last executing test programs: 48.26805251s ago: executing program 1 (id=1758): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 47.618929348s ago: executing program 1 (id=1761): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) eventfd(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) listen(r4, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./control\x00', 0x81) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ea) rmdir(&(0x7f0000000100)='./control\x00') 46.521218196s ago: executing program 1 (id=1763): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) 44.749009902s ago: executing program 1 (id=1766): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 43.912035809s ago: executing program 1 (id=1768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) 42.764106359s ago: executing program 1 (id=1771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x400000, 0x110) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 42.399300875s ago: executing program 32 (id=1771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x400000, 0x110) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 17.046359218s ago: executing program 0 (id=1837): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) eventfd(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./control\x00', 0x81) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ea) rmdir(&(0x7f0000000100)='./control\x00') 15.528060564s ago: executing program 0 (id=1838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r6, 0x29, 0xce, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 14.91929125s ago: executing program 5 (id=1772): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x801c3, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5e9, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000050) munlockall() socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r4], 0x118) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}}], 0x1, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x2) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 13.960746352s ago: executing program 5 (id=1843): syz_emit_ethernet(0x67, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209476", 0x31, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}, {"f25c01e9f96729ff664d31538f5506173fa50b9825847ac062f7a04c55"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x50080, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000200)={0x6, "5e5ac135138be807ad2d70c6df6eff40fe3f6909707e498a44ec28172f751c0e", 0x4, 0x80, 0xab9, 0x80000000, 0x2, 0x4, 0x4, 0x23}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 13.043713932s ago: executing program 5 (id=1846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.475998407s ago: executing program 2 (id=1850): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000303000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8.175752004s ago: executing program 0 (id=1854): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x801c3, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5e9, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000050) munlockall() socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r4], 0x118) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}}], 0x1, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x2) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 7.965482843s ago: executing program 2 (id=1855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r2, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) 6.319770375s ago: executing program 5 (id=1857): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x801c3, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5e9, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) munlockall() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}}], 0x1, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x2) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 6.316430005s ago: executing program 0 (id=1858): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df187", 0x5b}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892f", 0x13}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}], 0x4}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.275279407s ago: executing program 3 (id=1859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)="90"}) 6.21209121s ago: executing program 2 (id=1860): r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mq_open(0x0, 0x40, 0x14f, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x7, 0x142ba3) setns(0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x1}}], 0x1, 0x44015) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[], 0x310) pipe2$watch_queue(&(0x7f0000000080), 0x80) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pim6reg1\x00'}) 6.058105256s ago: executing program 3 (id=1861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$inet6(0xa, 0x3, 0x3c) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES32], 0x58}, 0x1, 0x2, 0x0, 0x8441}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000001500)={[{@errors_remount}, {@delalloc}, {@bsdgroups}], [{@uid_eq={'uid', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, 'mm_collapse_huge_page_swapin\x00'}}, {@obj_role={'obj_role', 0x3d, '}\x00'}}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000feffff030100", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000004d7e100000000000850000000a000000008ed9f000040000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x7a, &(0x7f00000002c0)=""/122, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0xffffffff, 0xe, 0x3, 0xa}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x4, 0xa}, {0x2, 0x4, 0x1, 0x5}, {0x4, 0x3, 0x4, 0x9}], 0x10, 0x54}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='syzkaller\x00', 0x900000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 5.731977681s ago: executing program 3 (id=1863): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x300) 5.661146784s ago: executing program 4 (id=1864): syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x1000}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.575982857s ago: executing program 2 (id=1865): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1000000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r2, 0x0, 0x0) 5.543921048s ago: executing program 3 (id=1866): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x98}}, 0x0) 5.252517091s ago: executing program 3 (id=1867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x40000100) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xd08, &(0x7f0000000040)={0x77359400}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001480)={0x40000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000001000000080000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000004000000000000000000000000200000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 4.776522322s ago: executing program 0 (id=1868): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x801c3, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5e9, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000050) munlockall() socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r4], 0x118) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}}], 0x1, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x2) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 4.716106945s ago: executing program 2 (id=1869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.59385735s ago: executing program 4 (id=1870): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffffd9a08400, 0xfffc, 0x2, 0x40006b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40601, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) setresgid(0xee00, 0xee01, 0x0) 2.556843458s ago: executing program 5 (id=1871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = mq_open(0x0, 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r2, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) 2.540947019s ago: executing program 0 (id=1872): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000406e05fb0000000000000109022d0001000060000904000002030002000921020002012207000905810320"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x2, 0x1, 0x8, "1b56"}, @main=@item_012={0x2, 0x0, 0xa, "57e7"}, @main=@item_012={0x0, 0x0, 0x4}]}}, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00'}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="0f078fc9409aa2a1850000b946090000b800000000ba000000800f30b8060000000f23d80f21f835800000200f23f8660f09f20f353e0f22d867660f6bb200009a67000000c4009a010000002300", 0x4e}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008604"]) 2.499333251s ago: executing program 3 (id=1873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) 2.439176104s ago: executing program 4 (id=1874): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0) 2.276900651s ago: executing program 4 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5d, 0x0, 0x7f, 0x0, 0xe, 0x4, 0x39, 0x6, 0x6, 0x7, 0xf7, 0x9, 0x0, 0x6, 0x7, 0xfe, 0x2, 0x5, 0x8, '\x00', 0x3c, 0xfffffffffffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.879984238s ago: executing program 4 (id=1876): syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x1000}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.495696524s ago: executing program 5 (id=1877): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r2 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) 1.252041995s ago: executing program 2 (id=1878): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 0s ago: executing program 4 (id=1879): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b000000000000020000000018000000000000002900000039000000000000000000000038"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df187", 0x5b}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892f", 0x13}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}], 0x4}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): alid length. [ 359.372376][ T4375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.381747][ T4375] usb 4-1: not running at top speed; connect to a high speed hub [ 359.407001][ T4375] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.417745][ T4375] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.527663][ T4375] usb 4-1: string descriptor 0 read error: -22 [ 359.535499][ T4375] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.544618][ T4375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.559235][ T4375] usb 4-1: 0:2 : does not exist [ 359.836038][ T7344] loop2: detected capacity change from 0 to 1024 [ 359.843181][ T7344] EXT4-fs: Ignoring removed orlov option [ 361.215797][ T7344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 361.580933][ T4375] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 361.601204][ T4375] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 361.627823][ T4375] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 361.628663][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 361.891544][ T4375] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 361.905367][ T4375] usb 4-1: USB disconnect, device number 5 [ 362.671306][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.992532][ T7366] loop1: detected capacity change from 0 to 512 [ 363.002631][ T7366] ext4: Unknown parameter 'uid' [ 363.055236][ T7366] siw: device registration error -23 [ 364.682338][ T7389] netlink: 'syz.2.830': attribute type 9 has an invalid length. [ 364.694015][ T7389] netlink: 'syz.2.830': attribute type 7 has an invalid length. [ 364.702281][ T7389] netlink: 'syz.2.830': attribute type 8 has an invalid length. [ 366.831110][ T4313] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 367.041045][ T7415] loop0: detected capacity change from 0 to 512 [ 367.114524][ T4313] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.115212][ T7415] ext4: Unknown parameter 'uid' [ 367.899119][ T4313] usb 2-1: not running at top speed; connect to a high speed hub [ 367.908578][ T4313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.924053][ T4313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.957777][ T7415] siw: device registration error -23 [ 367.974753][ T4313] usb 2-1: string descriptor 0 read error: -22 [ 367.981021][ T4313] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.990211][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.015028][ T4313] usb 2-1: 0:2 : does not exist [ 369.412096][ T4313] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 369.431326][ T4313] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 369.454743][ T4313] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 369.491906][ T4313] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 369.534252][ T4313] usb 2-1: USB disconnect, device number 7 [ 369.993058][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.072322][ T7454] loop0: detected capacity change from 0 to 512 [ 371.098817][ T7454] ext4: Unknown parameter 'uid' [ 371.614774][ T7454] siw: device registration error -23 [ 375.914136][ T4375] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 376.460226][ T4375] usb 5-1: unable to get BOS descriptor or descriptor too short [ 376.469266][ T4375] usb 5-1: not running at top speed; connect to a high speed hub [ 376.481846][ T4375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.493595][ T4375] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.512538][ T4375] usb 5-1: string descriptor 0 read error: -22 [ 376.519378][ T4375] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.552603][ T4375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.718604][ T4375] usb 5-1: 0:2 : does not exist [ 377.422028][ T7506] loop3: detected capacity change from 0 to 512 [ 377.457694][ T7506] ext4: Unknown parameter 'uid' [ 377.484927][ T7506] siw: device registration error -23 [ 377.561392][ T7509] netlink: 'syz.0.865': attribute type 9 has an invalid length. [ 377.569491][ T7509] netlink: 'syz.0.865': attribute type 7 has an invalid length. [ 377.577776][ T7509] netlink: 'syz.0.865': attribute type 8 has an invalid length. [ 377.693551][ T4375] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 377.714331][ T4375] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 377.733389][ T4375] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 377.846907][ T4375] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 377.896721][ T4375] usb 5-1: USB disconnect, device number 12 [ 378.199805][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.218179][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.244849][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.455866][ T7550] loop0: detected capacity change from 0 to 512 [ 382.462978][ T7550] ext4: Unknown parameter 'uid' [ 382.645387][ T7550] siw: device registration