last executing test programs: 2.846269007s ago: executing program 1 (id=829): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2.843709798s ago: executing program 1 (id=831): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000003c0)="ce", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000084000000070000007f", @ANYBLOB="7a7ef8c4dd39a64e6f73a1090d54576175d5d362659970ce2920418a231b497d4b51fa88d3d2da2d3cdfb1b6077989d88433508be4fbe731096e866285732868a0d0b16d6fd04b4f3bd7c3fbe68df1e078b542fedd9d69b805ab8ea418d39a141332f2a23406718d2048574e4e4557877837a5e1102459a8da17aaf50600942b74ce2a15df46e259b25aafc77ca9521ebab013b243126a1951c7e893abb288a17f6339d50ada506945968da690e0"], 0x18, 0x40000c5}, 0x8050) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1}, 0x120) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r3, 0x2, {0x2, 0xff, 0x4}, 0xff}, 0x18) 1.969305559s ago: executing program 1 (id=838): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) listen(r0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r1, 0x6410) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) 1.923515797s ago: executing program 0 (id=839): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1.829883657s ago: executing program 0 (id=840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000005000000000000007f000000850000002900000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffefb702000008000000b70300000500040085000000"], &(0x7f0000000680)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="000000000035833c68a0c9c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.829142386s ago: executing program 0 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x38, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x3}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}]}, 0x38}}, 0x0) 1.783153877s ago: executing program 0 (id=842): r0 = openat(0xffffffffffffff9c, 0x0, 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0x9a090a, 0x937}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000003c0)={{{0xd, 0x1}}, 0x62, 0x9, &(0x7f0000000340)="854282a3b05d0304266b02779c56ae518412c195243c28ea98fd7f8b460e7a7bb27655ae43873fba9b704c22f31a4eb3d0f96111009e1a4804b5babd0bcb2e9e21adf23e9379cfcca64e06a20374c214e553eac75349dee782715aba0366b663d356"}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(r7, &(0x7f00000022c0)=""/208, 0xd0, 0x1) remap_file_pages(&(0x7f0000697000/0x14000)=nil, 0x14000, 0xf, 0x6, 0x2000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005000100000000000800"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001030c00000000000000000000000308001700000000fd1600124000020000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.497692646s ago: executing program 1 (id=847): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000003c0)="ce", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000084000000070000007f", @ANYBLOB="7a7ef8c4dd39a64e6f73a1090d54576175d5d362659970ce2920418a231b497d4b51fa88d3d2da2d3cdfb1b6077989d88433508be4fbe731096e866285732868a0d0b16d6fd04b4f3bd7c3fbe68df1e078b542fedd9d69b805ab8ea418d39a141332f2a23406718d2048574e4e4557877837a5e1102459a8da17aaf50600942b74ce2a15df46e259b25aafc77ca9521ebab013b243126a1951c7e893abb288a17f6339d50ada506945968da690e0"], 0x18, 0x40000c5}, 0x8050) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1}, 0x120) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x4}, 0xff}, 0x18) 1.322391148s ago: executing program 2 (id=849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1.24916038s ago: executing program 2 (id=850): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000040000"], 0x48) 1.161441318s ago: executing program 2 (id=851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, 0x8) 1.13316271s ago: executing program 0 (id=852): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x100003, 0x7fffffff, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) pread64(r1, 0x0, 0x0, 0x2f6) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 1.128131846s ago: executing program 2 (id=853): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xaec}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 828.738509ms ago: executing program 3 (id=855): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) 781.313235ms ago: executing program 3 (id=856): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00'}) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="5809040050505050505008021100000008021100000178005a0e3269ef10d89883c73a681f906df5132399625b45678683ecd90140d60631a2e1de82aea74420925b3ecc7036281514157658997a0d49d2ccdb2c2a0199eac8bb2681222991cfd939737569cd7e4a692fb61d23cc96c08a35e4d2e4d6dd000000000000000000"], 0x80) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x203, 0x70bd28, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x100, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x2}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x400400c) ioctl(r1, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) sendmsg$inet(r5, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000600)="c18a52f880ebedf18f18b456ff0f610f71edc9ab74e6f4b9607b46dacd65d3c66e3a6026988fa8ea19ef88e50be0ba295bdbfed14e1d4381c51d23928e05a107c2386ecd7ce9db137a6e16bac44e8c758192a8f5d715cfe0868c68dcda5f90dbdace7a5a96f01080132133ae60692d683ce77233b10480192c880381fa3fa1b10b255bb2a6ea83b57c420abee5a13493bd2cc8d28eea5506f53a50bb1db2", 0x9e}, {&(0x7f00000006c0)="e4ea6b7ed5251652e5ff97d112c83c3aa27236fee2bb86bae5e9b4cfa9ed45c6ee24baed3872ebe0c993f1b47fd0d930f82790b8ce4b9b8761f1d2684d4a2b41295a72f7c8d215d7", 0x48}, {&(0x7f0000000740)="811f74d8299073fc7b2cd18a96817181330dc4b85f3e72081fd511579dd7e004d9740fd50b7bf175f9e9fd3a64e1dd7f1e105739ea46063e01e6a496", 0x3c}, {0x0}, {0x0}], 0x5}, 0x40810) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) 581.604598ms ago: executing program 1 (id=857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r0, 0x1) 581.185823ms ago: executing program 1 (id=858): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, 0x0}]) 268.653255ms ago: executing program 2 (id=859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 256.229873ms ago: executing program 3 (id=860): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000040000000400"], 0x48) 242.979557ms ago: executing program 0 (id=861): r0 = openat(0xffffffffffffff9c, 0x0, 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0x9a090a, 0x937}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000003c0)={{{0xd, 0x1}}, 0x62, 0x9, &(0x7f0000000340)="854282a3b05d0304266b02779c56ae518412c195243c28ea98fd7f8b460e7a7bb27655ae43873fba9b704c22f31a4eb3d0f96111009e1a4804b5babd0bcb2e9e21adf23e9379cfcca64e06a20374c214e553eac75349dee782715aba0366b663d356"}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(r7, &(0x7f00000022c0)=""/208, 0xd0, 0x1) remap_file_pages(&(0x7f0000697000/0x14000)=nil, 0x14000, 0xf, 0x6, 0x2000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005000100000000000800"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001030c00000000000000000000000308001700000000fd1600124000020000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 238.194054ms ago: executing program 2 (id=862): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) 170.386577ms ago: executing