last executing test programs: 3m15.463301415s ago: executing program 32 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x88be, 0x26, 0x0, @wg=@data={0x4, 0x4, 0x8, "4014a084de25e2df8e3a1680d5e9"}}}}}}}, 0x4c) 3m8.139143217s ago: executing program 3 (id=295): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m7.835694414s ago: executing program 4 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x0, 0x2) 3m7.515939262s ago: executing program 4 (id=298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5", 0x5}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m7.512552902s ago: executing program 3 (id=299): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0x0, &(0x7f0000001000), 0xc0200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r1) r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 3m7.074437894s ago: executing program 3 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd602982af001406"], 0x4e) 3m7.002008476s ago: executing program 4 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='add syz0 12', 0xb) 3m6.656910015s ago: executing program 4 (id=304): syz_ublk_setup_io_uring(0x1b1e, 0x0, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m5.159711584s ago: executing program 4 (id=310): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0x0, &(0x7f0000001000), 0xc0200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) 3m4.812104473s ago: executing program 4 (id=312): pipe(&(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 3m2.311608388s ago: executing program 3 (id=322): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b29, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x18, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c88b"}, @global=@item_012={0x2, 0x1, 0x4, "6a19"}, @main=@item_4={0x3, 0x0, 0xb, 'I\"g\b'}, @local=@item_4={0x3, 0x2, 0x2, "a4bcc2f3"}, @local=@item_4={0x3, 0x2, 0x3, "6d1bdeae"}, @main=@item_012={0x1, 0x0, 0xb, "1b"}]}}, 0x0}, 0x0) 2m59.952436449s ago: executing program 3 (id=331): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0x0, &(0x7f0000001000), 0xc0200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) 2m59.303119686s ago: executing program 3 (id=334): mmap(&(0x7f000091d000/0x12000)=nil, 0x12000, 0xf, 0x30, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) write(r1, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x4003, 0x400, 0x0, {0xa, 0x1000, 0xb9c, @local}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r6) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000380)) ioctl(r2, 0x40140921, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='3\n\x00', 0x2) 2m50.71368775s ago: executing program 2 (id=368): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x4, 0x0, 0x6, 0xc8, 0x1, 0xff, 0x6, 0xc, 0x8, 0x9}, {0x8, 0xa6f2, 0xa, 0xa9, 0xc, 0x7, 0x8, 0x3, 0x4, 0x13, 0x1, 0xfe, 0x2}, {0x100000, 0x407, 0xc, 0xf, 0x3, 0x4, 0x0, 0xfb, 0x72, 0x15, 0x1, 0x3, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m50.424008297s ago: executing program 2 (id=369): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0xf) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x101d42, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) sendmmsg$sock(r2, 0x0, 0x0, 0x40) write$binfmt_aout(r1, 0x0, 0xfffffee2) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r5, 0x0, 0x0) write(r2, 0x0, 0x0) 2m50.147759854s ago: executing program 2 (id=370): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x0, 0x2, 0xfffffffffffffffe, 0x5479, 0x1037, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m49.710200025s ago: executing program 33 (id=312): pipe(&(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 2m49.661074147s ago: executing program 2 (id=373): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) 2m49.365014504s ago: executing program 2 (id=376): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0x0, &(0x7f0000001000), 0xc0200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') dup(0xffffffffffffffff) r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m48.842641828s ago: executing program 2 (id=378): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) inotify_init() 2m46.683811794s ago: executing program 5 (id=382): add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="666f6f23646e736572726f723d3120a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1", 0x91, 0xfffffffffffffffe) 2m46.46253586s ago: executing program 5 (id=383): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=',rootmode=0']) 2m46.254727375s ago: executing program 5 (id=384): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2m45.115948855s ago: executing program 5 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000eba1c5620200fffe4c0004802800018007000100637400001c000280080001400000000a0800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a3200000000"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m44.503188191s ago: executing program 5 (id=387): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0x0, &(0x7f0000001000), 0xc0200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') dup(0xffffffffffffffff) r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m44.192580389s ago: executing program 5 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000004000), 0x2000) 2m44.13984947s ago: executing program 34 (id=334): mmap(&(0x7f000091d000/0x12000)=nil, 0x12000, 0xf, 0x30, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) write(r1, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x4003, 0x400, 0x0, {0xa, 0x1000, 0xb9c, @local}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r6) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000380)) ioctl(r2, 0x40140921, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='3\n\x00', 0x2) 2m40.485832756s ago: executing program 0 (id=393): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@broadcast, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) 2m40.213286483s ago: executing program 0 (id=394): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m38.678935822s ago: executing program 0 (id=395): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2m35.743218339s ago: executing program 0 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2m35.442571407s ago: executing program 0 (id=397): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0x0, &(0x7f0000001000), 0xc0200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') dup(0xffffffffffffffff) r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m35.062204496s ago: executing program 0 (id=398): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) timer_create(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2fe5, 0x4000000000, &(0x7f0000006680)) kexec_load(0x3, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x8000, 0x0) pidfd_send_signal(r5, 0xd, &(0x7f0000002000)={0x2a, 0xffff, 0x84}, 0x0) r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb000905"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m33.698585162s ago: executing program 35 (id=378): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) inotify_init() 2m28.968435665s ago: executing program 36 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000004000), 0x2000) 2m19.652644997s ago: executing program 37 (id=398): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) timer_create(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2fe5, 0x4000000000, &(0x7f0000006680)) kexec_load(0x3, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x8000, 0x0) pidfd_send_signal(r5, 0xd, &(0x7f0000002000)={0x2a, 0xffff, 0x84}, 0x0) r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb000905"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.372535263s ago: executing program 7 (id=828): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.278427886s ago: executing program 9 (id=829): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000480)='AQB1234+6789l/\x83\'/-\x82\xe2\x9a\x9c\x89>0123456789\x02\x0023456\a\x00\x00\x00\x00\x00\x00\x00567=\x00K\x1e\x13x\xbe\x0e\x9b,\xa7\xcc\xfa\x00?#E#\xdb\x7f1\')\xfd}\xaa\xcd1\xe7\xa3c\xad\x99\x97q\x9f\x82\x99\xbd\xfdt\xa2~\x18\v\xcc\xd4\x81\x9a\xe8\xe5\a\xc4\x11\xc5\xfc\xefw\xe4\xdd\x1f\r\xb3z\xd5\xbe\xf0\xaac\xc2%\x90\xd4\xad\xe7\x1f\xd0\x11\x82\xa4_m\xde]+E\xb3J\xd0\x1d\xbaAS\xa0\x80m\xe8\xf1\x99\x86m\x02\xa7\xd9.FcS\xcdI\xc5\xd7\x88\x96\b\xf6\b@\xc6\xb68k8E\xf9\x1b\xf0\x86(\x83\xd8\xea\xa7\xb2\xa7k\x8cN\x02\xb5\x97\x14\xc7~\x96\xf5\xd1\xc1TO\xf2\xf0@~*t\xe6\xa2_:\xd8\xd4\xa1\x04\xa6o\x9b\xe2\x98\x94\x12;\xd79sg6>=Bz/\x06\xbc\xcfI\x97.\x93\x187\xaf\x13X\fL\xcd\x83t\xd2 \xf35\xf3\x114\n\xa0\xcd\xe6F<\a\xe3\xf1L\'&\xee\x95c\xce\xdc\x10\xe4>\xfd\x91\x93%\xe2\x84\"\xd2p\x84\xcd\x16\xa1+W\xd8', 0x0) 6.909279385s ago: executing program 9 (id=833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x5, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0xa, 0x0, 0xf9, 0x7, 0x0, 0x0, 0x2, 0x2, 0x84, 0xd, 0x84, '\x00', 0x4, 0x2}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.219744023s ago: executing program 9 (id=834): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 6.140079915s ago: executing program 7 (id=835): socket(0x1e, 0x802, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x18, r4, 0x1, 0x81}, 0x14) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000010c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 5.879451372s ago: executing program 9 (id=838): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) open(0x0, 0x0, 0x44) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 5.682205846s ago: executing program 6 (id=839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40000120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 5.587713639s ago: executing program 8 (id=840): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x6}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) pipe2(&(0x7f0000000000), 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x3}, 0x2) 5.471946342s ago: executing program 7 (id=841): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000b80000000000000000000000000000001000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c01000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000200feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a010102000000000000000000000000000000003200000002"], 0x23c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) pipe(0x0) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x82140, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x40187014, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='dummy_udc.0', 0xb) write(r5, &(0x7f00000004c0)='\n', 0x1) r6 = socket$unix(0x1, 0x4, 0x0) recvmsg$unix(r6, &(0x7f00000028c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000002840)=[{&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/25, 0x19}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x4, &(0x7f0000002880)=[@cred={{0x1c}}], 0x20}, 0x40000001) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 4.871990107s ago: executing program 6 (id=843): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) close(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) 4.73521156s ago: executing program 8 (id=844): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.319588361s ago: executing program 8 (id=845): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) 4.023700248s ago: executing program 8 (id=846): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x10, 0xf1, 0x40, 0x403, 0xd9a8, 0x2cbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0xfc, 0x21, 0x60, 0x4, "", [{{0x9, 0x4, 0xf5, 0xf1, 0x4, 0xfe, 0xb1, 0x34, 0x8, [], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x40, 0xd3, 0x53}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xab, 0x50, 0x7, [@generic={0x2a, 0x2, "f60a64bf397d4808169cd1cba9b337b6c4b2ee67d8d6bced74eee401c065f19727dd97d96a73d724"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x96, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xfe, 0x10, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x68, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x1, 0x6, 0xe5}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.859647882s ago: executing program 9 (id=847): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.235586778s ago: executing program 7 (id=849): ptrace(0x10, 0x0) ptrace(0x10, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x4, 0x13, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000000)={0x200002, 0x600004, 0x801, 0x20004, 0xfffffffc}) socket$inet6(0xa, 0x3, 0x4) 3.203681249s ago: executing program 9 (id=851): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x92, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x10, 0xf1, 0x40, 0x403, 0xd9a8, 0x2cbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x1, 0xfc, 0x21, 0x60, 0x4, "", [{{0x9, 0x4, 0xf5, 0xf1, 0x5, 0xfe, 0xb1, 0x34, 0x8, [], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x40, 0xd3, 0x53}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xab, 0x50, 0x7, [@generic={0x2c, 0x2, "f60a64bf397d4808169cd1cba9b337b6c4b2ee67d8d6bced74eee401c065f19727dd97d96a73d724ca5e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x96, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xfe, 0x10, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x80, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x68, 0x5}]}}, {{0x9, 0x5, 0xa, 0x8, 0x0, 0x56, 0x5, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x1, 0x6, 0xe5}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.780343239s ago: executing program 6 (id=852): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x80000002, 0x31237648, 0x6, 0x2, 0x31b6}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.164455115s ago: executing program 6 (id=855): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100)=0x440049, 0x4) 1.955025211s ago: executing program 7 (id=856): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = syz_usb_connect(0x4, 0x55, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}}], 0x2, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x34, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x813d74646d2cdecd}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4002000}, 0x80) 1.878640202s ago: executing program 1 (id=857): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000003, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x4, 0x8, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x4, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1c, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x6, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0x2, 0x8100fffd, 0x802005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0xffffffff, 0x7d, 0x401, 0x8], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe) 1.791783215s ago: executing program 6 (id=858): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501201, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x121182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.423683804s ago: executing program 1 (id=859): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x300, 0x32314742, 0x77e, 0x3, 0x2, @discrete={0xf, 0x3}}) 1.388744055s ago: executing program 6 (id=860): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x10, 0x1, 0x1, 0x2, 0x0, 0x7}, 0x0, &(0x7f0000001100)={0x1f, 0x3, 0x0, 0xb1bd, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x1c}, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 1.17858964s ago: executing program 1 (id=861): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x3, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 775.94898ms ago: executing program 8 (id=862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xc0003, 0x0, {[0x9, 0x64ac, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x80000000000006, 0x6, 0x1]}}) 775.46711ms ago: executing program 1 (id=863): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 315.571892ms ago: executing program 1 (id=864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40000120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, 0x0, 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 272.772263ms ago: executing program 8 (id=865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x808, 0x0, 0xff}]}) 131.021046ms ago: executing program 7 (id=866): ptrace(0x10, 0x0) ptrace(0x10, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x4, 0x13, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000000)={0x200002, 0x600004, 0x801, 0x20004, 0xfffffffc}) socket$inet6(0xa, 0x3, 0x4) 0s ago: executing program 1 (id=867): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): table: 248:3: thin-pool: Error creating metadata object (-EIO) [ 224.321663][ T6241] device-mapper: ioctl: error adding target to table [ 224.329046][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.377813][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.463321][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.490946][ T6246] fido_id[6246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 224.553303][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.619567][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.675116][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.337029][ T6256] loop7: detected capacity change from 0 to 131072 [ 225.380539][ T6256] F2FS-fs (loop7): invalid crc value [ 225.430096][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.440446][ T6256] F2FS-fs (loop7): Found nat_bits in checkpoint [ 225.474649][ T6256] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 225.492901][ T6256] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 225.722204][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.822755][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.848304][ T4315] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 225.892145][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.068412][ T4315] usb 7-1: Using ep0 maxpacket: 32 [ 226.116500][ T4315] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 226.199668][ T5241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.207520][ T5241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.250740][ T4315] usb 7-1: config 0 has no interface number 0 [ 226.309746][ T4315] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 226.351225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.408445][ T4315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.416829][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.474771][ T4315] usb 7-1: Product: syz [ 226.481252][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.533664][ T4315] usb 7-1: Manufacturer: syz [ 226.570026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.597536][ T4315] usb 7-1: SerialNumber: syz [ 226.646915][ T4315] usb 7-1: config 0 descriptor?? [ 226.660920][ T5684] cgroup: fork rejected by pids controller in /syz9 [ 226.739167][ T4315] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 226.934785][ T4315] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 227.031369][ T4315] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 227.337080][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 227.382068][ T956] usb 7-1: USB disconnect, device number 8 [ 227.435029][ T956] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 227.537433][ T956] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 227.623735][ T956] quatech2 7-1:0.51: device disconnected [ 228.629240][ T6303] loop7: detected capacity change from 0 to 131072 [ 228.659447][ T6303] F2FS-fs (loop7): invalid crc value [ 228.711217][ T6303] F2FS-fs (loop7): Found nat_bits in checkpoint [ 228.740031][ T6303] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 228.770066][ T6303] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 230.878410][ T5657] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 231.091895][ T5657] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.151932][ T5657] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 231.179798][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.188405][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.198776][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.206300][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.214520][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.229005][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.290891][ T5657] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.327511][ T5657] usb 9-1: config 0 descriptor?? [ 231.511426][ T3601] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 231.761823][ T3601] usb 7-1: Using ep0 maxpacket: 32 [ 231.769816][ T5657] ath6kl: Unsupported hardware version: 0x4226b00e [ 231.804196][ T3601] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.822943][ T5657] ath6kl: Failed to init ath6kl core: -22 [ 231.874303][ T3601] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.943436][ T3601] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.996931][ T6349] chnl_net:caif_netlink_parms(): no params data found [ 232.023391][ T3601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.086067][ T3601] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.167128][ T3601] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 232.252752][ T3601] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 232.302639][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.312812][ T3601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.351441][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.366726][ T3601] usb 7-1: config 0 descriptor?? [ 232.407571][ T6349] device bridge_slave_0 entered promiscuous mode [ 232.434446][ T5657] ath6kl_usb: probe of 9-1:0.0 failed with error -22 [ 232.478568][ T5657] usb 9-1: USB disconnect, device number 3 [ 232.497570][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.538559][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.596876][ T3601] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 232.639365][ T6349] device bridge_slave_1 entered promiscuous mode [ 232.790625][ T6349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.813703][ T5657] usb 7-1: USB disconnect, device number 9 [ 232.853507][ T5657] usblp0: removed [ 232.923780][ T6349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.112890][ T6349] team0: Port device team_slave_0 added [ 233.158850][ T6349] team0: Port device team_slave_1 added [ 233.258497][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 233.276132][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.323637][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.588477][ T6349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.696048][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.743322][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.012208][ T6349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.335800][ T6349] device hsr_slave_0 entered promiscuous mode [ 234.414577][ T6349] device hsr_slave_1 entered promiscuous mode [ 234.474162][ T6349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.526391][ T6349] Cannot create hsr debugfs directory [ 234.939960][ T6411] jffs2: notice: (6411) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.847280][ T6418] loop8: detected capacity change from 0 to 131072 [ 235.855916][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 235.873362][ T6418] F2FS-fs (loop8): invalid crc value [ 235.926997][ T6418] F2FS-fs (loop8): Found nat_bits in checkpoint [ 235.959154][ T6418] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 235.984724][ T6418] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 236.166182][ T6349] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.857186][ T6349] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.139392][ T6349] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.452948][ T6349] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.349241][ T6450] loop1: detected capacity change from 0 to 131072 [ 238.364900][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 238.427028][ T6450] F2FS-fs (loop1): invalid crc value [ 238.449519][ T6450] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.479598][ T6450] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 238.518370][ T6450] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 239.126531][ T6349] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 239.279018][ T956] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 239.315083][ T6349] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 239.404724][ T6349] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 239.516117][ T6349] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 239.524701][ T956] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.573274][ T956] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 239.664786][ T956] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.730132][ T956] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 239.815601][ T956] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.895580][ T956] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.952405][ T956] usb 7-1: Product: syz [ 239.979162][ T956] usb 7-1: Manufacturer: syz [ 240.042843][ T6460] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 240.065324][ T956] cdc_wdm 7-1:1.0: skipping garbage [ 240.098595][ T956] cdc_wdm 7-1:1.0: skipping garbage [ 240.121048][ T6349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.158085][ T956] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 240.198411][ T5657] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 240.231692][ T6349] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.287292][ T3601] usb 7-1: USB disconnect, device number 10 [ 240.426094][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 240.459134][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.380236][ T5657] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.395892][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.438332][ T5657] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.504010][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.541709][ T5657] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.558811][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.204625][ T6478] loop1: detected capacity change from 0 to 131072 [ 242.235770][ T6478] F2FS-fs (loop1): invalid crc value [ 242.253145][ T5657] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 242.261994][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.269119][ T5241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.289241][ T6478] F2FS-fs (loop1): Found nat_bits in checkpoint [ 242.323298][ T6478] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 242.349120][ T6478] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 242.528285][ T5657] usb 8-1: SerialNumber: syz [ 242.585841][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.665732][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.747110][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.754284][ T5241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.837046][ T5657] usb 8-1: 0:2 : does not exist [ 242.842350][ T4320] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 242.922050][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.948866][ T5657] usb 8-1: unit 5: unexpected type 0x09 [ 243.039252][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.100349][ T4320] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 243.113760][ T5657] usb 8-1: USB disconnect, device number 9 [ 243.120545][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.178392][ T4320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.207898][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.265408][ T4320] usb 9-1: Product: syz [ 243.303584][ T4320] usb 9-1: Manufacturer: syz [ 243.322900][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.352234][ T4320] usb 9-1: SerialNumber: syz [ 243.381919][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.493324][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.613823][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.648960][ T6485] sg_write: data in/out 355776/136 bytes for SCSI command 0x0-- guessing data in; [ 243.648960][ T6485] program syz.8.596 not setting count and/or reply_len properly [ 243.750876][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.819523][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.913227][ T4320] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 243.955301][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.004951][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.025267][ T4320] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 244.078789][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.113238][ T4320] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 244.226574][ T4320] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 244.344240][ T4320] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 244.460046][ T4320] lan78xx: probe of 9-1:1.0 failed with error -71 [ 244.549281][ T4320] usb 9-1: USB disconnect, device number 4 [ 245.718783][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.755139][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.806565][ T6349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.818556][ T4320] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 246.029841][ T4320] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.128890][ T4320] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 246.208635][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.302788][ T4320] usb 8-1: config 0 descriptor?? [ 246.358125][ T6545] binder: 6543:6545 ioctl c0306201 0 returned -14 [ 246.550139][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.659804][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.763447][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.856669][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.158603][ T4335] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 247.388458][ T4335] usb 7-1: Using ep0 maxpacket: 32 [ 247.417008][ T4335] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 247.514397][ T4335] usb 7-1: config 0 has no interface number 0 [ 247.583108][ T4335] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.676973][ T4335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.751588][ T4335] usb 7-1: Product: syz [ 247.793586][ T4335] usb 7-1: Manufacturer: syz [ 247.830143][ T4335] usb 7-1: SerialNumber: syz [ 247.893796][ T4335] usb 7-1: config 0 descriptor?? [ 247.961437][ T4335] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 248.156474][ T4335] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 248.168905][ T6545] syz.8.621 (6545): drop_caches: 2 [ 248.247917][ T4335] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 248.428382][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.489405][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.570190][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 248.584564][ T4315] usb 7-1: USB disconnect, device number 11 [ 248.648523][ T4315] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 248.686469][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.732056][ T4320] usbhid 8-1:0.0: can't add hid device: -71 [ 248.749225][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.772922][ T4320] usbhid: probe of 8-1:0.0 failed with error -71 [ 248.781375][ T4315] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 248.845752][ T4320] usb 8-1: USB disconnect, device number 10 [ 248.854553][ T6349] device veth0_vlan entered promiscuous mode [ 248.892465][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.911534][ T4315] quatech2 7-1:0.51: device disconnected [ 248.946305][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.044991][ T6349] device veth1_vlan entered promiscuous mode [ 249.271926][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.362579][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.444609][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.545057][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.639324][ T6349] device veth0_macvtap entered promiscuous mode [ 249.710068][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.780118][ T6349] device veth1_macvtap entered promiscuous mode [ 249.910071][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.018640][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.118404][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.118455][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.118468][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.118480][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.118493][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.118504][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.118517][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.118527][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.119772][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.123211][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.123863][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.158181][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.158199][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.158209][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.164662][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.164677][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.164689][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.164701][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.164712][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.164724][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.164734][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.166096][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.166185][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.166675][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.184545][ T6349] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.184610][ T6349] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.184634][ T6349] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.184656][ T6349] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.278430][ T5657] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 250.471335][ T5657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.471384][ T5657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.471402][ T5657] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.471431][ T5657] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.471450][ T5657] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.481178][ T5657] usb 7-1: config 0 descriptor?? [ 250.537277][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.537293][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.563643][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.658400][ T5241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.658418][ T5241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.661203][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.887629][ T5657] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 250.912189][ T5657] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 251.153656][ T5657] usb 7-1: USB disconnect, device number 12 [ 251.399720][ T6609] fido_id[6609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 251.951623][ T5657] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 252.130279][ T5657] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.130315][ T5657] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.130335][ T5657] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.131554][ T5657] usb 8-1: config 0 descriptor?? [ 252.337697][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.345080][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.348527][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.352099][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.569866][ T4315] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 253.753320][ T4315] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 253.753346][ T4315] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.965365][ T4315] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 254.140138][ T4281] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 254.140273][ T4281] Bluetooth: hci2: Injecting HCI hardware error event [ 254.141334][ T4281] Bluetooth: hci2: hardware error 0x00 [ 254.733058][ T5657] usbhid 8-1:0.0: can't add hid device: -71 [ 254.733121][ T5657] usbhid: probe of 8-1:0.0 failed with error -71 [ 254.738598][ T5657] usb 8-1: USB disconnect, device number 11 [ 255.018397][ T4276] Bluetooth: hci3: command 0x0411 tx timeout [ 255.300209][ T6595] tty tty4: ldisc open failed (-12), clearing slot 3 [ 255.674689][ T5457] cgroup: fork rejected by pids controller in /syz6 [ 255.741587][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.747942][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.218601][ T4281] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 256.933443][ T6699] loop7: detected capacity change from 0 to 131072 [ 256.964047][ T6699] F2FS-fs (loop7): invalid crc value [ 257.002708][ T6699] F2FS-fs (loop7): Found nat_bits in checkpoint [ 257.035391][ T6699] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 257.047168][ T6699] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 257.220339][ T5657] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 257.472213][ T5657] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.530956][ T5657] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 257.645927][ T5657] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.725614][ T5657] usb 9-1: config 0 descriptor?? [ 257.850030][ T47] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.006958][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.099756][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.151057][ T47] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.212894][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.334329][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.410146][ T47] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.717199][ T47] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.602603][ T5657] usbhid 9-1:0.0: can't add hid device: -71 [ 259.688581][ T5657] usbhid: probe of 9-1:0.0 failed with error -71 [ 259.768505][ T5657] usb 9-1: USB disconnect, device number 5 [ 260.149699][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.158600][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.166185][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.174554][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.182270][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.190597][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.258356][ T5657] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 260.489862][ T5657] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.568454][ T5657] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.642270][ T5657] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.753136][ T5657] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.804986][ T5657] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.886689][ T5657] usb 9-1: config 0 descriptor?? [ 260.917796][ T5784] cgroup: fork rejected by pids controller in /syz1 [ 260.933074][ T4320] usb 10-1: USB disconnect, device number 2 [ 261.344770][ T5657] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 261.411219][ T5657] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 261.624831][ T5657] usb 9-1: USB disconnect, device number 6 [ 261.850533][ T6749] fido_id[6749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 262.218617][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 262.499203][ T6756] device-mapper: table: 248:3: thi: unknown target type [ 262.552418][ T6756] device-mapper: ioctl: error adding target to table [ 262.746862][ T6723] chnl_net:caif_netlink_parms(): no params data found [ 263.158407][ T4315] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 263.183644][ T47] device hsr_slave_0 left promiscuous mode [ 263.189792][ T7] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 263.223497][ T47] device hsr_slave_1 left promiscuous mode [ 263.249741][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.287667][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.343780][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.363391][ T4315] usb 9-1: Using ep0 maxpacket: 32 [ 263.369056][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.384837][ T4315] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 263.394223][ T4320] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 263.402060][ T7] usb 8-1: Using ep0 maxpacket: 32 [ 263.434259][ T7] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 263.460283][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.478262][ T7] usb 8-1: config 0 has no interface number 0 [ 263.504933][ T7] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 263.531614][ T4315] usb 9-1: config 0 descriptor?? [ 263.563563][ T4315] gspca_main: sunplus-2.14.0 probing 041e:400b [ 263.580149][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.627868][ T7] usb 8-1: Product: syz [ 263.638400][ T4320] usb 10-1: no configurations [ 263.643099][ T4320] usb 10-1: can't read configurations, error -22 [ 263.658360][ T7] usb 8-1: Manufacturer: syz [ 263.673802][ T7] usb 8-1: SerialNumber: syz [ 263.729345][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.739489][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.747153][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.758879][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.766337][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 263.774307][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.811752][ T7] usb 8-1: config 0 descriptor?? [ 263.828347][ T4320] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 263.848974][ T7] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 263.894700][ T47] device bridge_slave_1 left promiscuous mode [ 263.905488][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.943949][ T47] device bridge_slave_0 left promiscuous mode [ 263.973274][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.047728][ T7] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 264.057746][ T4320] usb 10-1: no configurations [ 264.078416][ T4320] usb 10-1: can't read configurations, error -22 [ 264.104536][ T4320] usb usb10-port1: attempt power cycle [ 264.117822][ T7] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 264.204741][ T47] device veth1_macvtap left promiscuous mode [ 264.238317][ T47] device veth0_macvtap left promiscuous mode [ 264.244459][ T47] device veth1_vlan left promiscuous mode [ 264.280937][ T47] device veth0_vlan left promiscuous mode [ 264.298564][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 264.456242][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 264.472972][ T4335] usb 8-1: USB disconnect, device number 12 [ 264.509863][ T4335] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 264.561680][ T4320] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 264.576305][ T4335] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 264.602963][ T4335] quatech2 8-1:0.51: device disconnected [ 264.629757][ T4320] usb 10-1: no configurations [ 264.644413][ T4320] usb 10-1: can't read configurations, error -22 [ 264.774143][ T4315] gspca_sunplus: reg_w_riv err -71 [ 264.786137][ T4315] sunplus: probe of 9-1:0.0 failed with error -71 [ 264.798413][ T4320] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 264.814236][ T4315] usb 9-1: USB disconnect, device number 7 [ 264.864801][ T4320] usb 10-1: no configurations [ 264.874862][ T4320] usb 10-1: can't read configurations, error -22 [ 264.883945][ T4320] usb usb10-port1: unable to enumerate USB device [ 265.737475][ T5520] cgroup: fork rejected by pids controller in /syz7 [ 265.818592][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 266.162335][ T47] team0 (unregistering): Port device team_slave_1 removed [ 266.343900][ T47] team0 (unregistering): Port device team_slave_0 removed [ 266.380849][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 266.464563][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.580400][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.316920][ T47] bond0 (unregistering): Released all slaves [ 267.769077][ T6723] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.816669][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.891986][ T6723] device bridge_slave_0 entered promiscuous mode [ 267.899703][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 267.958979][ T6723] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.982441][ T7] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 268.019124][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.043120][ T6723] device bridge_slave_1 entered promiscuous mode [ 268.196920][ T6723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.207724][ T7] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.258768][ T7] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.286449][ T6723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.326795][ T7] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.435781][ T7] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.456494][ T6723] team0: Port device team_slave_0 added [ 268.462574][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 268.497058][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.559220][ T7] usb 10-1: config 0 descriptor?? [ 268.638610][ T6723] team0: Port device team_slave_1 added [ 268.673576][ T6779] chnl_net:caif_netlink_parms(): no params data found [ 268.858845][ T6723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.890468][ T6723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.011328][ T7] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 269.074346][ T6723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.086547][ T7] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 269.148197][ T6723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.223737][ T6723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.862086][ T6833] loop8: detected capacity change from 0 to 131072 [ 269.879204][ T6833] F2FS-fs (loop8): invalid crc value [ 269.907362][ T5657] usb 10-1: USB disconnect, device number 7 [ 269.932449][ T6833] F2FS-fs (loop8): Found nat_bits in checkpoint [ 269.960110][ T6833] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 269.978482][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 269.987119][ T6833] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 270.248818][ T6723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.465310][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.474155][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.494262][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.502972][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.510742][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.518712][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.566739][ T6835] fido_id[6835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 270.665203][ T6723] device hsr_slave_0 entered promiscuous mode [ 270.757297][ T6723] device hsr_slave_1 entered promiscuous mode [ 270.855254][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.880594][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.954212][ T6779] device bridge_slave_0 entered promiscuous mode [ 271.036100][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.055995][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.117566][ T6779] device bridge_slave_1 entered promiscuous mode [ 271.188436][ T4320] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 271.386542][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.439723][ T4320] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 271.485498][ T4320] usb 10-1: config 1 has no interface number 0 [ 271.509222][ T5624] cgroup: fork rejected by pids controller in /syz8 [ 271.541038][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.552302][ T4320] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.08 [ 271.603933][ T4320] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.648640][ T4320] usb 10-1: Product: syz [ 271.652934][ T4320] usb 10-1: Manufacturer: syz [ 271.693054][ T4320] usb 10-1: SerialNumber: syz [ 271.945661][ T4320] usb 10-1: 3:0 : does not exist [ 271.966404][ T4320] usb 10-1: 3:0 : does not exist [ 272.058699][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 272.066404][ T4320] usb 10-1: USB disconnect, device number 8 [ 272.494231][ T6779] team0: Port device team_slave_0 added [ 272.538749][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 272.650491][ T6779] team0: Port device team_slave_1 added [ 272.863896][ T6842] chnl_net:caif_netlink_parms(): no params data found [ 272.926885][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.004470][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.198399][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.437720][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.468446][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.576306][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.897796][ T6779] device hsr_slave_0 entered promiscuous mode [ 273.937531][ T6779] device hsr_slave_1 entered promiscuous mode [ 273.957015][ T6779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.998369][ T6779] Cannot create hsr debugfs directory [ 274.138574][ T4276] Bluetooth: hci4: command 0x0411 tx timeout [ 274.156258][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.238540][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.259030][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.269639][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.277151][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.286258][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.294271][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.309455][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.338437][ T6842] device bridge_slave_0 entered promiscuous mode [ 274.421741][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.447228][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.478677][ T6842] device bridge_slave_1 entered promiscuous mode [ 274.615123][ T6842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.624590][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 274.692121][ T6842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.781607][ T6723] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.846941][ T6723] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.893359][ T6842] team0: Port device team_slave_0 added [ 274.923332][ T6723] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.966174][ T6842] team0: Port device team_slave_1 added [ 274.985343][ T6723] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.102821][ T6779] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.176049][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.207059][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.284122][ T6842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.416634][ T6779] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.475832][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.522136][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.621684][ T6842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.729687][ T6779] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.967153][ T6779] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.081482][ T6882] chnl_net:caif_netlink_parms(): no params data found [ 276.170904][ T6723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.199856][ T6842] device hsr_slave_0 entered promiscuous mode [ 276.238920][ T6842] device hsr_slave_1 entered promiscuous mode [ 276.256704][ T6842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.276764][ T6842] Cannot create hsr debugfs directory [ 276.336978][ T6723] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.378937][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 276.421786][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.456472][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.512488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.545683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.571637][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.578776][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.643369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.668492][ T956] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 276.676690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.699125][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 276.717141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.747839][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.754949][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.784951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.851724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.878892][ T956] usb 10-1: no configurations [ 276.889635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.897611][ T956] usb 10-1: can't read configurations, error -22 [ 276.919356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.972696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.006190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.033509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.061137][ T956] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 277.074834][ T6779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.107639][ T6723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.145006][ T6723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.200972][ T6779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.236039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.246752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.268819][ T956] usb 10-1: no configurations [ 277.273528][ T956] usb 10-1: can't read configurations, error -22 [ 277.287969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.312170][ T956] usb usb10-port1: attempt power cycle [ 277.322030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.382451][ T6779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.401268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.436043][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.459550][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.497866][ T6882] device bridge_slave_0 entered promiscuous mode [ 277.547048][ T6779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.596627][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.606470][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.647615][ T6882] device bridge_slave_1 entered promiscuous mode [ 277.748660][ T956] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 277.821111][ T6882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.839918][ T956] usb 10-1: no configurations [ 277.858827][ T956] usb 10-1: can't read configurations, error -22 [ 277.963717][ T6842] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.009478][ T6882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.044466][ T956] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 278.099359][ T956] usb 10-1: no configurations [ 278.118430][ T956] usb 10-1: can't read configurations, error -22 [ 278.145148][ T956] usb usb10-port1: unable to enumerate USB device [ 278.214216][ T6842] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.400888][ T6842] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.458805][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 278.472033][ T6882] team0: Port device team_slave_0 added [ 278.504516][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.552700][ T6882] team0: Port device team_slave_1 added [ 278.625326][ T6842] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.695362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.723933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.771267][ T6779] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.779706][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 278.821759][ T6723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.855736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.878766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.921788][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.958732][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.056407][ T6882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.150550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.187392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.237624][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.244774][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.363188][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.391426][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.519504][ T6882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.566402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.615874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.674945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.728815][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.735997][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.814722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.859495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.968627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.977663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.045788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.098874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.141779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.175625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.236422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.261161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.344716][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.376752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.462757][ T6842] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 280.538720][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 280.551499][ T6882] device hsr_slave_0 entered promiscuous mode [ 280.642151][ T6882] device hsr_slave_1 entered promiscuous mode [ 280.697124][ T6882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.735954][ T6882] Cannot create hsr debugfs directory [ 280.799798][ T6842] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 280.895936][ T6842] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 280.951984][ T6842] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 281.122186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.164495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.304702][ T6723] device veth0_vlan entered promiscuous mode [ 281.318246][ T6957] syz.9.707 (6957): drop_caches: 2 [ 281.379074][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.404596][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.463215][ T6723] device veth1_vlan entered promiscuous mode [ 281.529864][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.567775][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.717958][ T6842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.754918][ T6723] device veth0_macvtap entered promiscuous mode [ 281.830925][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.853464][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.906308][ T6842] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.980411][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.007143][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.017765][ T6974] netlink: 112 bytes leftover after parsing attributes in process `syz.9.709'. [ 282.054790][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.098782][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.106241][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.198845][ T6723] device veth1_macvtap entered promiscuous mode [ 282.207837][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.331129][ T6882] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.427185][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.459696][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.506418][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.548154][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.555325][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.626351][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 282.636560][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.679737][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.727099][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.734207][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.788212][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.812145][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.855341][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.898288][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.934329][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.967125][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.004374][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.044272][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.065428][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.098038][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.134315][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.159740][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.199678][ T6723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.301770][ T6882] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.426279][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.437927][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.473747][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.504161][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.535160][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.592147][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.637659][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.688397][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.743682][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.778479][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.835319][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.905524][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.958582][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.989104][ T6723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.049221][ T6723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.113298][ T6723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.247574][ T6882] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.328997][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.348934][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.408983][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.438685][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.480331][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.525266][ T6842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.605480][ T6842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.660686][ T6723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.701866][ T6723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.754250][ T6723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.798423][ T6723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.885462][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.893939][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.902674][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.910709][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.919212][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.926354][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.962874][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.063893][ T6882] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.110867][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.144959][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.166225][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.204971][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.230955][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.266394][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.447647][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.525289][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.571057][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.603112][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.646004][ T6779] device veth0_vlan entered promiscuous mode [ 285.736826][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.796271][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.817211][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.861971][ T6779] device veth1_vlan entered promiscuous mode [ 285.929828][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.111768][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.130393][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.168849][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.198781][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.255285][ T6779] device veth0_macvtap entered promiscuous mode [ 286.383583][ T6779] device veth1_macvtap entered promiscuous mode [ 286.454520][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.485694][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.505094][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.514260][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.530761][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.545396][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.563522][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.575449][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.591759][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.606601][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.624109][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.636556][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.653069][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.666972][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.684600][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.734244][ T6842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.753988][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.779756][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.809760][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.829136][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.869111][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.876572][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.906013][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.945141][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 286.954624][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.993655][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.013738][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.039570][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.055054][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.075068][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.086988][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.106245][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.117634][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.133711][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.144323][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.161843][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.223605][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.256577][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.281354][ T6779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.314396][ T6779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.339294][ T6779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.348016][ T6779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.395253][ T6882] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 287.470750][ T6882] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 287.492351][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.535334][ T6882] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 287.568559][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.619365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.668665][ T6882] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 288.005794][ T7004] chnl_net:caif_netlink_parms(): no params data found [ 288.124821][ T5241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.176917][ T5241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.226905][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.244432][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.255016][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.308451][ T5241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.362796][ T5241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.450211][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.503262][ T6882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.592614][ T6842] device veth0_vlan entered promiscuous mode [ 288.655578][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.679162][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.833385][ T6882] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.865249][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.896834][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.935161][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.973382][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.020068][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 289.039950][ T7040] lo speed is unknown, defaulting to 1000 [ 289.117673][ T6842] device veth1_vlan entered promiscuous mode [ 289.157577][ T7040] FAULT_INJECTION: forcing a failure. [ 289.157577][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 289.238740][ T7040] CPU: 0 PID: 7040 Comm: syz.1.677 Not tainted syzkaller #0 [ 289.246089][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.256154][ T7040] Call Trace: [ 289.259436][ T7040] [ 289.262377][ T7040] dump_stack_lvl+0x188/0x24e [ 289.267080][ T7040] ? show_regs_print_info+0x12/0x12 [ 289.272303][ T7040] ? load_image+0x410/0x410 [ 289.276815][ T7040] ? __might_sleep+0xd0/0xd0 [ 289.281423][ T7040] ? __lock_acquire+0x7c40/0x7c40 [ 289.286464][ T7040] should_fail_ex+0x390/0x4c0 [ 289.291158][ T7040] should_failslab+0x5/0x20 [ 289.295673][ T7040] slab_pre_alloc_hook+0x59/0x300 [ 289.300714][ T7040] ? add_modify_gid+0x172/0xb90 [ 289.305583][ T7040] __kmem_cache_alloc_node+0x4f/0x270 [ 289.310968][ T7040] ? add_modify_gid+0x172/0xb90 [ 289.315844][ T7040] kmalloc_trace+0x26/0xe0 [ 289.320277][ T7040] add_modify_gid+0x172/0xb90 [ 289.324979][ T7040] ? __ib_cache_gid_add+0x225/0x390 [ 289.330189][ T7040] __ib_cache_gid_add+0x230/0x390 [ 289.335224][ T7040] ? ib_cache_gid_add+0x40/0x40 [ 289.340086][ T7040] ? ib_cache_gid_set_default_gid+0x548/0x6e0 [ 289.346160][ T7040] ib_cache_gid_set_default_gid+0x5bd/0x6e0 [ 289.352062][ T7040] ? is_ndev_for_default_gid_filter+0x26/0x2e0 [ 289.358223][ T7040] ? rdma_find_gid_by_filter+0x3d0/0x3d0 [ 289.363862][ T7040] ? __lock_acquire+0x7c40/0x7c40 [ 289.368936][ T7040] ? is_ndev_for_default_gid_filter+0x26/0x2e0 [ 289.375191][ T7040] ? is_ndev_for_default_gid_filter+0x28a/0x2e0 [ 289.381470][ T7040] enum_all_gids_of_dev_cb+0x191/0x290 [ 289.386956][ T7040] ib_enum_roce_netdev+0x189/0x2b0 [ 289.392084][ T7040] ? pass_all_filter+0x10/0x10 [ 289.396856][ T7040] ? rdma_roce_rescan_device+0x30/0x30 [ 289.402345][ T7040] ib_cache_setup_one+0x416/0x5c0 [ 289.407398][ T7040] ib_register_device+0xf42/0x1350 [ 289.412539][ T7040] ? remove_all_compat_devs+0x260/0x260 [ 289.418113][ T7040] ? crypto_create_tfm_node+0x73/0x380 [ 289.423588][ T7040] ? rcu_is_watching+0x11/0xa0 [ 289.428370][ T7040] ? crypto_create_tfm_node+0x73/0x380 [ 289.433840][ T7040] ? __kmalloc_node+0xe3/0x240 [ 289.438623][ T7040] ? crypto_shash_init_tfm+0x1d5/0x310 [ 289.444092][ T7040] ? crc32_pclmul_cra_init+0x9/0x50 [ 289.449301][ T7040] ? crypto_create_tfm_node+0x2b9/0x380 [ 289.454860][ T7040] ? crypto_alg_mod_lookup+0x1a9/0x570 [ 289.460330][ T7040] ? crypto_alloc_tfm_node+0x339/0x360 [ 289.465823][ T7040] rxe_register_device+0x256/0x380 [ 289.470968][ T7040] rxe_net_add+0x77/0xe0 [ 289.475237][ T7040] rxe_newlink+0x6b/0xf0 [ 289.479494][ T7040] nldev_newlink+0x58f/0x610 [ 289.484107][ T7040] ? nldev_set_doit+0x490/0x490 [ 289.488960][ T7040] ? lockdep_lock+0xf1/0x1f0 [ 289.493613][ T7040] ? aa_get_newest_label+0xf9/0x5b0 [ 289.498824][ T7040] ? end_current_label_crit_section+0x170/0x170 [ 289.505083][ T7040] ? end_current_label_crit_section+0x170/0x170 [ 289.511350][ T7040] ? __might_sleep+0xd0/0xd0 [ 289.515949][ T7040] ? apparmor_capable+0x12c/0x190 [ 289.520989][ T7040] ? nldev_set_doit+0x490/0x490 [ 289.525845][ T7040] rdma_nl_rcv+0x6e7/0xa20 [ 289.530291][ T7040] ? rdma_nl_net_init+0x190/0x190 [ 289.535327][ T7040] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.540530][ T7040] ? __netlink_deliver_tap+0x92/0x7e0 [ 289.545914][ T7040] ? net_generic+0x1e/0x240 [ 289.550517][ T7040] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.555753][ T7040] netlink_unicast+0x7ad/0x920 [ 289.560556][ T7040] netlink_sendmsg+0x8ad/0xbd0 [ 289.565332][ T7040] ? netlink_getsockopt+0x550/0x550 [ 289.570541][ T7040] ? apparmor_socket_sendmsg+0x8a/0x330 [ 289.576099][ T7040] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 289.581396][ T7040] ? security_socket_sendmsg+0x7c/0xa0 [ 289.586880][ T7040] ? netlink_getsockopt+0x550/0x550 [ 289.592080][ T7040] ____sys_sendmsg+0x5ed/0x9a0 [ 289.596948][ T7040] ? __sys_sendmsg_sock+0x30/0x30 [ 289.601992][ T7040] ? __import_iovec+0x306/0x510 [ 289.606864][ T7040] ? import_iovec+0x6f/0xa0 [ 289.611383][ T7040] ___sys_sendmsg+0x2a2/0x360 [ 289.616079][ T7040] ? __sys_sendmsg+0x2a0/0x2a0 [ 289.620898][ T7040] __se_sys_sendmsg+0x1c3/0x2b0 [ 289.625770][ T7040] ? __x64_sys_sendmsg+0x80/0x80 [ 289.630753][ T7040] ? lockdep_hardirqs_on+0x94/0x140 [ 289.635956][ T7040] do_syscall_64+0x4c/0xa0 [ 289.640384][ T7040] ? clear_bhb_loop+0x60/0xb0 [ 289.645091][ T7040] ? clear_bhb_loop+0x60/0xb0 [ 289.649872][ T7040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.655776][ T7040] RIP: 0033:0x7f9ce039e159 [ 289.660199][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.679821][ T7040] RSP: 002b:00007f9ce118b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.688253][ T7040] RAX: ffffffffffffffda RBX: 00007f9ce0625fa0 RCX: 00007f9ce039e159 [ 289.696237][ T7040] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 289.704214][ T7040] RBP: 00007f9ce0435024 R08: 0000000000000000 R09: 0000000000000000 [ 289.712192][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.720165][ T7040] R13: 00007f9ce0626038 R14: 00007f9ce0625fa0 R15: 00007fff9b6e0d38 [ 289.728158][ T7040] [ 290.483840][ T7040] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa0a error=-12 [ 290.500630][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.515792][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.525050][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.534229][ T3601] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 290.551709][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.558860][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.573683][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.584476][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.599777][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.606883][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.662367][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.674089][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.685676][ T7004] device bridge_slave_0 entered promiscuous mode [ 290.698751][ T7040] lo speed is unknown, defaulting to 1000 [ 290.709079][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.727276][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.752216][ T3601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.775633][ T3601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.787987][ T3601] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.807886][ T3601] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.817189][ T3601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.838872][ T3601] usb 7-1: config 0 descriptor?? [ 290.924783][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.935775][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.967129][ T7004] device bridge_slave_1 entered promiscuous mode [ 290.985039][ T7040] lo speed is unknown, defaulting to 1000 [ 291.007973][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.040243][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.073392][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.099201][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 291.115864][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.141699][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.168707][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.197774][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.219765][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.254230][ T3601] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 291.266061][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.294997][ T6842] device veth0_macvtap entered promiscuous mode [ 291.304196][ T3601] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 291.338136][ T7040] infiniband syz0: set active [ 291.394960][ T7040] infiniband syz0: added lo [ 291.404048][ T6882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.423111][ T7040] rdma_rxe: unable to create cq [ 291.456141][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.466376][ T7040] infiniband syz0: Couldn't create ib_mad CQ [ 291.491342][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.508954][ T7040] infiniband syz0: Couldn't open port 1 [ 291.525469][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.559149][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.613300][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.665033][ T6842] device veth1_macvtap entered promiscuous mode [ 291.674756][ T7040] RDS/IB: syz0: added [ 291.696956][ T7040] smc: adding ib device syz0 with port count 1 [ 291.711796][ T5657] lo speed is unknown, defaulting to 1000 [ 291.753511][ T7040] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 291.854757][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 291.905107][ T7004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.984737][ T5657] lo speed is unknown, defaulting to 1000 [ 292.025759][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.112490][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.159134][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.211826][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.280216][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.336922][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.377268][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.420905][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.456582][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.482318][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.498417][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.517333][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.537709][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.556126][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.573547][ T956] usb 7-1: USB disconnect, device number 13 [ 292.648381][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.664168][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.674921][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.690370][ T7004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.715296][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.728648][ T7040] lo speed is unknown, defaulting to 1000 [ 292.757733][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.802762][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.852329][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.898305][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.948497][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.992227][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.034313][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.066092][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.124066][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.168481][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.180051][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 293.221463][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.243619][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.258475][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.276755][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.297446][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.317683][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.359485][ T7040] lo speed is unknown, defaulting to 1000 [ 293.370203][ T6842] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.398890][ T6842] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.448895][ T6842] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.474090][ T6842] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.515158][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.543907][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.601410][ T6882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.664293][ T7004] team0: Port device team_slave_0 added [ 293.736603][ T7004] team0: Port device team_slave_1 added [ 293.887285][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.918680][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.003567][ T7004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.041353][ T5241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.057378][ T7040] lo speed is unknown, defaulting to 1000 [ 294.129453][ T5241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.182296][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.238752][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.418453][ T7004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.472176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 294.593578][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.671820][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.701395][ T7004] device hsr_slave_0 entered promiscuous mode [ 294.730056][ T7093] device-mapper: table: 248:3: thin-pool: Invalid argument count (-EINVAL) [ 294.758715][ T7004] device hsr_slave_1 entered promiscuous mode [ 294.775541][ T7093] device-mapper: ioctl: error adding target to table [ 294.815334][ T7004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.845424][ T7004] Cannot create hsr debugfs directory [ 294.867428][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 294.899397][ T7040] lo speed is unknown, defaulting to 1000 [ 295.227022][ T7097] nvmet: adding nsid 1 to subsystem testsubsys [ 295.550407][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.585182][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.649551][ T7040] lo speed is unknown, defaulting to 1000 [ 295.739391][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.777902][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.826419][ T6882] device veth0_vlan entered promiscuous mode [ 295.859936][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.890703][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.981977][ T6882] device veth1_vlan entered promiscuous mode [ 296.165583][ T6882] device veth0_macvtap entered promiscuous mode [ 296.215683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.269125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.301900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.344919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.390459][ T6882] device veth1_macvtap entered promiscuous mode [ 296.398601][ T7040] lo speed is unknown, defaulting to 1000 [ 296.404978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.455984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.562120][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.603347][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.647778][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.678626][ T4338] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 296.706562][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.747231][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.785929][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.845483][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.876633][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.889629][ T4338] usb 7-1: no configurations [ 296.894262][ T4338] usb 7-1: can't read configurations, error -22 [ 296.931967][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.963018][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.989732][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.030925][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.056319][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.094343][ T4338] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 297.113190][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.152959][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.198285][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.246154][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.309660][ T7040] lo speed is unknown, defaulting to 1000 [ 297.315627][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.324099][ T4338] usb 7-1: no configurations [ 297.348551][ T4338] usb 7-1: can't read configurations, error -22 [ 297.369036][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.390871][ T4338] usb usb7-port1: attempt power cycle [ 297.452254][ T7004] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 297.515487][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.566637][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.634835][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.678441][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.738764][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.779831][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.838382][ T4338] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 297.856205][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.906117][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.920413][ T4338] usb 7-1: no configurations [ 297.925039][ T4338] usb 7-1: can't read configurations, error -22 [ 297.961701][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.008321][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.055487][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.101500][ T7127] null_blk: disk nullb1 created [ 298.113696][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.125007][ T4338] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 298.170839][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.183379][ T4338] usb 7-1: no configurations [ 298.187996][ T4338] usb 7-1: can't read configurations, error -22 [ 298.219283][ T4338] usb usb7-port1: unable to enumerate USB device [ 298.228393][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.277240][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.330786][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.393437][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.421134][ T7004] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 298.450105][ T7040] lo speed is unknown, defaulting to 1000 [ 298.456049][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.499211][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.558514][ T6882] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.567280][ T6882] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.626846][ T6882] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.677821][ T6882] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.750995][ T7004] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 298.812298][ T7004] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 299.049340][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.094115][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.177826][ T7040] lo speed is unknown, defaulting to 1000 [ 299.184286][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.221739][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.328555][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.338039][ T7004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.412746][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.500557][ T7004] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.589776][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.631171][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.740987][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.796723][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.880929][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.888026][ T5241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.036148][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.099026][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.161997][ T7162] ALSA: mixer_oss: invalid OSS volume '' [ 300.167676][ T7162] ALSA: mixer_oss: invalid OSS volume 'VpD}sJZ!l(f_FN' [ 300.188951][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.196042][ T5241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.288866][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.297194][ T7162] ALSA: mixer_oss: invalid OSS volume 'h(2a.2\.jDH' [ 300.365190][ T7162] ALSA: mixer_oss: invalid OSS volume 'QG#9*j624>y' [ 300.373372][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.418494][ T7162] ALSA: mixer_oss: invalid OSS volume '5H75BakTfnI2Pã!G8$]' [ 300.459193][ T7040] lo speed is unknown, defaulting to 1000 [ 300.470911][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.501184][ T7162] ALSA: mixer_oss: invalid OSS volume ' 6XTTv'\Buy*y' [ 300.523373][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.558385][ T7162] ALSA: mixer_oss: invalid OSS volume 'Dc 0E"$'N{Ce{\' [ 300.595150][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.611152][ T7162] ALSA: mixer_oss: invalid OSS volume '"s)]Chxa巓x5' [ 300.650301][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.676052][ T7162] ALSA: mixer_oss: invalid OSS volume '1̑xDN;sm6h|uj' [ 300.717109][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.742381][ T7162] ALSA: mixer_oss: invalid OSS volume 'RKRL+p&prc}?&?՗' [ 300.778838][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.797281][ T7162] ALSA: mixer_oss: invalid OSS volume ',suv>g!)͋ON' [ 300.839162][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.852608][ T7162] ALSA: mixer_oss: invalid OSS volume '' "?t&~#' [ 300.892075][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.910616][ T7162] ALSA: mixer_oss: invalid OSS volume 'w[GvV1}۸' [ 300.961615][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.989506][ T7162] ALSA: mixer_oss: invalid OSS volume 'َg0' [ 301.023548][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.062019][ T7162] ALSA: mixer_oss: invalid OSS volume '\ȌA7_&U~_{g' [ 301.108730][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.164768][ T7162] ALSA: mixer_oss: invalid OSS volume 'NՆ 7u7Á&޽-' [ 301.266695][ T7162] ALSA: mixer_oss: invalid OSS volume 'L%n-aw]8*/vVP[M' [ 301.348884][ T7162] ALSA: mixer_oss: invalid OSS volume 'o\Txg3bŰ瑶.e9XZ' [ 301.414962][ T7162] ALSA: mixer_oss: invalid OSS volume '_[mPt2lA' [ 301.502374][ T7162] ALSA: mixer_oss: invalid OSS volume '}' [ 301.576135][ T11] device hsr_slave_0 left promiscuous mode [ 301.643134][ T11] device hsr_slave_1 left promiscuous mode [ 301.698538][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.778356][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.833491][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.886639][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.946737][ T11] device bridge_slave_1 left promiscuous mode [ 301.982696][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.041047][ T11] device bridge_slave_0 left promiscuous mode [ 302.092216][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.307124][ T11] device veth1_macvtap left promiscuous mode [ 302.355479][ T11] device veth0_macvtap left promiscuous mode [ 302.380816][ T7198] device-mapper: table: 248:3: thin-pool: Invalid argument count (-EINVAL) [ 302.399899][ T11] device veth1_vlan left promiscuous mode [ 302.427899][ T11] device veth0_vlan left promiscuous mode [ 302.437787][ T7198] device-mapper: ioctl: error adding target to table [ 302.543649][ T7180] syz.1.735 (7180): drop_caches: 2 [ 302.758648][ T4316] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 302.982224][ T4316] usb 8-1: no configurations [ 303.007259][ T4316] usb 8-1: can't read configurations, error -22 [ 303.198540][ T4316] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 303.318355][ T4338] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 303.419359][ T4316] usb 8-1: no configurations [ 303.424003][ T4316] usb 8-1: can't read configurations, error -22 [ 303.468582][ T4316] usb usb8-port1: attempt power cycle [ 303.539694][ T4338] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 303.614471][ T4338] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.655557][ T4338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.696510][ T4338] usb 9-1: config 0 descriptor?? [ 303.730058][ T4338] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 303.898820][ T4316] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 303.969287][ T4316] usb 8-1: no configurations [ 303.978661][ T4316] usb 8-1: can't read configurations, error -22 [ 304.140161][ T4316] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 304.194993][ T4316] usb 8-1: no configurations [ 304.206747][ T4316] usb 8-1: can't read configurations, error -22 [ 304.228014][ T4316] usb usb8-port1: unable to enumerate USB device [ 304.281666][ T4320] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 304.492531][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.517918][ T4320] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 304.544301][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.559760][ T4320] usb 2-1: Product: syz [ 304.564042][ T4320] usb 2-1: Manufacturer: syz [ 304.573625][ T4320] usb 2-1: SerialNumber: syz [ 304.594834][ T4320] usb 2-1: config 0 descriptor?? [ 304.614993][ T4320] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 304.636950][ T4320] dvb-usb: bulk message failed: -22 (3/0) [ 304.663703][ T11] team0 (unregistering): Port device team_slave_1 removed [ 304.686316][ T4320] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 304.722865][ T4320] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 304.741860][ T4320] usb 2-1: media controller created [ 304.752404][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.775004][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 304.790703][ T4320] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 304.834865][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 304.861787][ T4320] dvb-usb: schedule remote query interval to 150 msecs. [ 304.874010][ T4320] dvb-usb: bulk message failed: -22 (3/0) [ 304.898144][ T11] team0 (unregistering): Port device team_slave_0 removed [ 304.908541][ T4320] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 304.976142][ T4320] usb 2-1: USB disconnect, device number 3 [ 305.026106][ T4320] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 305.107107][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.172014][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.799425][ T4320] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 305.891874][ T7236] device-mapper: table: 248:3: thin-pool: Invalid argument count (-EINVAL) [ 305.925408][ T7236] device-mapper: ioctl: error adding target to table [ 306.008326][ T4320] usb 8-1: Using ep0 maxpacket: 32 [ 306.038390][ T4320] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 306.047464][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.119058][ T4320] usb 8-1: config 0 descriptor?? [ 306.141960][ T4320] gspca_main: sunplus-2.14.0 probing 041e:400b [ 306.160827][ T7239] binder: BINDER_SET_CONTEXT_MGR already set [ 306.167146][ T7239] binder: 7238:7239 ioctl 4018620d 200000000040 returned -16 [ 306.198520][ T956] usb 9-1: USB disconnect, device number 8 [ 306.368031][ T11] bond0 (unregistering): Released all slaves [ 306.495999][ T7239] syz.8.751 (7239): drop_caches: 2 [ 306.732882][ T4320] gspca_sunplus: reg_r err -32 [ 306.750936][ T4320] sunplus: probe of 8-1:0.0 failed with error -32 [ 307.419024][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.426530][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.518953][ T7004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.418891][ T956] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 308.433001][ T7284] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 308.509194][ T4338] usb 8-1: USB disconnect, device number 17 [ 308.640300][ T956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.702131][ T956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.754711][ T956] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.840227][ T956] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.895589][ T956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.962476][ T956] usb 7-1: config 0 descriptor?? [ 309.399924][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.435093][ T956] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 309.455319][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.483906][ T956] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 309.545218][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.582521][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.595882][ T956] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8d0407e9-7109-4986-b468-ec11172e3f85. [ 309.641498][ T7004] device veth0_vlan entered promiscuous mode [ 309.648788][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.688887][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.802264][ T7004] device veth1_vlan entered promiscuous mode [ 309.812170][ T7293] nvme nvme0: creating 1 I/O queues. [ 309.868161][ T7293] nvme nvme0: new ctrl: "testsubsys" [ 309.995758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.044959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.145946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.226119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.282033][ T7004] device veth0_macvtap entered promiscuous mode [ 310.353270][ T7004] device veth1_macvtap entered promiscuous mode [ 310.410063][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.452342][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.575018][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.648510][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.708408][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.734968][ T4338] usb 7-1: USB disconnect, device number 18 [ 310.802180][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.862667][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.910808][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.955115][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.004682][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.043955][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.073368][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.136188][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.177361][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.197600][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.288323][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.348514][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.399446][ T7334] ALSA: mixer_oss: invalid OSS volume '' [ 311.414335][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.452375][ T7334] ALSA: mixer_oss: invalid OSS volume 'VpD}sJZ!l(f_FN' [ 311.489652][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.518357][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.554350][ T7334] ALSA: mixer_oss: invalid OSS volume 'h(2a.2\.jDH' [ 311.608769][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.628907][ T7334] ALSA: mixer_oss: invalid OSS volume 'QG#9*j624>y' [ 311.673223][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.717853][ T7334] ALSA: mixer_oss: invalid OSS volume '5H75BakTfnI2Pã!G8$]' [ 311.741005][ T7339] ALSA: seq fatal error: cannot create timer (-22) [ 311.786115][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.796336][ T7334] ALSA: mixer_oss: invalid OSS volume ' 6XTTv'\Buy*y' [ 311.858775][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.881655][ T7334] ALSA: mixer_oss: invalid OSS volume 'Dc 0E"$'N{Ce{\' [ 311.918985][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.930719][ T7334] ALSA: mixer_oss: invalid OSS volume '"s)]Chxa巓x5' [ 311.998957][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.014911][ T7334] ALSA: mixer_oss: invalid OSS volume '1̑xDN;sm6h|uj' [ 312.047072][ T7334] ALSA: mixer_oss: invalid OSS volume 'RKRL+p&prc}?&?՗' [ 312.077339][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.105333][ T7334] ALSA: mixer_oss: invalid OSS volume ',suv>g!)͋ON' [ 312.119661][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.160819][ T7334] ALSA: mixer_oss: invalid OSS volume '' "?t&~#' [ 312.168991][ T4320] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 312.178801][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.204344][ T7334] ALSA: mixer_oss: invalid OSS volume 'w[GvV1}۸' [ 312.219527][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.260528][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.274032][ T7334] ALSA: mixer_oss: invalid OSS volume 'َg0' [ 312.296574][ T7334] ALSA: mixer_oss: invalid OSS volume '\ȌA7_&U~_{g' [ 312.311277][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.339562][ T7334] ALSA: mixer_oss: invalid OSS volume 'NՆ 7u7Á&޽-' [ 312.355393][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.370772][ T4320] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 312.396915][ T7334] ALSA: mixer_oss: invalid OSS volume 'L%n-aw]8*/vVP[M' [ 312.410010][ T4320] usb 7-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 312.423640][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.448476][ T7334] ALSA: mixer_oss: invalid OSS volume 'o\Txg3bŰ瑶.e9XZ' [ 312.458001][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3 [ 312.478719][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.506226][ T4320] usb 7-1: Product: syz [ 312.511807][ T7334] ALSA: mixer_oss: invalid OSS volume '_[mPt2lA' [ 312.524268][ T4320] usb 7-1: SerialNumber: syz [ 312.529637][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.555848][ T7334] ALSA: mixer_oss: invalid OSS volume '}' [ 312.564485][ T4320] usb 7-1: config 0 descriptor?? [ 312.575000][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.589619][ T7344] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 312.668580][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.728197][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.788917][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.903115][ T7004] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.960348][ T7004] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.998279][ T7004] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.024699][ T7004] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.268335][ T3601] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 313.468331][ T3601] usb 9-1: Using ep0 maxpacket: 32 [ 313.503809][ T3601] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 313.550710][ T3601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.606261][ T3601] usb 9-1: config 0 descriptor?? [ 313.656237][ T3601] gspca_main: sunplus-2.14.0 probing 041e:400b [ 313.824143][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.884259][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.984287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.166752][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.225922][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.270635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 314.444529][ T3601] gspca_sunplus: reg_r err -71 [ 314.463640][ T3601] sunplus: probe of 9-1:0.0 failed with error -71 [ 314.518074][ T3601] usb 9-1: USB disconnect, device number 9 [ 314.972750][ T3601] usb 7-1: USB disconnect, device number 19 [ 315.714278][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.789'. [ 316.010616][ T28] device hsr_slave_0 left promiscuous mode [ 316.092652][ T28] device hsr_slave_1 left promiscuous mode [ 316.208459][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.263392][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.364206][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.426575][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.488890][ T28] device bridge_slave_1 left promiscuous mode [ 316.495098][ T7428] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 316.534219][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.593869][ T28] device bridge_slave_0 left promiscuous mode [ 316.639902][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.668295][ T4320] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 316.855300][ T28] device veth1_macvtap left promiscuous mode [ 316.861705][ T4320] usb 8-1: device descriptor read/64, error -71 [ 316.901497][ T28] device veth0_macvtap left promiscuous mode [ 316.942411][ T28] device veth1_vlan left promiscuous mode [ 317.001508][ T28] device veth0_vlan left promiscuous mode [ 317.158559][ T4320] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 317.183169][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.189564][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.317301][ T7446] loop9: detected capacity change from 0 to 512 [ 317.398478][ T4320] usb 8-1: device descriptor read/64, error -71 [ 317.476235][ T7446] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 317.558744][ T4320] usb usb8-port1: attempt power cycle [ 317.990778][ T4320] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 318.041145][ T4320] usb 8-1: device descriptor read/8, error -71 [ 318.335288][ T7004] EXT4-fs (loop9): unmounting filesystem. [ 318.348624][ T4320] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 318.424271][ T4320] usb 8-1: device descriptor read/8, error -71 [ 318.568486][ T4320] usb usb8-port1: unable to enumerate USB device [ 318.876942][ T7480] FAULT_INJECTION: forcing a failure. [ 318.876942][ T7480] name failslab, interval 1, probability 0, space 0, times 0 [ 318.977577][ T7480] CPU: 0 PID: 7480 Comm: syz.6.810 Not tainted syzkaller #0 [ 318.984926][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.995019][ T7480] Call Trace: [ 318.998305][ T7480] [ 319.001251][ T7480] dump_stack_lvl+0x188/0x24e [ 319.005947][ T7480] ? show_regs_print_info+0x12/0x12 [ 319.011155][ T7480] ? load_image+0x410/0x410 [ 319.015688][ T7480] ? __might_sleep+0xd0/0xd0 [ 319.020295][ T7480] ? __lock_acquire+0x7c40/0x7c40 [ 319.025336][ T7480] should_fail_ex+0x390/0x4c0 [ 319.030032][ T7480] should_failslab+0x5/0x20 [ 319.034545][ T7480] slab_pre_alloc_hook+0x59/0x300 [ 319.039584][ T7480] kmem_cache_alloc_lru+0x49/0x2e0 [ 319.044701][ T7480] ? hugetlbfs_alloc_inode+0xef/0x140 [ 319.050091][ T7480] hugetlbfs_alloc_inode+0xef/0x140 [ 319.055300][ T7480] ? hugetlbfs_fill_super+0x900/0x900 [ 319.060685][ T7480] new_inode_pseudo+0x5f/0x1c0 [ 319.065464][ T7480] new_inode+0x25/0x1d0 [ 319.069641][ T7480] ? resv_map_alloc+0x1c0/0x2b0 [ 319.074502][ T7480] hugetlbfs_get_inode+0x78/0x510 [ 319.079543][ T7480] ? _raw_spin_unlock+0x24/0x40 [ 319.084419][ T7480] ? alloc_fd+0x590/0x640 [ 319.088764][ T7480] hugetlb_file_setup+0x211/0x610 [ 319.093804][ T7480] __se_sys_memfd_create+0x20a/0x340 [ 319.099101][ T7480] do_syscall_64+0x4c/0xa0 [ 319.103553][ T7480] ? clear_bhb_loop+0x60/0xb0 [ 319.108245][ T7480] ? clear_bhb_loop+0x60/0xb0 [ 319.112937][ T7480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.118843][ T7480] RIP: 0033:0x7fbb5959e159 [ 319.123267][ T7480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.142884][ T7480] RSP: 002b:00007fbb5a3a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 319.151335][ T7480] RAX: ffffffffffffffda RBX: 00007fbb59825fa0 RCX: 00007fbb5959e159 [ 319.159351][ T7480] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000300 [ 319.167332][ T7480] RBP: 00007fbb59635024 R08: 0000000000000000 R09: 0000000000000000 [ 319.175316][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.183292][ T7480] R13: 00007fbb59826038 R14: 00007fbb59825fa0 R15: 00007ffcb77a75c8 [ 319.191281][ T7480] [ 319.792476][ T4320] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 319.960901][ T4320] usb 9-1: device descriptor read/64, error -71 [ 320.104363][ T28] team0 (unregistering): Port device team_slave_1 removed [ 320.251964][ T4320] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 320.290138][ T28] team0 (unregistering): Port device team_slave_0 removed [ 320.421410][ T4320] usb 9-1: device descriptor