error -23 [ 384.631511][ T26] kauditd_printk_skb: 129 callbacks suppressed [ 384.631526][ T26] audit: type=1326 audit(1763800092.060:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 384.664301][ T4389] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 384.678233][ T26] audit: type=1326 audit(1763800092.100:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 384.712174][ T26] audit: type=1326 audit(1763800092.110:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 385.193585][ T4389] usb 1-1: unable to get BOS descriptor or descriptor too short [ 385.241996][ T4389] usb 1-1: not running at top speed; connect to a high speed hub [ 385.272252][ T26] audit: type=1326 audit(1763800092.110:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 385.294569][ T4389] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.294590][ T4389] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.297685][ T4389] usb 1-1: string descriptor 0 read error: -22 [ 385.384184][ T4389] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.398299][ T26] audit: type=1326 audit(1763800092.110:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 385.408394][ T4389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.690216][ T26] audit: type=1326 audit(1763800092.110:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 385.712726][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.885688][ T26] audit: type=1326 audit(1763800092.140:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 385.940616][ T26] audit: type=1326 audit(1763800092.140:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 385.979131][ T4389] usb 1-1: 0:2 : does not exist [ 385.994032][ T26] audit: type=1326 audit(1763800092.140:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 386.080902][ T7586] loop1: detected capacity change from 0 to 512 [ 386.098195][ T26] audit: type=1326 audit(1763800092.140:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 386.206849][ T7586] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.885: error while reading EA inode 32 err=-116 [ 386.279203][ T7586] EXT4-fs (loop1): Remounting filesystem read-only [ 386.321318][ T7586] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.885: error while reading EA inode 32 err=-116 [ 386.359181][ T7586] EXT4-fs (loop1): Remounting filesystem read-only [ 386.367681][ T7586] EXT4-fs (loop1): 1 orphan inode deleted [ 386.373695][ T7586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 386.393549][ T7586] EXT4-fs (loop1): unmounting filesystem. [ 386.819500][ T4389] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 387.023207][ T4389] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 387.195316][ T4389] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 387.307001][ T7606] loop2: detected capacity change from 0 to 512 [ 387.315158][ T7606] ext4: Unknown parameter 'uid' [ 387.420769][ T4256] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 387.464354][ T7606] siw: device registration error -23 [ 387.470275][ T4389] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 387.992655][ T4389] usb 1-1: USB disconnect, device number 8 [ 390.479443][ T4380] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 391.025489][ T52] block nbd3: Attempted send on invalid socket [ 391.031953][ T52] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 391.042663][ T7656] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 391.199884][ T4380] usb 5-1: unable to get BOS descriptor or descriptor too short [ 391.306288][ T4380] usb 5-1: not running at top speed; connect to a high speed hub [ 391.476208][ T4380] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.534038][ T26] kauditd_printk_skb: 283 callbacks suppressed [ 391.534051][ T26] audit: type=1326 audit(1763800098.960:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 391.562436][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.614921][ T4380] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.651798][ T4380] usb 5-1: string descriptor 0 read error: -22 [ 391.661016][ T4380] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.672809][ T4380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.706607][ T26] audit: type=1326 audit(1763800098.960:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 391.728857][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.795459][ T4380] usb 5-1: 0:2 : does not exist [ 392.137462][ T26] audit: type=1326 audit(1763800098.960:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 392.160196][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.504054][ T26] audit: type=1326 audit(1763800098.960:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 392.526240][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.560546][ T26] audit: type=1326 audit(1763800099.070:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 392.587348][ T26] audit: type=1326 audit(1763800099.070:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 392.609578][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.650018][ T4380] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 392.657743][ T26] audit: type=1326 audit(1763800099.100:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 392.687098][ T4380] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 392.711522][ T4380] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 392.832182][ T7660] loop2: detected capacity change from 0 to 512 [ 392.899587][ T4380] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 392.998556][ T4380] usb 5-1: USB disconnect, device number 13 [ 393.191124][ T7660] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.909: error while reading EA inode 32 err=-116 [ 393.235570][ T7660] EXT4-fs (loop2): Remounting filesystem read-only [ 393.243021][ T7660] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.909: error while reading EA inode 32 err=-116 [ 393.256834][ T26] audit: type=1326 audit(1763800099.100:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 393.282043][ T26] audit: type=1326 audit(1763800099.100:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 393.305036][ T7660] EXT4-fs (loop2): Remounting filesystem read-only [ 393.393294][ T26] audit: type=1326 audit(1763800099.110:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b84f91667 code=0x7ffc0000 [ 393.393430][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.742258][ T7660] EXT4-fs (loop2): 1 orphan inode deleted [ 393.754031][ T7660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 393.799733][ T7660] EXT4-fs (loop2): unmounting filesystem. [ 394.268320][ T4281] Bluetooth: hci2: Malformed Event: 0x02 [ 395.504036][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 395.820237][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.856693][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.877875][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.924984][ T14] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 395.944749][ T4320] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 395.968280][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.021165][ T14] usb 4-1: config 0 descriptor?? [ 396.165576][ T4320] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 396.188858][ T4320] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 396.212812][ T4320] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 396.258266][ T4320] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 396.291299][ T4320] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 396.335667][ T4320] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 396.356268][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 396.369665][ T4320] usb 3-1: Product: syz [ 396.373885][ T4320] usb 3-1: Manufacturer: syz [ 396.399277][ T4320] cdc_wdm 3-1:1.0: skipping garbage [ 396.411366][ T4320] cdc_wdm 3-1:1.0: skipping garbage [ 396.433227][ T14] elecom 0003:056E:00FB.0002: report_id 22043 is invalid [ 396.455944][ T4320] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 396.461997][ T14] elecom 0003:056E:00FB.0002: item 0 2 1 8 parsing failed [ 396.475696][ T4320] cdc_wdm 3-1:1.0: Unknown control protocol [ 396.482140][ T14] elecom: probe of 0003:056E:00FB.0002 failed with error -22 [ 396.544008][ T4614] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 396.861548][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.881840][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.604026][ T4614] usb 5-1: unable to get BOS descriptor or descriptor too short [ 397.614165][ T4614] usb 5-1: not running at top speed; connect to a high speed hub [ 397.627245][ T4614] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.695299][ T4614] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.836044][ T4614] usb 5-1: string descriptor 0 read error: -22 [ 397.867324][ T4614] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.913020][ T4614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.989833][ T4614] usb 5-1: 0:2 : does not exist [ 398.265492][ T26] kauditd_printk_skb: 119 callbacks suppressed [ 398.265505][ T26] audit: type=1326 audit(1763800361.695:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 398.332520][ T26] audit: type=1326 audit(1763800361.725:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 398.382924][ T26] audit: type=1326 audit(1763800361.725:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 398.415715][ T26] audit: type=1326 audit(1763800361.725:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 398.471040][ T26] audit: type=1326 audit(1763800361.725:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 398.524709][ T26] audit: type=1326 audit(1763800361.725:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 398.584358][ T26] audit: type=1326 audit(1763800361.755:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 398.609064][ T26] audit: type=1326 audit(1763800361.755:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd42cbc2005 code=0x7ffc0000 [ 398.775977][ T22] usb 4-1: USB disconnect, device number 6 [ 398.783847][ T4614] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 398.803267][ T4614] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 398.814184][ T4614] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 398.830427][ T26] audit: type=1326 audit(1763800361.795:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 398.861538][ T4614] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 398.861604][ T7755] loop1: detected capacity change from 0 to 512 [ 398.896229][ T26] audit: type=1326 audit(1763800361.795:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 398.919529][ T4614] usb 5-1: USB disconnect, device number 14 [ 398.937259][ T5244] usb 3-1: USB disconnect, device number 11 [ 398.989334][ T7755] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.932: error while reading EA inode 32 err=-116 [ 399.040690][ T7755] EXT4-fs (loop1): Remounting filesystem read-only [ 399.074900][ T7755] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.932: error while reading EA inode 32 err=-116 [ 399.165127][ T7755] EXT4-fs (loop1): Remounting filesystem read-only [ 399.194789][ T6353] udevd[6353]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.219830][ T7755] EXT4-fs (loop1): 1 orphan inode deleted [ 399.229272][ T7755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 399.249331][ T7755] EXT4-fs (loop1): unmounting filesystem. [ 399.513684][ T4281] Bluetooth: hci0: Malformed Event: 0x02 [ 402.664939][ T7813] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 402.683694][ T7816] process 'syz.2.943' launched './file1' with NULL argv: empty string added [ 403.825531][ T4281] Bluetooth: hci1: Malformed Event: 0x02 [ 404.734427][ T7832] tmpfs: Bad value for 'mpol' [ 406.827083][ T7856] fuse: Bad value for 'user_id' [ 407.003781][ T4281] Bluetooth: hci0: Malformed Event: 0x02 [ 410.305081][ T4281] Bluetooth: hci1: Malformed Event: 0x02 [ 411.400661][ T7916] fuse: Bad value for 'fd' [ 414.779642][ T7945] block device autoloading is deprecated and will be removed. [ 414.828427][ T7943] random: crng reseeded on system resumption [ 414.865919][ T4281] Bluetooth: hci3: Malformed Event: 0x02 [ 417.849296][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.4.990'. [ 417.912857][ T7976] fuse: Bad value for 'fd' [ 420.239465][ T8006] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 421.022183][ T4388] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 421.265922][ T4388] usb 3-1: unable to get BOS descriptor or descriptor too short [ 421.281971][ T4388] usb 3-1: not running at top speed; connect to a high speed hub [ 421.291740][ T4388] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.360246][ T4388] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.434202][ T4388] usb 3-1: string descriptor 0 read error: -22 [ 421.441164][ T4388] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.441637][ T4281] Bluetooth: hci1: Malformed Event: 0x02 [ 421.624187][ T4388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.790340][ T4388] usb 3-1: 0:2 : does not exist [ 422.544651][ T8031] fuse: Bad value for 'fd' [ 423.742998][ T5765] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 423.821030][ T4388] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 423.848684][ T4388] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 423.895597][ T4388] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 424.061678][ T4388] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 424.084037][ T5765] usb 2-1: Using ep0 maxpacket: 8 [ 424.091363][ T5765] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 424.094567][ T4388] usb 3-1: USB disconnect, device number 12 [ 424.139320][ T5765] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 424.181186][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.190013][ T5765] usb 2-1: Product: syz [ 424.194463][ T5765] usb 2-1: Manufacturer: syz [ 424.199083][ T5765] usb 2-1: SerialNumber: syz [ 424.227969][ T5765] usb 2-1: config 0 descriptor?? [ 424.251727][ T5765] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 424.265735][ T5765] usb 2-1: setting power ON [ 424.276307][ T5765] dvb-usb: bulk message failed: -22 (2/0) [ 424.291686][ T5765] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.535722][ T8035] dvb-usb: bulk message failed: -22 (3/0) [ 424.567406][ T5765] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 424.568006][ T8035] dvb-usb: bulk message failed: -22 (3/0) [ 424.773158][ T5765] usb 2-1: media controller created [ 424.892875][ T5765] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.912830][ T5765] usb 2-1: selecting invalid altsetting 6 [ 424.919907][ T5765] usb 2-1: digital interface selection failed (-22) [ 424.933985][ T5765] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 424.958203][ T5765] usb 2-1: setting power