 [ 838.459185][T12881] platform_probe+0x137/0x1c0 [ 838.463945][T12881] really_probe+0x276/0xc70 [ 838.468512][T12881] __driver_probe_device+0x1f5/0x390 [ 838.473859][T12881] driver_probe_device+0x4f/0x420 [ 838.478928][T12881] __driver_attach+0x45d/0x660 [ 838.483725][T12881] bus_for_each_dev+0x182/0x1f0 [ 838.488607][T12881] bus_add_driver+0x324/0x5d0 [ 838.493314][T12881] driver_register+0x32d/0x430 [ 838.498117][T12881] vidtv_bridge_init+0x45/0x80 [ 838.503030][T12881] do_one_initcall+0x272/0x730 [ 838.507842][T12881] do_initcall_level+0x13d/0x1f0 [ 838.512836][T12881] do_initcalls+0x4b/0x90 [ 838.517199][T12881] kernel_init_freeable+0x3d5/0x560 [ 838.522449][T12881] kernel_init+0x19/0x1b0 [ 838.526810][T12881] ret_from_fork+0x1f/0x30 [ 838.531262][T12881] [ 838.533605][T12881] The buggy address belongs to the object at ffff888028a03400 [ 838.533605][T12881] which belongs to the cache kmalloc-256 of size 256 [ 838.547789][T12881] The buggy address is located 24 bytes inside of [ 838.547789][T12881] 256-byte region [ffff888028a03400, ffff888028a03500) [ 838.561019][T12881] The buggy address belongs to the page: [ 838.566689][T12881] page:ffffea0000a28080 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888028a03400 pfn:0x28a02 [ 838.578175][T12881] head:ffffea0000a28080 order:1 compound_mapcount:0 [ 838.584903][T12881] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 838.592944][T12881] raw: 00fff00000010200 ffffea0001e9b908 ffffea0000aaa908 ffff888016c41b40 [ 838.601559][T12881] raw: ffff888028a03400 000000000010000e 00000001ffffffff 0000000000000000 [ 838.610164][T12881] page dumped because: kasan: bad access detected [ 838.616619][T12881] page_owner tracks the page as allocated [ 838.622354][T12881] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 20596191349, free_ts 0 [ 838.640356][T12881] get_page_from_freelist+0x24f6/0x2670 [ 838.646023][T12881] __alloc_pages+0x1ee/0x480 [ 838.650659][T12881] alloc_page_interleave+0x24/0x1e0 [ 838.655972][T12881] new_slab+0xc0/0x4b0 [ 838.660066][T12881] ___slab_alloc+0x807/0xdd0 [ 838.664683][T12881] __kmalloc_node+0x142/0x3a0 [ 838.669387][T12881] kvmalloc_node+0x84/0x130 [ 838.673979][T12881] v4l2_ctrl_new+0x70f/0x1310 [ 838.678729][T12881] v4l2_ctrl_new_std+0x247/0x300 [ 838.683701][T12881] handler_new_ref+0x14f/0x8d0 [ 838.688490][T12881] v4l2_ctrl_add_handler+0x197/0x280 [ 838.693803][T12881] vivid_create_controls+0x26e6/0x3380 [ 838.699375][T12881] vivid_probe+0x39ff/0x6240 [ 838.703993][T12881] platform_probe+0x137/0x1c0 [ 838.708698][T12881] really_probe+0x276/0xc70 [ 838.713234][T12881] __driver_probe_device+0x1f5/0x390 [ 838.718552][T12881] page_owner free stack trace missing [ 838.723938][T12881] [ 838.726282][T12881] Memory state around the buggy address: [ 838.732013][T12881] ffff888028a03300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 838.740104][T12881] ffff888028a03380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 838.748188][T12881] >ffff888028a03400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 838.756273][T12881] ^ [ 838.761143][T12881] ffff888028a03480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 