read/64, error -71 [ 320.564509][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.588789][ T4320] usb usb9-port1: attempt power cycle [ 320.683131][ T7497] loop7: detected capacity change from 0 to 512 [ 320.743378][ T7497] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 320.797944][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.012364][ T4320] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 321.074033][ T4320] usb 9-1: device descriptor read/8, error -71 [ 321.175048][ T4276] Bluetooth: hci0: Malformed LE Event: 0x0d [ 321.369941][ T4320] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 321.426489][ T4320] usb 9-1: device descriptor read/8, error -71 [ 321.542043][ T6842] EXT4-fs (loop7): unmounting filesystem. [ 321.562493][ T4320] usb usb9-port1: unable to enumerate USB device [ 321.588334][ T4338] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 321.662035][ T4276] Bluetooth: hci3: command 0x0411 tx timeout [ 321.824884][ T4338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 321.848135][ T4338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.868001][ T4338] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.889509][ T4338] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.904104][ T4338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.926031][ T4338] usb 7-1: config 0 descriptor?? [ 322.050305][ T28] bond0 (unregistering): Released all slaves [ 322.365012][ T4338] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 322.448578][ T4338] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 322.570883][ T5657] usb 7-1: USB disconnect, device number 20 [ 322.792608][ T7524] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f804 [ 323.283744][ T7525] fido_id[7525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 323.503330][ T7542] loop6: detected capacity change from 0 to 512 [ 323.616308][ T7542] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 324.483828][ T7569] netlink: 'syz.9.838': attribute type 10 has an invalid length. [ 324.503842][ T6723] EXT4-fs (loop6): unmounting filesystem. [ 324.590576][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.599801][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.799185][ T7569] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.807287][ T7569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.815597][ T7569] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.822733][ T7569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.311354][ T7569] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 325.384717][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.9.838'. [ 325.471141][ T7573] device bridge_slave_1 left promiscuous mode [ 325.513746][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.579050][ T7573] device bridge_slave_0 left promiscuous mode [ 325.611836][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.673518][ T5657] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 325.806969][ T7573] bond0: (slave bridge0): Releasing backup interface [ 325.887446][ T5657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.931932][ T5657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.972468][ T5657] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.001163][ T26] audit: type=1800 audit(1787983254.643:3): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.845" name=08 dev="sda1" ino=2072 res=0 errno=0 [ 326.059667][ T5657] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.085382][ T5657] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.108929][ T5657] usb 7-1: config 0 descriptor?? [ 326.534317][ T5657] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 326.561744][ T4338] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 326.608855][ T5657] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 326.738346][ T4338] usb 9-1: device descriptor read/64, error -71 [ 326.757058][ T5657] usb 7-1: USB disconnect, device number 21 [ 327.018477][ T4338] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 327.093756][ T7610] loop7: detected capacity change from 0 to 512 [ 327.125919][ T7605] fido_id[7605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 327.196487][ T7610] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 327.218443][ T4338] usb 9-1: device descriptor read/64, error -71 [ 327.338765][ T4338] usb usb9-port1: attempt power cycle [ 327.445442][ T4335] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 327.690374][ T4335] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.730585][ T4335] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 327.787301][ T4335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.834057][ T4335] usb 10-1: config 0 descriptor?? [ 327.839522][ T4338] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 327.888980][ T4338] usb 9-1: device descriptor read/8, error -71 [ 328.078887][ T4335] usbhid 10-1:0.0: can't add hid device: -71 [ 328.108356][ T4335] usbhid: probe of 10-1:0.0 failed with error -71 [ 328.170772][ T4335] usb 10-1: USB disconnect, device number 13 [ 328.188290][ T4338] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 328.228674][ T6842] EXT4-fs (loop7): unmounting filesystem. [ 328.244410][ T4338] usb 9-1: device descriptor read/8, error -71 [ 328.388917][ T4338] usb usb9-port1: unable to enumerate USB device [ 328.523621][ T4276] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 328.668265][ T4335] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 328.945599][ T4335] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.024349][ T4335] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 329.088337][ T4335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.173418][ T4335] usb 10-1: config 0 descriptor?? [ 329.606439][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.679979][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.168788][ T4335] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 330.216449][ T7669] loop7: detected capacity change from 0 to 512 [ 330.243648][ T4335] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input10 [ 330.295622][ T7669] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 330.309200][ C0] ================================================================================ [ 330.318515][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 330.327197][ C0] index 228 is out of range for type 'const int[34]' [ 330.333874][ C0] CPU: 0 PID: 5194 Comm: udevd Not tainted syzkaller #0 [ 330.340821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.350883][ C0] Call Trace: [ 330.354184][ C0] [ 330.357047][ C0] dump_stack_lvl+0x188/0x24e [ 330.361763][ C0] ? show_regs_print_info+0x12/0x12 [ 330.366987][ C0] ? load_image+0x410/0x410 [ 330.371517][ C0] ubsan_epilogue+0xa/0x30 [ 330.375947][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 330.381685][ C0] aiptek_irq+0x1e87/0x28f0 [ 330.386203][ C0] ? led_trigger_blink_setup+0x37/0x230 [ 330.391788][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 330.397189][ C0] dummy_timer+0xa39/0x34e0 [ 330.401746][ C0] ? dummy_free_streams+0x520/0x520 [ 330.406968][ C0] __hrtimer_run_queues+0x522/0xc90 [ 330.412183][ C0] ? dummy_free_streams+0x520/0x520 [ 330.417393][ C0] ? hrtimer_interrupt+0x980/0x980 [ 330.422525][ C0] hrtimer_run_softirq+0x173/0x290 [ 330.427655][ C0] handle_softirqs+0x291/0x910 [ 330.432439][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 330.437308][ C0] ? do_softirq+0x210/0x210 [ 330.441825][ C0] ? hrtimer_interrupt+0x775/0x980 [ 330.446955][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 330.452188][ C0] __irq_exit_rcu+0x13b/0x230 [ 330.456905][ C0] ? irq_exit_rcu+0x20/0x20 [ 330.461453][ C0] irq_exit_rcu+0x5/0x20 [ 330.465706][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 330.471418][ C0] [ 330.474377][ C0] [ 330.477318][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 330.483321][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 330.489840][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 df a9 1d f7 65 8b 05 e0 5a c7 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 330.509472][ C0] RSP: 0018:ffffc900037e7740 EFLAGS: 00000206 [ 330.515557][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: c80fa59cc6e51800 [ 330.523535][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: 0000000000000001 [ 330.531513][ C0] RBP: ffffc900037e77c8 R08: ffffffff90b13277 R09: 1ffffffff216264e [ 330.539496][ C0] R10: dffffc0000000000 R11: fffffbfff216264f R12: dffffc0000000000 [ 330.547479][ C0] R13: ffff888045500000 R14: ffffffff96e60c78 R15: 1ffff920006fcee8 [ 330.555495][ C0] ? _raw_spin_unlock+0x40/0x40 [ 330.560366][ C0] ? page_ext_put+0x98/0xb0 [ 330.564887][ C0] debug_check_no_obj_freed+0x471/0x520 [ 330.570449][ C0] free_unref_page_prepare+0x2c3/0x9e0 [ 330.575928][ C0] free_unref_page+0x2e/0x3f0 [ 330.580651][ C0] __unfreeze_partials+0x188/0x1e0 [ 330.585776][ C0] put_cpu_partial+0x17c/0x250 [ 330.590571][ C0] ? put_cpu_partial+0x6e/0x250 [ 330.595437][ C0] qlist_free_all+0x76/0xe0 [ 330.599951][ C0] kasan_quarantine_reduce+0x144/0x160 [ 330.605420][ C0] __kasan_slab_alloc+0x1e/0x80 [ 330.610286][ C0] slab_post_alloc_hook+0x4b/0x490 [ 330.615409][ C0] ? slab_pre_alloc_hook+0x8c/0x300 [ 330.620641][ C0] kmem_cache_alloc+0x18b/0x2f0 [ 330.625500][ C0] ? vm_area_alloc+0x20/0xe0 [ 330.630111][ C0] vm_area_alloc+0x20/0xe0 [ 330.634545][ C0] mmap_region+0xcbc/0x1c50 [ 330.639075][ C0] ? file_mmap_ok+0x170/0x170 [ 330.643773][ C0] ? vma_expand+0x850/0x850 [ 330.648297][ C0] ? cap_mmap_addr+0x153/0x2c0 [ 330.653085][ C0] do_mmap+0x9ce/0x10d0 [ 330.657257][ C0] ? mlock_future_check+0x100/0x100 [ 330.662467][ C0] ? ima_file_mmap+0xf7/0x140 [ 330.667157][ C0] ? ima_file_free+0x3e0/0x3e0 [ 330.671957][ C0] vm_mmap_pgoff+0x1c1/0x2d0 [ 330.676571][ C0] ? account_locked_vm+0xe0/0xe0 [ 330.681525][ C0] ? ksys_mmap_pgoff+0xef/0x720 [ 330.686405][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 330.691639][ C0] do_syscall_64+0x4c/0xa0 [ 330.696088][ C0] ? clear_bhb_loop+0x60/0xb0 [ 330.700803][ C0] ? clear_bhb_loop+0x60/0xb0 [ 330.705497][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.711402][ C0] RIP: 0033:0x7fe5c751d822 [ 330.715826][ C0] Code: 00 00 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 76 5b 5d c3 0f 1f 00 48 8b 05 a1 35 0d 00 64 [ 330.735444][ C0] RSP: 002b:00007ffec72c77a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 330.743885][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe5c751d822 [ 330.751882][ C0] RDX: 0000000000000003 RSI: 0000000000000200 RDI: 0000000000000000 [ 330.759870][ C0] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 330.767857][ C0] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 330.775834][ C0] R13: 0000000000020000 R14: 00005592551d10b0 R15: 0000000000010000 [ 330.783834][ C0] [ 330.786858][ C0] ================================================================================ [ 330.796148][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 330.803359][ C0] CPU: 0 PID: 5194 Comm: udevd Not tainted syzkaller #0 [ 330.810296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.820365][ C0] Call Trace: [ 330.823692][ C0] [ 330.826540][ C0] dump_stack_lvl+0x188/0x24e [ 330.831231][ C0] ? memcpy+0x3c/0x60 [ 330.835224][ C0] ? show_regs_print_info+0x12/0x12 [ 330.840456][ C0] ? load_image+0x410/0x410 [ 330.844976][ C0] panic+0x2d3/0x710 [ 330.848893][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 330.853413][ C0] check_panic_on_warn+0x80/0xa0 [ 330.858397][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 330.864150][ C0] aiptek_irq+0x1e87/0x28f0 [ 330.868668][ C0] ? led_trigger_blink_setup+0x37/0x230 [ 330.874224][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 330.879607][ C0] dummy_timer+0xa39/0x34e0 [ 330.884146][ C0] ? dummy_free_streams+0x520/0x520 [ 330.889352][ C0] __hrtimer_run_queues+0x522/0xc90 [ 330.894563][ C0] ? dummy_free_streams+0x520/0x520 [ 330.899790][ C0] ? hrtimer_interrupt+0x980/0x980 [ 330.904930][ C0] hrtimer_run_softirq+0x173/0x290 [ 330.910048][ C0] handle_softirqs+0x291/0x910 [ 330.914819][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 330.919676][ C0] ? do_softirq+0x210/0x210 [ 330.924195][ C0] ? hrtimer_interrupt+0x775/0x980 [ 330.929314][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 330.934516][ C0] __irq_exit_rcu+0x13b/0x230 [ 330.939200][ C0] ? irq_exit_rcu+0x20/0x20 [ 330.943713][ C0] irq_exit_rcu+0x5/0x20 [ 330.947959][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 330.953613][ C0] [ 330.956544][ C0] [ 330.959476][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 330.965466][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 330.971977][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 df a9 1d f7 65 8b 05 e0 5a c7 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 330.991584][ C0] RSP: 0018:ffffc900037e7740 EFLAGS: 00000206 [ 330.997653][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: c80fa59cc6e51800 [ 331.005628][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: 0000000000000001 [ 331.013618][ C0] RBP: ffffc900037e77c8 R08: ffffffff90b13277 R09: 1ffffffff216264e [ 331.021590][ C0] R10: dffffc0000000000 R11: fffffbfff216264f R12: dffffc0000000000 [ 331.029564][ C0] R13: ffff888045500000 R14: ffffffff96e60c78 R15: 1ffff920006fcee8 [ 331.037552][ C0] ? _raw_spin_unlock+0x40/0x40 [ 331.042417][ C0] ? page_ext_put+0x98/0xb0 [ 331.046935][ C0] debug_check_no_obj_freed+0x471/0x520 [ 331.052494][ C0] free_unref_page_prepare+0x2c3/0x9e0 [ 331.057967][ C0] free_unref_page+0x2e/0x3f0 [ 331.062660][ C0] __unfreeze_partials+0x188/0x1e0 [ 331.067803][ C0] put_cpu_partial+0x17c/0x250 [ 331.072574][ C0] ? put_cpu_partial+0x6e/0x250 [ 331.077435][ C0] qlist_free_all+0x76/0xe0 [ 331.081947][ C0] kasan_quarantine_reduce+0x144/0x160 [ 331.087413][ C0] __kasan_slab_alloc+0x1e/0x80 [ 331.092275][ C0] slab_post_alloc_hook+0x4b/0x490 [ 331.097396][ C0] ? slab_pre_alloc_hook+0x8c/0x300 [ 331.102608][ C0] kmem_cache_alloc+0x18b/0x2f0 [ 331.107464][ C0] ? vm_area_alloc+0x20/0xe0 [ 331.112058][ C0] vm_area_alloc+0x20/0xe0 [ 331.116520][ C0] mmap_region+0xcbc/0x1c50 [ 331.121062][ C0] ? file_mmap_ok+0x170/0x170 [ 331.125762][ C0] ? vma_expand+0x850/0x850 [ 331.130277][ C0] ? cap_mmap_addr+0x153/0x2c0 [ 331.135079][ C0] do_mmap+0x9ce/0x10d0 [ 331.139248][ C0] ? mlock_future_check+0x100/0x100 [ 331.144469][ C0] ? ima_file_mmap+0xf7/0x140 [ 331.149161][ C0] ? ima_file_free+0x3e0/0x3e0 [ 331.153943][ C0] vm_mmap_pgoff+0x1c1/0x2d0 [ 331.158568][ C0] ? account_locked_vm+0xe0/0xe0 [ 331.163534][ C0] ? ksys_mmap_pgoff+0xef/0x720 [ 331.168393][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 331.173619][ C0] do_syscall_64+0x4c/0xa0 [ 331.178065][ C0] ? clear_bhb_loop+0x60/0xb0 [ 331.182756][ C0] ? clear_bhb_loop+0x60/0xb0 [ 331.187482][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.193390][ C0] RIP: 0033:0x7fe5c751d822 [ 331.197809][ C0] Code: 00 00 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 76 5b 5d c3 0f 1f 00 48 8b 05 a1 35 0d 00 64 [ 331.217421][ C0] RSP: 002b:00007ffec72c77a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 331.225841][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe5c751d822 [ 331.233831][ C0] RDX: 0000000000000003 RSI: 0000000000000200 RDI: 0000000000000000 [ 331.241805][ C0] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 331.249866][ C0] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 331.257844][ C0] R13: 0000000000020000 R14: 00005592551d10b0 R15: 0000000000010000 [ 331.265830][ C0] [ 331.268934][ C0] Kernel Offset: disabled [ 331.273268][ C0] Rebooting in 86400 seconds..