OFF [ 424.976703][ T5765] dvb-usb: bulk message failed: -22 (2/0) [ 424.984226][ T5765] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 424.993644][ T5765] (NULL device *): no alternate interface [ 425.037325][ T5765] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 425.086575][ T5765] usb 2-1: USB disconnect, device number 8 [ 426.690227][ T26] kauditd_printk_skb: 149 callbacks suppressed [ 426.690254][ T26] audit: type=1804 audit(1763801926.122:2660): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1020" name="/newroot/232/file1" dev="fuse" ino=1 res=1 errno=0 [ 426.925959][ T4281] Bluetooth: hci3: Malformed Event: 0x02 [ 427.179007][ T26] audit: type=1800 audit(1763802182.614:2661): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1020" name="/" dev="fuse" ino=1 res=0 errno=0 [ 427.384320][ T4571] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 427.636323][ T4571] usb 3-1: config 1 interface 0 has no altsetting 0 [ 427.666895][ T4571] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 427.745285][ T4571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.832013][ T4571] usb 3-1: Product: syz [ 427.837093][ T4571] usb 3-1: Manufacturer: syz [ 427.841794][ T4571] usb 3-1: SerialNumber: syz [ 428.284954][ T8090] fuse: Bad value for 'fd' [ 428.719975][ T4571] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 431.894758][ T4380] usb 3-1: USB disconnect, device number 13 [ 431.969496][ T4380] usblp0: removed [ 433.877947][ T4281] Bluetooth: hci0: Malformed Event: 0x02 [ 434.449534][ T8145] fuse: Bad value for 'fd' [ 436.368216][ T8168] 9pnet_virtio: no channels available for device syz [ 436.494087][ T5244] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 437.369781][ T5244] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.406394][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 437.536259][ T5244] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 437.555349][ T5244] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 437.567484][ T5244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.603031][ T5244] usb 2-1: config 0 descriptor?? [ 437.616675][ T5244] gspca_main: spca561-2.14.0 probing abcd:cdee [ 438.223560][ T5244] spca561: probe of 2-1:0.0 failed with error -22 [ 438.258014][ T5244] usb 2-1: MIDIStreaming interface descriptor not found [ 438.347520][ T5244] usb 2-1: USB disconnect, device number 9 [ 439.645996][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.652660][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.257286][ T8196] loop3: detected capacity change from 0 to 512 [ 440.304743][ T8196] ext4: Unknown parameter 'uid' [ 440.368893][ T4256] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 440.370151][ T8196] siw: device registration error -23 [ 440.677660][ T8204] can0: slcan on ttyS3. [ 440.884144][ T8204] can0 (unregistered): slcan off ttyS3. [ 443.636845][ T8238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1062'. [ 443.661484][ T8239] can0: slcan on ttyS3. [ 443.976046][ T8246] loop0: detected capacity change from 0 to 1024 [ 443.983129][ T8246] EXT4-fs: Ignoring removed orlov option [ 445.465044][ T26] audit: type=1326 audit(1763802456.901:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 445.506347][ T8246] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 445.609092][ T26] audit: type=1326 audit(1763802456.901:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 445.674784][ T8224] can0 (unregistered): slcan off ttyS3. [ 445.682566][ T26] audit: type=1326 audit(1763802457.021:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 445.946112][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 445.967638][ T26] audit: type=1326 audit(1763802457.021:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 446.035230][ T26] audit: type=1326 audit(1763802457.021:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 446.520384][ T4281] Bluetooth: hci0: Malformed Event: 0x02 [ 446.969709][ T26] audit: type=1326 audit(1763802457.021:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 447.508164][ T26] audit: type=1326 audit(1763802457.311:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 447.531044][ T26] audit: type=1326 audit(1763802457.311:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 447.696728][ T26] audit: type=1326 audit(1763802457.351:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 447.978891][ T26] audit: type=1326 audit(1763802457.351:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd42cbc2005 code=0x7ffc0000 [ 448.299027][ T8262] loop1: detected capacity change from 0 to 512 [ 450.004859][ T8262] EXT4-fs: error -4 creating inode table initialization thread [ 450.131657][ T8262] EXT4-fs (loop1): mount failed [ 453.467431][ T8319] loop1: detected capacity change from 0 to 1024 [ 453.474633][ T8319] EXT4-fs: Ignoring removed orlov option [ 454.818761][ T4281] Bluetooth: hci1: Malformed Event: 0x02 [ 454.993231][ T8319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 455.785247][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 456.127746][ T26] kauditd_printk_skb: 113 callbacks suppressed [ 456.127759][ T26] audit: type=1804 audit(1763802979.559:2785): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1080" name="/newroot/203/file1" dev="fuse" ino=1 res=1 errno=0 [ 456.235933][ T26] audit: type=1326 audit(1763802979.669:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 456.269658][ T26] audit: type=1326 audit(1763802979.689:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 456.313471][ T26] audit: type=1326 audit(1763802979.689:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 456.338083][ T26] audit: type=1326 audit(1763802979.689:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 456.373031][ T26] audit: type=1326 audit(1763802979.689:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 456.403459][ T26] audit: type=1326 audit(1763802979.689:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 456.427800][ T26] audit: type=1326 audit(1763802979.729:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 456.450784][ T26] audit: type=1326 audit(1763802979.739:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 456.478082][ T26] audit: type=1326 audit(1763802979.739:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 456.575059][ T5765] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 456.633818][ T8344] loop3: detected capacity change from 0 to 512 [ 457.385944][ T8344] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1084: error while reading EA inode 32 err=-116 [ 457.428708][ T5765] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.279064][ T8344] EXT4-fs (loop3): Remounting filesystem read-only [ 458.297351][ T8344] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1084: error while reading EA inode 32 err=-116 [ 458.304025][ T5765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.329527][ T8344] EXT4-fs (loop3): Remounting filesystem read-only [ 458.376004][ T8344] EXT4-fs (loop3): 1 orphan inode deleted [ 458.385162][ T8344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 458.418502][ T5765] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.426050][ T8358] loop4: detected capacity change from 0 to 512 [ 458.442056][ T8358] ext4: Unknown parameter 'uid' [ 458.442223][ T8344] EXT4-fs (loop3): unmounting filesystem. [ 458.471774][ T5765] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 458.563124][ T4281] Bluetooth: hci1: Malformed Event: 0x02 [ 458.573096][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.758916][ T5765] usb 1-1: config 0 descriptor?? [ 459.280268][ T5765] elecom 0003:056E:00FB.0003: report_id 22043 is invalid [ 459.356257][ T5765] elecom 0003:056E:00FB.0003: item 0 2 1 8 parsing failed [ 459.455996][ T5765] elecom: probe of 0003:056E:00FB.0003 failed with error -22 [ 461.638774][ T4340] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 461.854154][ T6661] usb 1-1: USB disconnect, device number 9 [ 461.887473][ T4340] usb 4-1: unable to get BOS descriptor or descriptor too short [ 461.898833][ T4340] usb 4-1: not running at top speed; connect to a high speed hub [ 462.022809][ T4340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.068750][ T4340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.092892][ T4340] usb 4-1: string descriptor 0 read error: -22 [ 462.103050][ T4340] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.124194][ T4340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.148576][ T4340] usb 4-1: 0:2 : does not exist [ 462.295744][ T5765] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 462.520098][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.573310][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.653302][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 463.412414][ T5765] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 463.646014][ T4340] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 463.673653][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.685190][ T4340] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 463.712722][ T4340] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 463.750975][ T5765] usb 3-1: config 0 descriptor?? [ 463.787038][ T4340] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 463.794707][ T26] kauditd_printk_skb: 248 callbacks suppressed [ 463.794718][ T26] audit: type=1804 audit(1763803243.215:3043): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1100" name="/newroot/210/file1" dev="fuse" ino=1 res=1 errno=0 [ 463.864772][ T4340] usb 4-1: USB disconnect, device number 7 [ 464.781670][ T5765] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 464.790081][ T26] audit: type=1800 audit(1763803244.225:3044): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1100" name="/" dev="fuse" ino=1 res=0 errno=0 [ 464.907143][ T5765] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 464.999724][ T5765] usb 3-1: USB disconnect, device number 14 [ 465.265992][ T8425] fido_id[8425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 467.010248][ T8458] netlink: 'syz.1.1110': attribute type 9 has an invalid length. [ 467.024013][ T8458] netlink: 'syz.1.1110': attribute type 7 has an invalid length. [ 467.031858][ T8458] netlink: 'syz.1.1110': attribute type 8 has an invalid length. [ 468.973981][ T5765] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 469.189239][ T5765] usb 1-1: unable to get BOS descriptor or descriptor too short [ 469.208748][ T5765] usb 1-1: not running at top speed; connect to a high speed hub [ 469.241966][ T5765] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.267089][ T5765] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.296726][ T5765] usb 1-1: string descriptor 0 read error: -22 [ 469.323480][ T5765] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.333527][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.385181][ T5765] usb 1-1: 0:2 : does not exist [ 469.433993][ T5244] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 469.488748][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 469.625710][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.652165][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.681938][ T5244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.720191][ T5244] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.781490][ T5765] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 469.789885][ T5244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.821138][ T5765] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 469.860859][ T5765] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 469.881531][ T5244] usb 4-1: config 0 descriptor?? [ 469.926591][ T5765] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 469.968649][ T5765] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 469.991768][ T5765] usb 1-1: USB disconnect, device number 10 [ 470.339862][ T8498] loop1: detected capacity change from 0 to 1024 [ 470.346950][ T8498] EXT4-fs: Ignoring removed orlov option [ 470.440490][ T5244] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 471.010017][ T5244] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 471.078027][ T8498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 471.268629][ T5244] usb 4-1: USB disconnect, device number 8 [ 471.788320][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 472.121893][ T8508] fido_id[8508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 474.864964][ T8537] netlink: 'syz.0.1131': attribute type 9 has an invalid length. [ 474.873044][ T8537] netlink: 'syz.0.1131': attribute type 7 has an invalid length. [ 474.893229][ T8537] netlink: 'syz.0.1131': attribute type 8 has an invalid length. [ 475.563976][ T14] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 475.796789][ T8549] loop4: detected capacity change from 0 to 1024 [ 475.803856][ T8549] EXT4-fs: Ignoring removed orlov option [ 476.432450][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.455056][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.519212][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.525405][ T8549] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 476.654215][ T14] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 476.691656][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.880444][ T14] usb 3-1: config 0 descriptor?? [ 476.890408][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 477.696743][ T14] elecom 0003:056E:00FB.0006: report_id 22043 is invalid [ 477.710129][ T14] elecom 0003:056E:00FB.0006: item 0 2 1 8 parsing failed [ 477.746253][ T14] elecom: probe of 0003:056E:00FB.0006 failed with error -22 [ 477.867787][ T8567] loop3: detected capacity change from 0 to 512 [ 478.017589][ T8567] ext4: Unknown parameter 'uid' [ 478.794905][ T8571] binder: 8568:8571 ioctl 0 200000000040 returned -22 [ 480.054588][ T8567] siw: device registration error -23 [ 480.131250][ T14] usb 3-1: USB disconnect, device number 15 [ 481.069236][ T8591] capability: warning: `syz.2.1146' uses 32-bit capabilities (legacy support in use) [ 483.170588][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 483.384109][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 483.391312][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 483.442771][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.468285][ T7] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 483.491864][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.613219][ T7] usb 5-1: config 0 descriptor?? [ 484.554069][ T4380] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 485.136305][ T7] pantherlord 0003:0E8F:0003.0007: item fetching failed at offset 0/2 [ 485.154344][ T7] pantherlord 0003:0E8F:0003.0007: parse failed [ 485.160649][ T7] pantherlord: probe of 0003:0E8F:0003.0007 failed with error -22 [ 485.330599][ T4380] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.354837][ T7] usb 5-1: USB disconnect, device number 15 [ 485.362598][ T4380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.388468][ T4380] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.408865][ T4380] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 485.421320][ T4380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.438517][ T8623] loop3: detected capacity change from 0 to 512 [ 485.453463][ T4380] usb 3-1: config 0 descriptor?? [ 485.463166][ T8623] ext4: Unknown parameter 'uid' [ 485.475721][ T8623] siw: device registration error -23 [ 486.659591][ T4380] elecom 0003:056E:00FB.0008: report_id 22043 is invalid [ 486.717149][ T4380] elecom 0003:056E:00FB.0008: item 0 2 1 8 parsing failed [ 486.788742][ T4380] elecom: probe of 0003:056E:00FB.0008 failed with error -22 [ 486.858078][ T8644] kvm: apic: phys broadcast and lowest prio [ 487.045572][ T7] usb 3-1: USB disconnect, device number 16 [ 490.667168][ T8667] netlink: 'syz.0.1164': attribute type 9 has an invalid length. [ 490.675393][ T8667] netlink: 'syz.0.1164': attribute type 7 has an invalid length. [ 490.683322][ T8667] netlink: 'syz.0.1164': attribute type 8 has an invalid length. [ 490.953570][ T8673] loop2: detected capacity change from 0 to 512 [ 490.961562][ T8673] ext4: Unknown parameter 'uid' [ 491.599188][ T4256] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 491.619312][ T8673] siw: device registration error -23 [ 494.176865][ T4281] Bluetooth: hci2: Malformed Event: 0x02 [ 496.887385][ T8726] loop3: detected capacity change from 0 to 512 [ 496.925410][ T8726] ext4: Unknown parameter 'uid' [ 496.932300][ T8726] siw: device registration error -23 [ 499.296253][ T4281] Bluetooth: hci0: Malformed Event: 0x02 [ 500.931278][ T8766] loop3: detected capacity change from 0 to 1024 [ 500.938422][ T8766] EXT4-fs: Ignoring removed orlov option [ 502.250260][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.261227][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.406166][ T8766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 502.849965][ T8784] netlink: 'syz.4.1195': attribute type 9 has an invalid length. [ 502.857846][ T8784] netlink: 'syz.4.1195': attribute type 7 has an invalid length. [ 502.865673][ T8784] netlink: 'syz.4.1195': attribute type 8 has an invalid length. [ 503.175949][ T8779] loop0: detected capacity change from 0 to 512 [ 503.186209][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 503.190417][ T8779] ext4: Unknown parameter 'uid' [ 503.260403][ T8779] siw: device registration error -23 [ 505.047711][ T4281] Bluetooth: hci0: Malformed Event: 0x02 [ 509.134343][ T8840] netlink: 'syz.3.1212': attribute type 9 has an invalid length. [ 509.206881][ T8840] netlink: 'syz.3.1212': attribute type 7 has an invalid length. [ 509.224118][ T8840] netlink: 'syz.3.1212': attribute type 8 has an invalid length. [ 510.267240][ T22] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 510.438423][ T4281] Bluetooth: hci4: Malformed Event: 0x02 [ 510.525012][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.290334][ T22] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 511.299762][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.381054][ T22] usb 3-1: config 0 descriptor?? [ 511.408314][ T22] pwc: Askey VC010 type 2 USB webcam detected. [ 511.831871][ T22] pwc: recv_control_msg error -32 req 02 val 2b00 [ 511.988297][ T22] pwc: recv_control_msg error -32 req 02 val 2700 [ 512.004949][ T22] pwc: recv_control_msg error -32 req 02 val 2c00 [ 512.018710][ T22] pwc: recv_control_msg error -32 req 04 val 1000 [ 512.044686][ T22] pwc: recv_control_msg error -32 req 04 val 1300 [ 512.054163][ T22] pwc: recv_control_msg error -32 req 04 val 1400 [ 512.069218][ T22] pwc: recv_control_msg error -32 req 02 val 2000 [ 512.281530][ T22] pwc: recv_control_msg error -71 req 04 val 1500 [ 512.292027][ T22] pwc: recv_control_msg error -71 req 02 val 2500 [ 512.355470][ T22] pwc: recv_control_msg error -71 req 02 val 2400 [ 512.398207][ T22] pwc: recv_control_msg error -71 req 02 val 2600 [ 512.407712][ T22] pwc: recv_control_msg error -71 req 02 val 2900 [ 512.417414][ T22] pwc: recv_control_msg error -71 req 02 val 2800 [ 512.430553][ T22] pwc: recv_control_msg error -71 req 04 val 1100 [ 512.444155][ T22] pwc: recv_control_msg error -71 req 04 val 1200 [ 512.541505][ T22] pwc: Registered as video103. [ 512.568419][ T22] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 512.633984][ T22] usb 3-1: USB disconnect, device number 17 [ 514.182952][ T8881] No such timeout policy "syz1" [ 515.809188][ T8904] netlink: 'syz.3.1227': attribute type 9 has an invalid length. [ 515.819225][ T8904] netlink: 'syz.3.1227': attribute type 7 has an invalid length. [ 515.827117][ T8904] netlink: 'syz.3.1227': attribute type 8 has an invalid length. [ 516.088858][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 516.098078][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 516.758707][ T8909] loop4: detected capacity change from 0 to 512 [ 516.774807][ T8909] ext4: Unknown parameter 'uid' [ 516.823926][ T4256] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 518.992669][ T8926] 9pnet_virtio: no channels available for device syz [ 520.544611][ T8954] binder: 8944:8954 ioctl c0306201 0 returned -14 [ 523.305247][ T8970] netlink: 'syz.4.1241': attribute type 9 has an invalid length. [ 523.313076][ T8970] netlink: 'syz.4.1241': attribute type 7 has an invalid length. [ 523.320823][ T8970] netlink: 'syz.4.1241': attribute type 8 has an invalid length. [ 523.462888][ T8986] loop1: detected capacity change from 0 to 512 [ 523.642457][ T8986] ext4: Unknown parameter 'uid' [ 523.710178][ T8990] sd 0:0:1:0: device reset [ 524.414594][ T8986] siw: device registration error -23 [ 528.669461][ T9034] loop4: detected capacity change from 0 to 512 [ 528.866351][ T9034] ext4: Unknown parameter 'uid' [ 529.232518][ T9043] loop0: detected capacity change from 0 to 1024 [ 529.239688][ T9043] EXT4-fs: Ignoring removed orlov option [ 530.452526][ T4380] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 530.489315][ T4256] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 530.632840][ T9043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 530.702972][ T4380] usb 2-1: Using ep0 maxpacket: 16 [ 530.722162][ T4380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 530.783798][ T4380] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 530.804334][ T4380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.812876][ T4380] usb 2-1: Product: syz [ 530.820354][ T4380] usb 2-1: Manufacturer: syz [ 530.851784][ T4380] usb 2-1: SerialNumber: syz [ 530.959548][ T4380] usb 2-1: config 0 descriptor?? [ 530.982338][ T4380] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 530.992536][ T4380] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 531.098498][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 531.838240][ T4380] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 532.928000][ T4380] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 532.953666][ T4380] em28xx 2-1:0.0: board has no eeprom [ 533.043938][ T4380] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 533.057393][ T4380] em28xx 2-1:0.0: dvb set to bulk mode. [ 533.092841][ T4388] em28xx 2-1:0.0: Binding DVB extension [ 533.121154][ T4380] usb 2-1: USB disconnect, device number 10 [ 533.149642][ T4380] em28xx 2-1:0.0: Disconnecting em28xx [ 533.370272][ T9094] loop3: detected capacity change from 0 to 512 [ 533.419646][ T4388] em28xx 2-1:0.0: Registering input extension [ 533.430961][ T9094] ext4: Unknown parameter 'uid' [ 533.452121][ T4380] em28xx 2-1:0.0: Closing input extension [ 533.460954][ T9094] siw: device registration error -23 [ 533.517270][ T4380] em28xx 2-1:0.0: Freeing device [ 533.696212][ T9101] can0: slcan on ttyS3. [ 533.894181][ T9101] can0 (unregistered): slcan off ttyS3. [ 536.187376][ T9137] loop2: detected capacity change from 0 to 512 [ 536.214759][ T9137] ext4: Unknown parameter 'uid' [ 536.265219][ T4256] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 536.267680][ T9137] siw: device registration error -23 [ 538.787909][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 538.823968][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 539.178058][ T9180] random: crng reseeded on system resumption [ 539.939866][ T9188] loop4: detected capacity change from 0 to 512 [ 539.970224][ T9188] ext4: Unknown parameter 'uid' [ 539.976457][ T9191] fuse: Bad value for 'fd' [ 543.233948][ C1] hrtimer: interrupt took 42224 ns [ 544.942499][ T9232] netlink: 'syz.1.1315': attribute type 9 has an invalid length. [ 544.992562][ T9232] netlink: 'syz.1.1315': attribute type 7 has an invalid length. [ 545.002651][ T9232] netlink: 'syz.1.1315': attribute type 8 has an invalid length. [ 545.203316][ T9243] loop0: detected capacity change from 0 to 512 [ 545.240024][ T9243] ext4: Unknown parameter 'uid' [ 545.256980][ T9243] siw: device registration error -23 [ 546.373144][ T9257] can0: slcan on ttyS3. [ 547.524257][ T9257] can0 (unregistered): slcan off ttyS3. [ 547.708841][ T4388] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 548.564079][ T4388] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.575085][ T4388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.588453][ T4388] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.082670][ T4388] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 549.094020][ T4388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.113901][ T4388] usb 5-1: config 0 descriptor?? [ 549.578779][ T4388] elecom 0003:056E:00FB.0009: report_id 22043 is invalid [ 549.695242][ T4388] elecom 0003:056E:00FB.0009: item 0 2 1 8 parsing failed [ 549.703095][ T4388] elecom: probe of 0003:056E:00FB.0009 failed with error -22 [ 550.710932][ T9304] loop2: detected capacity change from 0 to 512 [ 550.738297][ T9304] ext4: Unknown parameter 'uid' [ 550.904828][ T9304] siw: device registration error -23 [ 552.025752][ T9046] usb 5-1: USB disconnect, device number 16 [ 556.711760][ T9375] loop1: detected capacity change from 0 to 512 [ 556.735156][ T9375] ext4: Unknown parameter 'uid' [ 556.763703][ T9375] siw: device registration error -23 [ 562.527174][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.533606][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.612389][ T9438] loop4: detected capacity change from 0 to 512 [ 562.625977][ T9438] ext4: Unknown parameter 'uid' [ 566.532441][ T4281] Bluetooth: hci2: Malformed Event: 0x02 [ 569.127379][ T9489] loop0: detected capacity change from 0 to 512 [ 569.205235][ T9489] ext4: Unknown parameter 'uid' [ 569.243276][ T9489] siw: device registration error -23 [ 571.056597][ T9496] fuse: Bad value for 'fd' [ 572.368904][ T9508] kvm [9502]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 572.377396][ T9508] kvm [9502]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 572.722591][ T4281] Bluetooth: hci3: Malformed Event: 0x02 [ 573.634488][ T9523] kvm [9518]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 573.642892][ T9523] kvm [9518]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 574.860834][ T9538] loop0: detected capacity change from 0 to 512 [ 574.972258][ T9538] ext4: Unknown parameter 'uid' [ 575.084539][ T9538] siw: device registration error -23 [ 575.604344][ T4320] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 577.578361][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.605609][ T9550] random: crng reseeded on system resumption [ 577.634175][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.657656][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.674430][ T4320] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 577.684644][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.709292][ T4320] usb 2-1: config 0 descriptor?? [ 578.467141][ T4320] elecom 0003:056E:00FB.000A: report_id 22043 is invalid [ 578.478128][ T4320] elecom 0003:056E:00FB.000A: item 0 2 1 8 parsing failed [ 578.504209][ T4320] elecom: probe of 0003:056E:00FB.000A failed with error -22 [ 578.558918][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 580.065278][ T4281] Bluetooth: hci0: Malformed Event: 0x02 [ 580.728915][ T22] usb 2-1: USB disconnect, device number 11 [ 580.885317][ T9580] fuse: Bad value for 'fd' [ 585.379082][ T4281] Bluetooth: hci1: Malformed Event: 0x02 [ 585.662013][ T9627] can0: slcan on ttyS3. [ 586.655975][ T9627] can0 (unregistered): slcan off ttyS3. [ 587.946127][ T9657] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 588.048711][ T9660] fuse: Unknown parameter '0x0000000000000004' [ 588.358281][ T14] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 588.976583][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 589.014447][ T14] usb 5-1: not running at top speed; connect to a high speed hub [ 589.271847][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.303521][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.741795][ T14] usb 5-1: string descriptor 0 read error: -22 [ 589.844361][ T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 589.869550][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.902231][ T14] usb 5-1: 0:2 : does not exist [ 590.573375][ T14] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 590.650528][ T14] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 590.824669][ T14] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 590.957998][ T9702] can0: slcan on ttyS3. [ 591.099196][ T14] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 591.337189][ T14] usb 5-1: USB disconnect, device number 17 [ 591.655659][ T9702] can0 (unregistered): slcan off ttyS3. [ 591.766237][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.966865][ T9714] kvm [9705]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 591.975334][ T9714] kvm [9705]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 593.055172][ T9726] fuse: Unknown parameter '0x0000000000000004' [ 593.166967][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 594.265205][ T9741] random: crng reseeded on system resumption [ 597.505013][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 597.584795][ T22] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 597.838685][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 597.854894][ T22] usb 1-1: not running at top speed; connect to a high speed hub [ 597.867930][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.883457][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.905807][ T22] usb 1-1: string descriptor 0 read error: -22 [ 597.912533][ T22] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.925580][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.025857][ T22] usb 1-1: 0:2 : does not exist [ 598.976202][ T22] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 598.995414][ T22] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 599.015558][ T22] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 599.045292][ T22] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 599.057818][ T22] usb 1-1: USB disconnect, device number 11 [ 600.243901][ T9454] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 600.725622][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.824548][ T9805] fuse: Unknown parameter '0x0000000000000004' [ 600.932086][ T9810] sd 0:0:1:0: device reset [ 601.588066][ T9454] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.608299][ T9454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.633364][ T9814] random: crng reseeded on system resumption [ 601.641743][ T9454] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.664186][ T9454] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 601.784751][ T9454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.797679][ T9454] usb 2-1: config 0 descriptor?? [ 602.219759][ T9454] elecom 0003:056E:00FB.000B: report_id 22043 is invalid [ 602.263455][ T9454] elecom 0003:056E:00FB.000B: item 0 2 1 8 parsing failed [ 602.415610][ T9454] elecom: probe of 0003:056E:00FB.000B failed with error -22 [ 603.041079][ T9454] usb 2-1: USB disconnect, device number 12 [ 604.411365][ T9832] overlayfs: overlapping lowerdir path [ 605.323388][ T9850] sd 0:0:1:0: device reset [ 607.147922][ T9869] fuse: Bad value for 'fd' [ 607.256322][ T9864] fuse: Unknown parameter '0x0000000000000004' [ 607.830301][ T9882] fuse: Bad value for 'fd' [ 607.875675][ T9880] random: crng reseeded on system resumption [ 608.911433][ T9902] sd 0:0:1:0: device reset [ 609.784784][ T9914] fuse: Unknown parameter '0x0000000000000004' [ 610.187738][ T9917] fuse: Bad value for 'fd' [ 610.296164][ T9921] fuse: Bad value for 'fd' [ 611.171521][ T9932] random: crng reseeded on system resumption [ 613.771056][ T9965] fuse: Bad value for 'fd' [ 614.161524][ T9969] fuse: Unknown parameter '0x0000000000000004' [ 617.729598][ T9998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1512'. [ 618.394668][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 618.583870][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 618.613944][ T14] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 618.694320][ T22] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 618.702539][ T22] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 618.724290][ T22] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 618.746037][ T22] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 618.779519][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 618.812625][ T22] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 618.839844][ T22] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 618.873257][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.884030][ T22] usb 4-1: Product: syz [ 618.896671][ T22] usb 4-1: Manufacturer: syz [ 618.905556][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.911862][ T22] usb 4-1: SerialNumber: syz [ 618.926389][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.934641][ T22] usb 4-1: config 0 descriptor?? [ 618.965623][ T14] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 618.971591][ T22] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 618.987178][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.995156][ T22] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 619.173120][ T14] usb 3-1: config 0 descriptor?? [ 620.056005][ T22] usb 4-1: USB disconnect, device number 9 [ 620.061954][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 620.394727][ T22] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 620.956266][ T14] elecom 0003:056E:00FB.000C: report_id 22043 is invalid [ 620.963359][ T14] elecom 0003:056E:00FB.000C: item 0 2 1 8 parsing failed [ 620.984268][ T14] elecom: probe of 0003:056E:00FB.000C failed with error -22 [ 622.329435][T10059] fuse: Unknown parameter 'fd0x0000000000000004' [ 623.020863][T10069] md2: error: bitmap file must be a regular file [ 623.223487][ T4380] usb 3-1: USB disconnect, device number 18 [ 623.966561][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.973301][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.610070][T10101] can0: slcan on ttyS3. [ 628.754080][T10101] can0 (unregistered): slcan off ttyS3. [ 629.296866][T10125] fuse: Unknown parameter 'fd0x0000000000000004' [ 629.424203][ T9454] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 630.990996][ T9454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.014728][ T9454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.030524][ T9454] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 631.043563][ T9454] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 631.101175][ T9454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.446526][T10140] sd 0:0:1:0: device reset [ 631.764409][ T9454] usb 4-1: config 0 descriptor?? [ 635.802131][ T9454] usb 4-1: can't set config #0, error -71 [ 635.831892][ T9454] usb 4-1: USB disconnect, device number 10 [ 637.543847][ T26] audit: type=1326 audit(1763804696.974:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 637.664375][ T26] audit: type=1326 audit(1763804696.974:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 637.774232][ T26] audit: type=1326 audit(1763804696.974:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 637.867328][ T26] audit: type=1326 audit(1763804696.974:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 637.964168][ T4335] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 637.973880][ T26] audit: type=1326 audit(1763804697.014:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 638.065099][ T26] audit: type=1326 audit(1763804697.064:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 638.079725][T10162] loop3: detected capacity change from 0 to 512 [ 638.155856][ T4335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.181535][ T4335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.193894][ T26] audit: type=1326 audit(1763804697.064:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 638.200431][T10162] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1554: error while reading EA inode 32 err=-116 [ 638.293876][ T26] audit: type=1326 audit(1763804697.084:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 638.330310][T10162] EXT4-fs (loop3): Remounting filesystem read-only [ 638.347318][T10162] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1554: error while reading EA inode 32 err=-116 [ 638.411415][ T4335] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 638.424849][ T4335] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 638.434001][ T4335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.443996][ T26] audit: type=1326 audit(1763804697.084:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 638.467895][ T4335] usb 5-1: config 0 descriptor?? [ 639.149176][T10162] EXT4-fs (loop3): Remounting filesystem read-only [ 639.194395][T10162] EXT4-fs (loop3): 1 orphan inode deleted [ 639.227044][T10162] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 639.312350][T10162] EXT4-fs (loop3): unmounting filesystem. [ 639.473360][ T26] audit: type=1326 audit(1763804697.084:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 640.624379][ T4335] elecom 0003:056E:00FB.000D: report_id 22043 is invalid [ 640.656956][ T4335] elecom 0003:056E:00FB.000D: item 0 2 1 8 parsing failed [ 641.521973][ T4335] elecom: probe of 0003:056E:00FB.000D failed with error -22 [ 641.608486][ T5765] usb 5-1: USB disconnect, device number 18 [ 641.824911][T10201] sd 0:0:1:0: device reset [ 642.444176][T10206] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1562'. [ 642.693912][ T5244] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 642.709164][T10212] fuse: Unknown parameter 'fd0x0000000000000004' [ 642.923872][ T5244] usb 5-1: Using ep0 maxpacket: 32 [ 642.948363][ T5244] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 642.958285][ T5244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.133968][ T5244] usb 5-1: Product: syz [ 643.138252][ T5244] usb 5-1: Manufacturer: syz [ 643.142939][ T5244] usb 5-1: SerialNumber: syz [ 643.167915][ T5244] usb 5-1: config 0 descriptor?? [ 643.444598][ T5244] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 019 [ 643.684835][T10204] i2c i2c-1: adapter quirk: no zero length (addr 0x0001, size 0, read) [ 644.636159][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.654103][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.726277][T10234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 644.733244][T10234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 644.748753][T10234] vhci_hcd vhci_hcd.0: Device attached [ 645.274014][ T5765] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 645.403926][ T4380] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 645.628771][ T4380] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.722887][ T4380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.734227][ T4380] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.747881][ T4380] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 645.756918][T10235] vhci_hcd: connection reset by peer [ 645.759457][ T4452] vhci_hcd: stop threads [ 645.865161][ T4380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.865747][ T9704] usb 5-1: USB disconnect, device number 19 [ 645.894375][ T4452] vhci_hcd: release socket [ 645.958138][ T4380] usb 4-1: config 0 descriptor?? [ 646.052213][ T4452] vhci_hcd: disconnect device [ 646.395653][T10260] sd 0:0:1:0: device reset [ 646.972111][ T4380] elecom 0003:056E:00FB.000E: report_id 22043 is invalid [ 647.081583][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 647.081598][ T26] audit: type=1326 audit(1763804706.514:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 647.158361][ T26] audit: type=1326 audit(1763804706.514:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 647.164827][ T4380] elecom 0003:056E:00FB.000E: item 0 2 1 8 parsing failed [ 647.240170][ T26] audit: type=1326 audit(1763804706.534:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 647.340352][ T4380] elecom: probe of 0003:056E:00FB.000E failed with error -22 [ 647.343717][ T26] audit: type=1326 audit(1763804706.534:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 647.417604][ T4380] usb 4-1: USB disconnect, device number 11 [ 647.426963][ T26] audit: type=1326 audit(1763804706.534:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 647.512453][T10262] loop2: detected capacity change from 0 to 512 [ 647.573373][ T26] audit: type=1326 audit(1763804706.534:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 647.683984][ T26] audit: type=1326 audit(1763804706.564:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 647.729711][ T26] audit: type=1326 audit(1763804706.564:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 647.754071][ T26] audit: type=1326 audit(1763804706.584:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 647.784822][ T26] audit: type=1326 audit(1763804706.584:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b84f8f749 code=0x7ffc0000 [ 648.261607][T10262] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1576: error while reading EA inode 32 err=-116 [ 648.278821][T10262] EXT4-fs (loop2): Remounting filesystem read-only [ 648.285846][T10262] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1576: error while reading EA inode 32 err=-116 [ 648.300668][T10262] EXT4-fs (loop2): Remounting filesystem read-only [ 648.307891][T10262] EXT4-fs (loop2): 1 orphan inode deleted [ 648.313762][T10262] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 648.323940][T10262] EXT4-fs (loop2): unmounting filesystem. [ 649.268122][ T9454] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 649.464994][ T9454] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.490619][ T9454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.521112][ T9454] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.554011][ T9454] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 649.590332][ T9454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.651792][ T9454] usb 5-1: config 0 descriptor?? [ 650.149846][ T9454] elecom 0003:056E:00FB.000F: report_id 22043 is invalid [ 650.168193][ T9454] elecom 0003:056E:00FB.000F: item 0 2 1 8 parsing failed [ 650.186103][ T9454] elecom: probe of 0003:056E:00FB.000F failed with error -22 [ 650.284151][ T9704] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 650.443935][ T5765] vhci_hcd: vhci_device speed not set [ 650.512184][ T9704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.537495][ T9704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.553383][ T9704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.571229][ T9704] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.580624][ T9454] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 650.593401][ T9704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.637450][ T9704] usb 4-1: config 0 descriptor?? [ 650.658469][ T126] usb 5-1: USB disconnect, device number 20 [ 650.774044][ T9454] usb 3-1: Using ep0 maxpacket: 32 [ 650.783603][ T9454] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 650.789833][T10325] tmpfs: Unknown parameter '' [ 650.803547][ T9454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.823672][ T9454] usb 3-1: Product: syz [ 650.828012][ T9454] usb 3-1: Manufacturer: syz [ 650.850627][ T9454] usb 3-1: SerialNumber: syz [ 650.882920][ T9454] usb 3-1: config 0 descriptor?? [ 651.066366][ T9704] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 651.392804][ T9454] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 019 [ 651.424977][ T9704] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 651.511704][ T9704] usb 4-1: USB disconnect, device number 12 [ 651.577145][T10321] i2c i2c-1: adapter quirk: no zero length (addr 0x0001, size 0, read) [ 651.578116][T10336] loop1: detected capacity change from 0 to 512 [ 651.633541][T10336] ext4: Unknown parameter 'uid' [ 651.644974][T10336] siw: device registration error -23 [ 651.677031][T10338] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 651.683671][T10338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 651.705727][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.727075][T10338] vhci_hcd vhci_hcd.0: Device attached [ 651.743239][T10337] fido_id[10337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 651.766074][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.807466][T10339] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 651.823213][ T41] vhci_hcd: stop threads [ 651.830055][ T41] vhci_hcd: release socket [ 651.873289][ T41] vhci_hcd: disconnect device [ 651.878435][T10333] loop0: detected capacity change from 0 to 512 [ 651.944071][ T9704] vhci_hcd: vhci_device speed not set [ 652.017815][T10333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1598: error while reading EA inode 32 err=-116 [ 652.093937][ T26] kauditd_printk_skb: 263 callbacks suppressed [ 652.093949][ T26] audit: type=1326 audit(1763804711.524:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe599f865e7 code=0x7ffc0000 [ 652.143966][T10333] EXT4-fs (loop0): Remounting filesystem read-only [ 652.151281][T10333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1598: error while reading EA inode 32 err=-116 [ 652.200976][ T32] usb 3-1: USB disconnect, device number 19 [ 652.220212][T10333] EXT4-fs (loop0): Remounting filesystem read-only [ 652.248754][ T26] audit: type=1326 audit(1763804711.524:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe599f2b829 code=0x7ffc0000 [ 652.282185][T10333] EXT4-fs (loop0): 1 orphan inode deleted [ 652.298904][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1600'. [ 652.335575][T10333] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 652.381411][T10333] EXT4-fs (loop0): unmounting filesystem. [ 652.439030][ T26] audit: type=1326 audit(1763804711.524:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe599f8f749 code=0x7ffc0000 [ 652.654023][ T26] audit: type=1326 audit(1763804711.534:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe599f865e7 code=0x7ffc0000 [ 652.680167][ T4281] Bluetooth: hci3: Malformed Event: 0x02 [ 653.085298][ T26] audit: type=1326 audit(1763804711.534:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe599f2b829 code=0x7ffc0000 [ 653.153859][ T26] audit: type=1326 audit(1763804711.534:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe599f8f749 code=0x7ffc0000 [ 653.316279][ T26] audit: type=1326 audit(1763804711.554:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe599f865e7 code=0x7ffc0000 [ 653.345890][ T26] audit: type=1326 audit(1763804711.554:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe599f2b829 code=0x7ffc0000 [ 653.371995][ T26] audit: type=1326 audit(1763804711.554:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe599f8f749 code=0x7ffc0000 [ 653.411156][ T26] audit: type=1326 audit(1763804711.564:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe599f865e7 code=0x7ffc0000 [ 655.653867][ T4380] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 658.470220][ T5244] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 658.595494][ T4380] usb 2-1: device descriptor read/all, error -71 [ 659.826365][ T4281] Bluetooth: hci0: Malformed Event: 0x02 [ 660.573851][ T9704] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 661.174020][ T9704] usb 1-1: Using ep0 maxpacket: 32 [ 661.181339][ T9704] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 661.233969][ T9704] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 661.280997][ T9704] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 661.295753][ T9704] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 661.313024][ T9704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 661.337431][ T9704] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 661.365558][ T9704] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 661.460949][ T9704] usb 1-1: Product: syz [ 661.481767][ T9704] usb 1-1: Manufacturer: syz [ 661.490664][ T9704] usb 1-1: SerialNumber: syz [ 662.011339][ T9704] usb 1-1: config 0 descriptor?? [ 662.041023][ T9704] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 662.072862][ T9704] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 662.241957][ T9704] usb 1-1: USB disconnect, device number 13 [ 662.248064][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 662.288498][ T9704] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 662.585070][ T4380] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 662.778773][ T4380] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.802359][ T4380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.845533][ T4380] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.863317][ T4380] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 662.872622][ T4380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.897196][ T4380] usb 5-1: config 0 descriptor?? [ 663.250446][T10476] can0: slcan on ttyS3. [ 663.269030][ T4281] Bluetooth: hci4: Malformed Event: 0x02 [ 663.859978][ T4380] elecom 0003:056E:00FB.0011: report_id 22043 is invalid [ 664.267481][ T4380] elecom 0003:056E:00FB.0011: item 0 2 1 8 parsing failed [ 664.276198][ T4380] elecom: probe of 0003:056E:00FB.0011 failed with error -22 [ 664.497627][ T4335] usb 5-1: USB disconnect, device number 21 [ 664.636852][T10476] can0 (unregistered): slcan off ttyS3. [ 668.265101][T10530] kvm [10523]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 668.345551][T10530] kvm [10523]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 668.694112][T10526] can0: slcan on ttyS3. [ 668.934298][T10537] loop3: detected capacity change from 0 to 512 [ 668.949186][T10529] can0 (unregistered): slcan off ttyS3. [ 668.955063][ T4281] Bluetooth: hci1: Malformed Event: 0x02 [ 668.960162][T10537] ext4: Unknown parameter 'uid' [ 669.045637][T10537] siw: device registration error -23 [ 672.724645][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 672.724660][ T26] audit: type=1326 audit(1763805756.160:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 672.843981][ T26] audit: type=1326 audit(1763805756.160:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 672.893437][T10585] can0: slcan on ttyS3. [ 672.932828][ T26] audit: type=1326 audit(1763805756.180:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 672.984791][T10588] loop4: detected capacity change from 0 to 512 [ 672.993441][ T26] audit: type=1326 audit(1763805756.180:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 673.045547][T10588] ext4: Unknown parameter 'uid' [ 673.074777][T10585] can0 (unregistered): slcan off ttyS3. [ 673.089521][ T26] audit: type=1326 audit(1763805756.180:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 673.181539][ T26] audit: type=1326 audit(1763805756.180:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 673.359217][ T26] audit: type=1326 audit(1763805756.220:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 673.390171][ T26] audit: type=1326 audit(1763805756.230:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 673.392213][T10584] loop3: detected capacity change from 0 to 512 [ 673.432916][ T26] audit: type=1326 audit(1763805756.230:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 673.495961][T10584] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1658: error while reading EA inode 32 err=-116 [ 673.518452][ T26] audit: type=1326 audit(1763805756.230:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6038f749 code=0x7ffc0000 [ 673.542149][T10584] EXT4-fs (loop3): Remounting filesystem read-only [ 673.550931][T10584] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1658: error while reading EA inode 32 err=-116 [ 673.588234][T10584] EXT4-fs (loop3): Remounting filesystem read-only [ 673.635551][T10584] EXT4-fs (loop3): 1 orphan inode deleted [ 673.699053][T10584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 673.726173][ T4281] Bluetooth: hci4: Malformed Event: 0x02 [ 673.745623][T10584] EXT4-fs (loop3): unmounting filesystem. [ 674.465495][T10617] sd 0:0:1:0: device reset [ 675.090248][ T4281] Bluetooth: hci2: hardware error 0x0f [ 675.388059][T10634] sd 0:0:1:0: device reset [ 675.869740][T10640] loop2: detected capacity change from 0 to 512 [ 675.887262][T10640] ext4: Unknown parameter 'uid' [ 675.898165][T10640] siw: device registration error -23 [ 675.996911][T10642] fuse: Bad value for 'group_id' [ 676.545963][T10648] can0: slcan on ttyS3. [ 676.634685][T10654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 676.644093][T10649] can0 (unregistered): slcan off ttyS3. [ 676.653416][T10654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.672636][T10654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.686370][T10654] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 677.164103][ T4281] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 677.545832][ T4281] Bluetooth: hci1: Malformed Event: 0x02 [ 678.060782][T10677] sd 0:0:1:0: device reset [ 678.437301][ T26] kauditd_printk_skb: 156 callbacks suppressed [ 678.437314][ T26] audit: type=1326 audit(1763806273.870:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 678.610736][ T26] audit: type=1326 audit(1763806274.030:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 678.643565][ T26] audit: type=1326 audit(1763806274.070:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 678.683395][ T26] audit: type=1326 audit(1763806274.100:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 678.706421][ T26] audit: type=1326 audit(1763806274.110:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 678.740440][ T26] audit: type=1326 audit(1763806274.110:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 678.995794][ T26] audit: type=1326 audit(1763806274.110:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 679.045995][ T9454] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 679.065373][T10689] sd 0:0:1:0: device reset [ 679.303115][ T9454] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.365914][ T9454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.497831][ T9454] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.766169][ T26] audit: type=1326 audit(1763806274.110:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 679.914710][T10667] loop1: detected capacity change from 0 to 512 [ 679.970200][ T26] audit: type=1326 audit(1763806274.110:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd42cb91667 code=0x7ffc0000 [ 680.049954][T10695] loop4: detected capacity change from 0 to 512 [ 680.117801][T10695] ext4: Unknown parameter 'uid' [ 680.150123][ T9454] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 680.159580][ T9454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.169670][ T9454] usb 3-1: config 0 descriptor?? [ 680.173681][ T26] audit: type=1326 audit(1763806274.110:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd42cb915dc code=0x7ffc0000 [ 680.205816][T10402] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 680.325554][T10667] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1677: error while reading EA inode 32 err=-116 [ 680.448115][T10667] EXT4-fs (loop1): Remounting filesystem read-only [ 680.464101][T10667] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1677: error while reading EA inode 32 err=-116 [ 680.521584][T10667] EXT4-fs (loop1): Remounting filesystem read-only [ 680.532617][T10667] EXT4-fs (loop1): 1 orphan inode deleted [ 680.538471][T10667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 680.554647][T10667] EXT4-fs (loop1): unmounting filesystem. [ 680.591966][ T9454] elecom 0003:056E:00FB.0012: report_id 22043 is invalid [ 680.624172][ T9454] elecom 0003:056E:00FB.0012: item 0 2 1 8 parsing failed [ 680.650550][ T9454] elecom: probe of 0003:056E:00FB.0012 failed with error -22 [ 680.925840][T10705] syz.4.1687 uses obsolete (PF_INET,SOCK_PACKET) [ 680.966676][T10705] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 682.737213][T10722] can0: slcan on ttyS3. [ 682.866031][T10724] can0 (unregistered): slcan off ttyS3. [ 682.989692][ T4335] usb 3-1: USB disconnect, device number 20 [ 684.000626][T10735] sd 0:0:1:0: device reset [ 684.900223][T10744] sd 0:0:1:0: device reset [ 685.405461][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.411809][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.798878][T10750] loop0: detected capacity change from 0 to 512 [ 686.051662][T10750] ext4: Unknown parameter 'uid' [ 686.057185][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 686.057215][ T26] audit: type=1326 audit(1763806537.450:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 686.290955][T10750] siw: device registration error -23 [ 686.308456][ T26] audit: type=1326 audit(1763806537.470:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 686.425621][ T26] audit: type=1326 audit(1763806537.540:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 686.522758][ T26] audit: type=1326 audit(1763806537.840:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 686.708244][ T26] audit: type=1326 audit(1763806537.840:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 686.933922][ T26] audit: type=1326 audit(1763806537.850:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd42cbc2005 code=0x7ffc0000 [ 687.062883][ T26] audit: type=1326 audit(1763806537.900:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 687.649297][ T26] audit: type=1326 audit(1763806537.900:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 687.684334][T10755] loop1: detected capacity change from 0 to 512 [ 687.707387][ T26] audit: type=1326 audit(1763806537.900:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 687.774553][T10755] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1698: error while reading EA inode 32 err=-116 [ 687.787849][ T26] audit: type=1326 audit(1763806537.900:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fd42cb8f749 code=0x7ffc0000 [ 687.810822][T10755] EXT4-fs (loop1): Remounting filesystem read-only [ 687.818311][T10755] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1698: error while reading EA inode 32 err=-116 [ 687.842060][T10755] EXT4-fs (loop1): Remounting filesystem read-only [ 687.861256][T10755] EXT4-fs (loop1): 1 orphan inode deleted [ 687.867204][T10755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 687.893861][T10755] EXT4-fs (loop1): unmounting filesystem. [ 688.203207][ T5244] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 688.411260][ T5244] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.444310][ T5244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.458470][ T5244] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.507104][ T5244] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 688.831989][ T5244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.872013][ T5244] usb 5-1: config 0 descriptor?? [ 689.312701][T10798] sd 0:0:1:0: device reset [ 689.750522][ T5244] elecom 0003:056E:00FB.0013: report_id 22043 is invalid [ 689.873328][ T5244] elecom 0003:056E:00FB.0013: item 0 2 1 8 parsing failed [ 690.664525][ T5244] elecom: probe of 0003:056E:00FB.0013 failed with error -22 [ 690.725694][ T4281] Bluetooth: hci4: Malformed Event: 0x02 [ 692.734562][ T4375] usb 5-1: USB disconnect, device number 22 [ 693.620613][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'. [ 