838.769250][T12881] ffff888028a03500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 838.777357][T12881] ================================================================== [ 838.785564][T12881] Disabling lock debugging due to kernel taint [ 838.794950][T12881] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 838.802181][T12881] CPU: 1 PID: 12881 Comm: syz.3.2628 Tainted: G B syzkaller #0 [ 838.811055][T12881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 838.821147][T12881] Call Trace: [ 838.824448][T12881] [ 838.827485][T12881] dump_stack_lvl+0x188/0x250 [ 838.832200][T12881] ? show_regs_print_info+0x20/0x20 [ 838.837512][T12881] ? load_image+0x410/0x410 [ 838.842047][T12881] panic+0x2f8/0x850 [ 838.845977][T12881] ? bpf_jit_dump+0xd0/0xd0 [ 838.850502][T12881] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 838.856163][T12881] ? check_panic_on_warn+0x6c/0xa0 [ 838.861380][T12881] ? dvb_device_open+0xc5/0x360 [ 838.866282][T12881] check_panic_on_warn+0x80/0xa0 [ 838.871256][T12881] ? dvb_device_open+0xc5/0x360 [ 838.876318][T12881] end_report+0x6d/0xf0 [ 838.880523][T12881] kasan_report+0x102/0x130 [ 838.885056][T12881] ? dvb_device_open+0xc5/0x360 [ 838.889935][T12881] dvb_device_open+0xc5/0x360 [ 838.894646][T12881] chrdev_open+0x585/0x5f0 [ 838.899100][T12881] ? cd_forget+0x160/0x160 [ 838.903549][T12881] ? fsnotify_perm+0x3a7/0x560 [ 838.908345][T12881] ? cd_forget+0x160/0x160 [ 838.912803][T12881] do_dentry_open+0x7f7/0xf90 [ 838.917515][T12881] ? vfs_open+0x2b/0x80 [ 838.921702][T12881] path_openat+0x2718/0x2fb0 [ 838.926349][T12881] ? __kasan_slab_alloc+0xa9/0xc0 [ 838.931400][T12881] ? do_filp_open+0x400/0x400 [ 838.936106][T12881] do_filp_open+0x1df/0x400 [ 838.940636][T12881] ? vfs_tmpfile+0x300/0x300 [ 838.945271][T12881] ? _raw_spin_unlock+0x24/0x40 [ 838.950147][T12881] ? alloc_fd+0x59e/0x650 [ 838.954507][T12881] do_sys_openat2+0x14b/0x500 [ 838.959231][T12881] ? __lock_acquire+0x7b50/0x7b50 [ 838.964285][T12881] ? do_sys_open+0xe0/0xe0 [ 838.968731][T12881] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 838.974735][T12881] ? lock_chain_count+0x20/0x20 [ 838.979613][T12881] __x64_sys_openat+0x135/0x160 [ 838.984487][T12881] do_syscall_64+0x4c/0xa0 [ 838.988944][T12881] ? clear_bhb_loop+0x30/0x80 [ 838.993641][T12881] ? clear_bhb_loop+0x30/0x80 [ 838.998351][T12881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 839.004272][T12881] RIP: 0033:0x7fe120a7498e [ 839.008714][T12881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 839.028346][T12881] RSP: 002b:00007fe11eceab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 839.036843][T12881] RAX: ffffffffffffffda RBX: 00007fe11eceb6c0 RCX: 00007fe120a7498e [ 839.044839][T12881] RDX: 0000000000000002 RSI: 00007fe11eceac00 RDI: ffffffffffffff9c [ 839.052847][T12881] RBP: 00007fe11eceac00 R08: 0000000000000000 R09: 0000000000000000 [ 839.060841][T12881] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 839.068849][T12881] R13: 00007fe120d3c128 R14: 00007fe120d3c090 R15: 00007fff03bf5118 [ 839.076852][T12881] [ 839.080233][T12881] Kernel Offset: disabled [ 839.084582][T12881] Rebooting in 86400 seconds..