693.709981][T10828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1712'. [ 696.671310][T10861] loop1: detected capacity change from 0 to 1024 [ 696.679380][T10861] EXT4-fs: Ignoring removed orlov option [ 698.409868][T10861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 698.736059][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 706.267079][T10937] random: crng reseeded on system resumption [ 711.558435][T10972] fuse: Bad value for 'fd' [ 715.374174][ T32] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 715.410812][T11011] can0: slcan on ttyS3. [ 715.603881][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 715.616856][ T32] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 715.672802][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.715888][ T32] usb 3-1: Product: syz [ 715.738417][ T32] usb 3-1: Manufacturer: syz [ 715.743925][ T32] usb 3-1: SerialNumber: syz [ 715.790994][ T32] usb 3-1: config 0 descriptor?? [ 716.112525][ T32] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 716.163581][T11011] can0 (unregistered): slcan off ttyS3. [ 716.283836][ T32] RobotFuzz Open Source InterFace, OSIF: probe of 3-1:0.0 failed with error -71 [ 716.389353][ T32] usb 3-1: USB disconnect, device number 21 [ 717.052666][T11031] random: crng reseeded on system resumption [ 720.216644][T11054] ======================================================= [ 720.216644][T11054] WARNING: The mand mount option has been deprecated and [ 720.216644][T11054] and is ignored by this kernel. Remove the mand [ 720.216644][T11054] option from the mount to silence this warning. [ 720.216644][T11054] ======================================================= [ 721.162026][T11061] can0: slcan on ttyS3. [ 721.219688][T11061] can0 (unregistered): slcan off ttyS3. [ 721.295684][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 721.295697][ T26] audit: type=1326 audit(1763807084.733:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307b18f749 code=0x7ffc0000 [ 721.385017][ T26] audit: type=1326 audit(1763807084.763:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307b18f749 code=0x7ffc0000 [ 721.455634][ T26] audit: type=1326 audit(1763807084.763:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f307b18f749 code=0x7ffc0000 [ 721.546352][ T26] audit: type=1326 audit(1763807084.763:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307b18f749 code=0x7ffc0000 [ 721.676514][ T26] audit: type=1326 audit(1763807084.763:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307b18f749 code=0x7ffc0000 [ 721.776082][ T26] audit: type=1326 audit(1763807084.783:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f307b18f749 code=0x7ffc0000 [ 721.862045][T11066] loop4: detected capacity change from 0 to 512 [ 721.974015][ T26] audit: type=1326 audit(1763807084.873:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307b18f749 code=0x7ffc0000 [ 722.013408][T11066] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1765: error while reading EA inode 32 err=-116 [ 722.113570][ T4452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.137477][ T26] audit: type=1326 audit(1763807084.873:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307b18f749 code=0x7ffc0000 [ 722.208564][T11066] EXT4-fs (loop4): Remounting filesystem read-only [ 722.218800][T11066] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1765: error while reading EA inode 32 err=-116 [ 722.264238][T11066] EXT4-fs (loop4): Remounting filesystem read-only [ 722.264256][ T26] audit: type=1326 audit(1763807084.883:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f307b1c2005 code=0x7ffc0000 [ 722.276179][T11066] EXT4-fs (loop4): 1 orphan inode deleted [ 722.308938][T11066] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 722.344228][ T26] audit: type=1326 audit(1763807084.913:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f307b18f749 code=0x7ffc0000 [ 722.355369][T11066] EXT4-fs (loop4): unmounting filesystem. [ 722.371348][ T9454] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 722.414266][ T4452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.640708][ T4452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.653041][ T9454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.691287][ T9454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.751342][ T9454] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.769835][ T9454] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 722.781621][ T9454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.817902][ T9454] usb 4-1: config 0 descriptor?? [ 723.112170][ T4452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.846036][T10628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 724.855930][T10628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 724.864042][T10628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 724.871972][T10628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 724.884534][T10628] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 724.892711][T10628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 725.227639][T11111] lo speed is unknown, defaulting to 1000 [ 725.369853][T11123] can0: slcan on ttyS3. [ 725.389725][ T9454] usbhid 4-1:0.0: can't add hid device: -71 [ 725.397255][ T9454] usbhid: probe of 4-1:0.0 failed with error -71 [ 725.438462][ T9454] usb 4-1: USB disconnect, device number 13 [ 725.543948][T11123] can0 (unregistered): slcan off ttyS3. [ 725.939808][T11111] chnl_net:caif_netlink_parms(): no params data found [ 726.013804][ T2120] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 726.207568][ T2120] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 726.237161][ T2120] usb 4-1: config index 0 descriptor too short (expected 65505, got 71) [ 726.272800][ T2120] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 726.310773][ T2120] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 726.353077][ T2120] usb 4-1: config index 1 descriptor too short (expected 65505, got 71) [ 726.923874][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 727.169470][T11151] random: crng reseeded on system resumption [ 727.195239][ T2120] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 727.238869][ T2120] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 727.425193][ T2120] usb 4-1: config index 2 descriptor too short (expected 65505, got 71) [ 728.074939][ T2120] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 728.085604][ T2120] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 728.127274][ T2120] usb 4-1: config index 3 descriptor too short (expected 65505, got 71) [ 728.166114][ T2120] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 728.207915][ T2120] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 728.223407][ T2120] usb 4-1: config index 4 descriptor too short (expected 65505, got 71) [ 728.241004][ T2120] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 728.272786][ T2120] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 728.320281][ T2120] usb 4-1: config index 5 descriptor too short (expected 65505, got 71) [ 728.341628][ T2120] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 728.368051][ T2120] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 728.401768][ T2120] usb 4-1: config index 6 descriptor too short (expected 65505, got 71) [ 728.432025][ T2120] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 728.448950][ T2120] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 728.480165][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.505757][ T2120] usb 4-1: config index 7 descriptor too short (expected 65505, got 71) [ 728.505766][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.506877][T11111] device bridge_slave_0 entered promiscuous mode [ 728.540429][ T2120] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 728.579012][ T2120] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 728.625058][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.632600][ T2120] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 728.641909][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.660152][ T2120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.660307][T11111] device bridge_slave_1 entered promiscuous mode [ 728.676106][ T2120] usb 4-1: Product: syz [ 728.681421][ T2120] usb 4-1: Manufacturer: syz [ 728.726263][ T2120] usb 4-1: SerialNumber: syz [ 728.880609][ T2120] usb 4-1: can't set config #1, error -71 [ 728.909259][ T2120] usb 4-1: USB disconnect, device number 14 [ 728.963523][T11111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.003937][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 729.239987][T11111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.370911][ T4452] device hsr_slave_0 left promiscuous mode [ 729.409848][ T4452] device hsr_slave_1 left promiscuous mode [ 729.480957][ T4452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.565179][ T4452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.642819][ T4452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.650662][ T4452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.662031][ T4452] device bridge_slave_1 left promiscuous mode [ 729.669578][ T4452] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.910527][ T4452] device bridge_slave_0 left promiscuous mode [ 729.924996][ T4452] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.551373][ T4452] device veth1_macvtap left promiscuous mode [ 730.585121][ T4452] device veth0_macvtap left promiscuous mode [ 730.623988][ T4452] device veth1_vlan left promiscuous mode [ 730.659482][ T4452] device veth0_vlan left promiscuous mode [ 730.825257][ T9704] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 731.027259][ T9704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.044945][ T9704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.064105][ T9704] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 731.083894][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 731.091489][ T9704] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 731.110850][ T9704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.152582][ T9704] usb 5-1: config 0 descriptor?? [ 732.389618][ T4452] team0 (unregistering): Port device team_slave_1 removed [ 732.595361][ T4452] team0 (unregistering): Port device team_slave_0 removed [ 733.048052][ T4452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.193627][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 733.248839][ T4452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.274875][ T9704] usbhid 5-1:0.0: can't add hid device: -71 [ 733.282395][ T9704] usbhid: probe of 5-1:0.0 failed with error -71 [ 733.322576][ T9704] usb 5-1: USB disconnect, device number 23 [ 733.541973][T11214] random: crng reseeded on system resumption [ 733.641140][T11190] slcan: can't register candev [ 733.653649][T11190] Falling back ldisc for ttyS3. [ 734.268539][ T4452] bond0 (unregistering): Released all slaves [ 734.516587][T11111] team0: Port device team_slave_0 added [ 734.571961][T11111] team0: Port device team_slave_1 added [ 734.742221][T11111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.791571][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.818252][T11111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.048228][T11111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.094810][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.192121][T11111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.339010][T11111] device hsr_slave_0 entered promiscuous mode [ 736.377557][T11242] Driver unsupported XDP return value 0 on prog (id 184) dev N/A, expect packet loss! [ 736.389169][T11111] device hsr_slave_1 entered promiscuous mode [ 736.413963][T11111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.426432][T11111] Cannot create hsr debugfs directory [ 737.472637][T11111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 737.539676][T11111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 737.717632][T11111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 737.852958][T11111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 738.482504][T11111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.594272][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 738.621283][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 738.684835][T11111] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.720851][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 738.741302][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 738.768611][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.775932][ T4569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.784435][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 738.877823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 738.913291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 738.974058][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.981168][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.004830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 739.021412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 739.054901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 739.142276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 739.229747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 739.238566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 739.247172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 739.303424][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 739.345443][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 739.892673][T11111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 739.940009][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 739.975556][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 741.234999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 741.273254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 741.331108][T11111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.192862][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 744.234748][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 744.458445][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 744.518243][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 744.573403][T11111] device veth0_vlan entered promiscuous mode [ 744.601783][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 744.649884][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 744.671488][T11111] device veth1_vlan entered promiscuous mode [ 744.773785][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 744.945939][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 745.181676][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 745.217814][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 745.251103][T11111] device veth0_macvtap entered promiscuous mode [ 745.310430][T11111] device veth1_macvtap entered promiscuous mode [ 745.433257][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.468426][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.509374][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.545809][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.585182][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.625785][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.680112][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.733896][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.773454][T11111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.803874][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 745.830010][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 745.894818][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.950915][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.187920][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.268133][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.318960][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.405133][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.415231][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.425793][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.443171][T11111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.458438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 746.596870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 746.847692][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.854119][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.285146][T11111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.363266][T11111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.398078][T11111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.431295][T11111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.644025][T11389] can0: slcan on ttyS3. [ 748.164196][T11389] can0 (unregistered): slcan off ttyS3. [ 748.422246][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.450640][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.234228][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.242250][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.279012][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 749.325064][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 753.069026][T11446] loop4: detected capacity change from 0 to 1024 [ 753.076244][T11446] EXT4-fs: Ignoring removed orlov option [ 753.947185][T11446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 754.779561][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 758.777327][T11502] loop3: detected capacity change from 0 to 512 [ 758.819871][T11502] ext4: Unknown parameter 'uid' [ 758.845564][T11502] siw: device registration error -23 [ 759.287443][T11513] overlayfs: overlapping lowerdir path [ 762.505729][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 762.577600][T11563] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 762.719871][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.753945][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.793782][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 762.836100][ T7] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 762.871676][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.896285][ T7] usb 1-1: config 0 descriptor?? [ 763.332120][ T7] elecom 0003:056E:00FB.0014: report_id 22043 is invalid [ 763.356209][ T7] elecom 0003:056E:00FB.0014: item 0 2 1 8 parsing failed [ 763.377565][ T7] elecom: probe of 0003:056E:00FB.0014 failed with error -22 [ 764.777906][T11590] ------------[ cut here ]------------ [ 764.783903][T11590] WARNING: CPU: 1 PID: 11590 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 764.794248][T11590] Modules linked in: [ 764.798186][T11590] CPU: 1 PID: 11590 Comm: syz.2.1878 Not tainted syzkaller #0 [ 764.805692][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 764.815798][T11590] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 764.821929][T11590] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1c c9 7c f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 87 99 2c f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 764.841753][T11590] RSP: 0018:ffffc9000542ed88 EFLAGS: 00010287 [ 764.847887][T11590] RAX: ffffffff88543cd9 RBX: ffffc9000542ee98 RCX: 0000000000080000 [ 764.855958][T11590] RDX: ffffc9000cd49000 RSI: 0000000000001e59 RDI: 0000000000001e5a [ 764.863979][T11590] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215c478 [ 764.871977][T11590] R10: fffffbfff215c478 R11: 1ffffffff215c477 R12: 000000b20edce411 [ 764.880003][T11590] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 764.888023][T11590] FS: 00007f1b85e4a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 764.897002][T11590] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 764.903606][T11590] CR2: 000000110c312341 CR3: 00000000728c3000 CR4: 00000000003526e0 [ 764.911635][T11590] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 764.919716][T11590] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 764.927730][T11590] Call Trace: [ 764.931035][T11590] [ 764.934019][T11590] taprio_change+0x3daa/0x50f0 [ 764.938837][T11590] ? taprio_destroy+0x4b0/0x4b0 [ 764.943761][T11590] ? qdisc_create+0x7cb/0x1090 [ 764.948558][T11590] ? ____sys_sendmsg+0x59b/0x970 [ 764.953529][T11590] ? ___sys_sendmsg+0x21c/0x290 [ 764.958438][T11590] ? __se_sys_sendmsg+0x19e/0x270 [ 764.963491][T11590] ? do_syscall_64+0x4c/0xa0 [ 764.968141][T11590] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.974257][T11590] ? qdisc_alloc+0x95/0xa50 [ 764.978790][T11590] ? fifo_init+0x3ab/0x650 [ 764.983231][T11590] ? qdisc_peek_head+0x40/0x40 [ 764.988052][T11590] ? qdisc_alloc+0x77a/0xa50 [ 764.992678][T11590] ? mutex_is_locked+0xe/0x40 [ 764.997421][T11590] ? taprio_peek+0x590/0x590 [ 765.002044][T11590] qdisc_create+0x7cb/0x1090 [ 765.006714][T11590] ? qdisc_notify+0x370/0x370 [ 765.011443][T11590] tc_modify_qdisc+0xb2f/0x1cc0 [ 765.016391][T11590] ? qdisc_offload_query_caps+0x140/0x140 [ 765.022178][T11590] ? qdisc_offload_query_caps+0x140/0x140 [ 765.027963][T11590] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 765.033104][T11590] rtnetlink_rcv_msg+0x79b/0xed0 [ 765.038109][T11590] ? rtnetlink_bind+0x80/0x80 [ 765.042819][T11590] ? __local_bh_enable_ip+0x12a/0x1b0 [ 765.048252][T11590] ? lockdep_hardirqs_on+0x94/0x140 [ 765.053491][T11590] ? __local_bh_enable_ip+0x12a/0x1b0 [ 765.058942][T11590] ? _local_bh_enable+0xa0/0xa0 [ 765.063855][T11590] ? __dev_queue_xmit+0x26f/0x3760 [ 765.068991][T11590] ? __dev_queue_xmit+0x26f/0x3760 [ 765.074153][T11590] ? __dev_queue_xmit+0x15c9/0x3760 [ 765.079373][T11590] ? __dev_queue_xmit+0x26f/0x3760 [ 765.084521][T11590] ? netdev_core_pick_tx+0x340/0x340 [ 765.089808][T11590] ? ref_tracker_free+0x630/0x7c0 [ 765.094862][T11590] ? refcount_inc+0x70/0x70 [ 765.099364][T11590] ? __copy_skb_header+0x417/0x5a0 [ 765.104500][T11590] ? __skb_clone+0x480/0x790 [ 765.109108][T11590] netlink_rcv_skb+0x1de/0x420 [ 765.113903][T11590] ? rtnetlink_bind+0x80/0x80 [ 765.118593][T11590] ? netlink_ack+0x1100/0x1100 [ 765.123361][T11590] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.128581][T11590] netlink_unicast+0x74d/0x8d0 [ 765.133368][T11590] netlink_sendmsg+0x89e/0xbc0 [ 765.138167][T11590] ? netlink_getsockopt+0x540/0x540 [ 765.143367][T11590] ? aa_sock_msg_perm+0x94/0x150 [ 765.148328][T11590] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 765.153617][T11590] ? security_socket_sendmsg+0x7c/0xa0 [ 765.159118][T11590] ? netlink_getsockopt+0x540/0x540 [ 765.164334][T11590] ____sys_sendmsg+0x59b/0x970 [ 765.169105][T11590] ? __sys_sendmsg_sock+0x30/0x30 [ 765.174145][T11590] ? __import_iovec+0x315/0x500 [ 765.179005][T11590] ? import_iovec+0x6f/0xa0 [ 765.183518][T11590] ___sys_sendmsg+0x21c/0x290 [ 765.188220][T11590] ? __sys_sendmsg+0x270/0x270 [ 765.193039][T11590] ? __fdget+0x17c/0x200 [ 765.197315][T11590] __se_sys_sendmsg+0x19e/0x270 [ 765.202170][T11590] ? __se_sys_futex+0x14a/0x440 [ 765.207053][T11590] ? __x64_sys_sendmsg+0x80/0x80 [ 765.212001][T11590] ? lockdep_hardirqs_on+0x94/0x140 [ 765.217229][T11590] do_syscall_64+0x4c/0xa0 [ 765.221647][T11590] ? clear_bhb_loop+0x60/0xb0 [ 765.226349][T11590] ? clear_bhb_loop+0x60/0xb0 [ 765.231030][T11590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.236970][T11590] RIP: 0033:0x7f1b84f8f749 [ 765.241404][T11590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.261045][T11590] RSP: 002b:00007f1b85e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.269490][T11590] RAX: ffffffffffffffda RBX: 00007f1b851e5fa0 RCX: 00007f1b84f8f749 [ 765.277482][T11590] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 765.285481][T11590] RBP: 00007f1b85013f91 R08: 0000000000000000 R09: 0000000000000000 [ 765.293450][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.301446][T11590] R13: 00007f1b851e6038 R14: 00007f1b851e5fa0 R15: 00007ffd53bb4018 [ 765.309450][T11590] [ 765.312491][T11590] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 765.319772][T11590] CPU: 1 PID: 11590 Comm: syz.2.1878 Not tainted syzkaller #0 [ 765.327218][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 765.337276][T11590] Call Trace: [ 765.340567][T11590] [ 765.343525][T11590] dump_stack_lvl+0x168/0x22e [ 765.348258][T11590] ? memcpy+0x3c/0x60 [ 765.352241][T11590] ? show_regs_print_info+0x12/0x12 [ 765.357522][T11590] ? load_image+0x3b0/0x3b0 [ 765.362036][T11590] panic+0x2c9/0x710 [ 765.365937][T11590] ? bpf_jit_dump+0xd0/0xd0 [ 765.370446][T11590] __warn+0x2f8/0x4f0 [ 765.374423][T11590] ? taprio_get_start_time+0x139/0x160 [ 765.379878][T11590] ? taprio_get_start_time+0x139/0x160 [ 765.385329][T11590] report_bug+0x2ba/0x4f0 [ 765.389652][T11590] ? taprio_get_start_time+0x139/0x160 [ 765.395108][T11590] handle_bug+0x3a/0x70 [ 765.399261][T11590] exc_invalid_op+0x16/0x40 [ 765.403769][T11590] asm_exc_invalid_op+0x16/0x20 [ 765.408630][T11590] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 765.414692][T11590] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1c c9 7c f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 87 99 2c f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 765.434293][T11590] RSP: 0018:ffffc9000542ed88 EFLAGS: 00010287 [ 765.440375][T11590] RAX: ffffffff88543cd9 RBX: ffffc9000542ee98 RCX: 0000000000080000 [ 765.448356][T11590] RDX: ffffc9000cd49000 RSI: 0000000000001e59 RDI: 0000000000001e5a [ 765.456338][T11590] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215c478 [ 765.464302][T11590] R10: fffffbfff215c478 R11: 1ffffffff215c477 R12: 000000b20edce411 [ 765.472278][T11590] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 765.480253][T11590] ? taprio_get_start_time+0x139/0x160 [ 765.485715][T11590] ? taprio_get_start_time+0x139/0x160 [ 765.491179][T11590] taprio_change+0x3daa/0x50f0 [ 765.495972][T11590] ? taprio_destroy+0x4b0/0x4b0 [ 765.500835][T11590] ? qdisc_create+0x7cb/0x1090 [ 765.505604][T11590] ? ____sys_sendmsg+0x59b/0x970 [ 765.510537][T11590] ? ___sys_sendmsg+0x21c/0x290 [ 765.515508][T11590] ? __se_sys_sendmsg+0x19e/0x270 [ 765.520529][T11590] ? do_syscall_64+0x4c/0xa0 [ 765.525136][T11590] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.531206][T11590] ? qdisc_alloc+0x95/0xa50 [ 765.535709][T11590] ? fifo_init+0x3ab/0x650 [ 765.540120][T11590] ? qdisc_peek_head+0x40/0x40 [ 765.544877][T11590] ? qdisc_alloc+0x77a/0xa50 [ 765.549467][T11590] ? mutex_is_locked+0xe/0x40 [ 765.554162][T11590] ? taprio_peek+0x590/0x590 [ 765.558764][T11590] qdisc_create+0x7cb/0x1090 [ 765.563354][T11590] ? qdisc_notify+0x370/0x370 [ 765.568032][T11590] tc_modify_qdisc+0xb2f/0x1cc0 [ 765.572889][T11590] ? qdisc_offload_query_caps+0x140/0x140 [ 765.578619][T11590] ? qdisc_offload_query_caps+0x140/0x140 [ 765.584347][T11590] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 765.589464][T11590] rtnetlink_rcv_msg+0x79b/0xed0 [ 765.594411][T11590] ? rtnetlink_bind+0x80/0x80 [ 765.599086][T11590] ? __local_bh_enable_ip+0x12a/0x1b0 [ 765.604457][T11590] ? lockdep_hardirqs_on+0x94/0x140 [ 765.609665][T11590] ? __local_bh_enable_ip+0x12a/0x1b0 [ 765.615043][T11590] ? _local_bh_enable+0xa0/0xa0 [ 765.619916][T11590] ? __dev_queue_xmit+0x26f/0x3760 [ 765.625023][T11590] ? __dev_queue_xmit+0x26f/0x3760 [ 765.630130][T11590] ? __dev_queue_xmit+0x15c9/0x3760 [ 765.635352][T11590] ? __dev_queue_xmit+0x26f/0x3760 [ 765.640458][T11590] ? netdev_core_pick_tx+0x340/0x340 [ 765.645740][T11590] ? ref_tracker_free+0x630/0x7c0 [ 765.650772][T11590] ? refcount_inc+0x70/0x70 [ 765.655283][T11590] ? __copy_skb_header+0x417/0x5a0 [ 765.660396][T11590] ? __skb_clone+0x480/0x790 [ 765.664985][T11590] netlink_rcv_skb+0x1de/0x420 [ 765.669745][T11590] ? rtnetlink_bind+0x80/0x80 [ 765.674419][T11590] ? netlink_ack+0x1100/0x1100 [ 765.679202][T11590] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.684416][T11590] netlink_unicast+0x74d/0x8d0 [ 765.689184][T11590] netlink_sendmsg+0x89e/0xbc0 [ 765.693966][T11590] ? netlink_getsockopt+0x540/0x540 [ 765.699173][T11590] ? aa_sock_msg_perm+0x94/0x150 [ 765.704142][T11590] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 765.709458][T11590] ? security_socket_sendmsg+0x7c/0xa0 [ 765.714917][T11590] ? netlink_getsockopt+0x540/0x540 [ 765.720118][T11590] ____sys_sendmsg+0x59b/0x970 [ 765.724884][T11590] ? __sys_sendmsg_sock+0x30/0x30 [ 765.729903][T11590] ? __import_iovec+0x315/0x500 [ 765.734761][T11590] ? import_iovec+0x6f/0xa0 [ 765.739280][T11590] ___sys_sendmsg+0x21c/0x290 [ 765.743969][T11590] ? __sys_sendmsg+0x270/0x270 [ 765.748765][T11590] ? __fdget+0x17c/0x200 [ 765.753035][T11590] __se_sys_sendmsg+0x19e/0x270 [ 765.757891][T11590] ? __se_sys_futex+0x14a/0x440 [ 765.762745][T11590] ? __x64_sys_sendmsg+0x80/0x80 [ 765.767700][T11590] ? lockdep_hardirqs_on+0x94/0x140 [ 765.772906][T11590] do_syscall_64+0x4c/0xa0 [ 765.777322][T11590] ? clear_bhb_loop+0x60/0xb0 [ 765.781996][T11590] ? clear_bhb_loop+0x60/0xb0 [ 765.786706][T11590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.792633][T11590] RIP: 0033:0x7f1b84f8f749 [ 765.797081][T11590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.816678][T11590] RSP: 002b:00007f1b85e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.825082][T11590] RAX: ffffffffffffffda RBX: 00007f1b851e5fa0 RCX: 00007f1b84f8f749 [ 765.833044][T11590] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 765.841011][T11590] RBP: 00007f1b85013f91 R08: 0000000000000000 R09: 0000000000000000 [ 765.848978][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.856962][T11590] R13: 00007f1b851e6038 R14: 00007f1b851e5fa0 R15: 00007ffd53bb4018 [ 765.864942][T11590] [ 765.868340][T11590] Kernel Offset: disabled [ 765.872771][T11590] Rebooting in 86400 seconds..