program 3 (id=863): r0 = epoll_create(0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 60.383426ms ago: executing program 3 (id=864): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000017c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x2007, @fd, 0x9, 0x0, 0x0, 0x8, 0x1, {0x0, 0x0, 0x5, '\x00', &(0x7f00000003c0)={0x101, 0x974, 0x0, 0x0, 0x5}, 0x1}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000811}, 0x0) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=865): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}]}, 0x7b}, 0x1, 0x0, 0x0, 0x40000}, 0x404c8c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f00002ca000/0x3000)=nil, 0x3000, 0x200000f, 0xa36f26ea4fad88fc, 0xffffffffffffffff, 0x1c5ed000) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018033, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='vimc.0', 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:52554' (ED25519) to the list of known hosts. [ 41.939258][ T5719] cgroup: Unknown subsys name 'net' [ 42.089486][ T5719] cgroup: Unknown subsys name 'cpuset' [ 42.093599][ T5719] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.996087][ T5719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.250565][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.254475][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.260553][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.267155][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.268064][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.270813][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.271001][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.272989][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.273611][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.274572][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.277202][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.280407][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.281903][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.282735][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.283618][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.284198][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.284529][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.286364][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.289709][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.290955][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.860066][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.863856][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.868486][ T5733] bridge_slave_0: entered allmulticast mode [ 47.872518][ T5733] bridge_slave_0: entered promiscuous mode [ 47.895509][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.897839][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.900113][ T5733] bridge_slave_1: entered allmulticast mode [ 47.902805][ T5733] bridge_slave_1: entered promiscuous mode [ 47.959806][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.993033][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.020146][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.022790][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.026924][ T5746] bridge_slave_0: entered allmulticast mode [ 48.030320][ T5746] bridge_slave_0: entered promiscuous mode [ 48.057358][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.059750][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.062088][ T5746] bridge_slave_1: entered allmulticast mode [ 48.064785][ T5746] bridge_slave_1: entered promiscuous mode [ 48.084682][ T5733] team0: Port device team_slave_0 added [ 48.087991][ T5733] team0: Port device team_slave_1 added [ 48.103363][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.151974][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.156887][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.159828][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.170505][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.189480][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.193721][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.196929][ T5735] bridge_slave_0: entered allmulticast mode [ 48.200608][ T5735] bridge_slave_0: entered promiscuous mode [ 48.214141][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.216871][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.227625][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.232701][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.236077][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.239257][ T5738] bridge_slave_0: entered allmulticast mode [ 48.243338][ T5738] bridge_slave_0: entered promiscuous mode [ 48.248512][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.251775][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.255027][ T5738] bridge_slave_1: entered allmulticast mode [ 48.259027][ T5738] bridge_slave_1: entered promiscuous mode [ 48.262880][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.266657][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.269753][ T5735] bridge_slave_1: entered allmulticast mode [ 48.273764][ T5735] bridge_slave_1: entered promiscuous mode [ 48.330995][ T5746] team0: Port device team_slave_0 added [ 48.350323][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.356603][ T5746] team0: Port device team_slave_1 added [ 48.362212][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.368554][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.402287][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.427998][ T5733] hsr_slave_0: entered promiscuous mode [ 48.430444][ T5733] hsr_slave_1: entered promiscuous mode [ 48.450454][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.452806][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.461407][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.466261][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.468365][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.476254][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.488084][ T5735] team0: Port device team_slave_0 added [ 48.492690][ T5735] team0: Port device team_slave_1 added [ 48.500694][ T5738] team0: Port device team_slave_0 added [ 48.530019][ T5738] team0: Port device team_slave_1 added [ 48.542168][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.545422][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.553590][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.592069][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.594801][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.603670][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.618665][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.621718][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.632379][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.650304][ T5746] hsr_slave_0: entered promiscuous mode [ 48.653506][ T5746] hsr_slave_1: entered promiscuous mode [ 48.656204][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 48.658060][ T5746] Cannot create hsr debugfs directory [ 48.660550][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.663337][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.673603][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.752977][ T5735] hsr_slave_0: entered promiscuous mode [ 48.756102][ T5735] hsr_slave_1: entered promiscuous mode [ 48.759009][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 48.761393][ T5735] Cannot create hsr debugfs directory [ 48.820535][ T5738] hsr_slave_0: entered promiscuous mode [ 48.824150][ T5738] hsr_slave_1: entered promiscuous mode [ 48.827521][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 48.830003][ T5738] Cannot create hsr debugfs directory [ 49.112282][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.121239][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.134817][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.139550][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.142223][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.147221][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.150458][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.154999][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.183330][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.193263][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.196568][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.201002][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.207128][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.211049][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.213996][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.218353][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.281196][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.289422][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.292763][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.298225][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.301242][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.306207][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.309114][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.313162][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.346703][ T5747] Bluetooth: hci1: command tx timeout [ 49.346964][ T65] Bluetooth: hci2: command tx timeout [ 49.347000][ T5741] Bluetooth: hci0: command tx timeout [ 49.347251][ T5741] Bluetooth: hci3: command tx timeout [ 49.384572][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.390356][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.396825][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.403340][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.411782][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.418018][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.426166][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.432986][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.449793][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.479137][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.503709][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.518258][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.527986][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.530665][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.543186][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.545508][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.561683][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.564278][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.579491][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.582470][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.588709][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.632460][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.644504][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.646835][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.659859][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.662526][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.718789][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.752122][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.769085][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.771583][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.780984][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.783556][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.034295][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.038376][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.080643][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.107240][ T5735] veth0_vlan: entered promiscuous mode [ 50.112583][ T5746] veth0_vlan: entered promiscuous mode [ 50.123466][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.131100][ T5735] veth1_vlan: entered promiscuous mode [ 50.139487][ T5746] veth1_vlan: entered promiscuous mode [ 50.152327][ T5733] veth0_vlan: entered promiscuous mode [ 50.170442][ T5733] veth1_vlan: entered promiscuous mode [ 50.189377][ T5735] veth0_macvtap: entered promiscuous mode [ 50.201083][ T5735] veth1_macvtap: entered promiscuous mode [ 50.213102][ T5746] veth0_macvtap: entered promiscuous mode [ 50.224789][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.232708][ T5738] veth0_vlan: entered promiscuous mode [ 50.238317][ T5746] veth1_macvtap: entered promiscuous mode [ 50.244731][ T5738] veth1_vlan: entered promiscuous mode [ 50.248727][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.262398][ T5733] veth0_macvtap: entered promiscuous mode [ 50.268643][ T5733] veth1_macvtap: entered promiscuous mode [ 50.284527][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.295734][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.305800][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.316740][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.322427][ T5738] veth0_macvtap: entered promiscuous mode [ 50.333841][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.339987][ T5738] veth1_macvtap: entered promiscuous mode [ 50.387169][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.394636][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.394766][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.397635][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.441530][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.445420][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.446132][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.458603][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.463895][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.490274][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.493196][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.493740][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.498767][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.529340][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.535402][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.539334][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.540182][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.553421][ T5735] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.569957][ T5735] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.574611][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.577587][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.585458][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.586110][ T5735] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.588400][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.598203][ T5735] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.620195][ T5735] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.622650][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.628548][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.636912][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.641362][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.653296][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.665729][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.696013][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.706409][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.729465][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.738375][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.744610][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.748725][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.080324][ T5901] ======================================================= [ 51.080324][ T5901] WARNING: The mand mount option has been deprecated and [ 51.080324][ T5901] and is ignored by this kernel. Remove the mand [ 51.080324][ T5901] option from the mount to silence this warning. [ 51.080324][ T5901] ======================================================= [ 51.425437][ T65] Bluetooth: hci3: command tx timeout [ 51.425706][ T5747] Bluetooth: hci1: command tx timeout [ 51.429168][ T5743] Bluetooth: hci0: command tx timeout [ 51.435497][ T5747] Bluetooth: hci2: command tx timeout [ 51.908932][ T5907] Config c/1 of g1 needs at least one function. [ 51.911740][ T5907] udc usbip-vudc.0: failed to start g1: -22 [ 51.913732][ T5907] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 51.918801][ T5907] UDC core: g1: couldn't find an available UDC or it's busy [ 52.226660][ T5822] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.337814][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 52.377001][ T5822] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 52.383443][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.397685][ T5822] usb 7-1: config 0 descriptor?? [ 52.829518][ T5822] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0f [ 52.833984][ T5822] hackrf 7-1:0.0: Could not detect board [ 52.836086][ T5822] hackrf 7-1:0.0: probe with driver hackrf failed with error -71 [ 52.848449][ T5822] usb 7-1: USB disconnect, device number 2 [ 53.506674][ T5747] Bluetooth: hci2: command tx timeout [ 53.509086][ T5743] Bluetooth: hci1: command tx timeout [ 53.509167][ T65] Bluetooth: hci0: command tx timeout [ 53.509200][ T5741] Bluetooth: hci3: command tx timeout [ 53.632194][ T5917] UDC core: g1: couldn't find an available UDC or it's busy [ 54.801058][ T5937] cgroup: Name too long [ 55.585866][ T65] Bluetooth: hci3: command tx timeout [ 55.586639][ T5747] Bluetooth: hci2: command tx timeout [ 55.587613][ T65] Bluetooth: hci0: command tx timeout [ 55.591139][ T5743] Bluetooth: hci1: command tx timeout [ 56.075779][ T5822] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.252265][ T5822] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 56.264520][ T5822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.283051][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.369083][ T5822] usb 8-1: config 0 descriptor?? [ 56.541751][ T5611] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.597595][ T5822] usbhid 8-1:0.0: can't add hid device: -71 [ 56.599575][ T5822] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 56.604164][ T5822] usb 8-1: USB disconnect, device number 2 [ 56.706609][ T5611] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 56.711324][ T5611] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 56.717228][ T5611] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.721867][ T5611] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 56.729094][ T5611] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.735591][ T5611] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 56.738588][ T5611] usb 6-1: Product: syz [ 56.739910][ T5611] usb 6-1: Manufacturer: syz [ 56.746463][ T5611] cdc_wdm 6-1:1.0: skipping garbage [ 56.748186][ T5611] cdc_wdm 6-1:1.0: skipping garbage [ 56.752714][ T5611] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 56.754579][ T5611] cdc_wdm 6-1:1.0: Unknown control protocol [ 57.025752][ T5970] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 57.045341][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.197846][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 57.206898][ T9] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 57.210770][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 57.214572][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.221401][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.224407][ T9] usb 8-1: Product: syz [ 57.226283][ T9] usb 8-1: Manufacturer: syz [ 57.228233][ T9] usb 8-1: SerialNumber: syz [ 57.233984][ T5974] process 'syz.0.26' launched './file0' with NULL argv: empty string added [ 58.124815][ T5983] binder: 5982:5983 ioctl 40046210 0 returned -14 [ 58.785210][ T5993] netlink: 3 bytes leftover after parsing attributes in process `syz.2.32'. [ 58.788169][ T5993] unsupported nlmsg_type 40 [ 58.847431][ T3988] usb 8-1: USB disconnect, device number 3 [ 58.873476][ T5995] binder: 5994:5995 ioctl 4018f514 0 returned -22 [ 58.949685][ T5822] usb 6-1: USB disconnect, device number 2 [ 59.063912][ T6004] UDC core: g1: couldn't find an available UDC or it's busy [ 59.151741][ T5822] kernel write not supported for file /dsp (pid: 5822 comm: kworker/2:3) [ 59.158320][ T5822] kernel write not supported for file /dsp (pid: 5822 comm: kworker/2:3) [ 59.207954][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 59.213935][ T6016] IPv6: sit1: Disabled Multicast RS [ 59.218177][ T6016] sit1: entered allmulticast mode [ 59.546983][ T42] audit: type=1326 audit(1787333526.102:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.556516][ T42] audit: type=1326 audit(1787333526.102:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.567172][ T42] audit: type=1326 audit(1787333526.112:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.579067][ T42] audit: type=1326 audit(1787333526.112:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.590134][ T42] audit: type=1326 audit(1787333526.112:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.600847][ T42] audit: type=1326 audit(1787333526.112:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.611492][ T42] audit: type=1326 audit(1787333526.112:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.620443][ T42] audit: type=1326 audit(1787333526.112:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.628350][ T42] audit: type=1326 audit(1787333526.112:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.636504][ T42] audit: type=1326 audit(1787333526.122:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.890976][ T6040] program syz.3.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.811596][ T6101] sctp: [Deprecated]: syz.2.78 (pid 6101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.811596][ T6101] Use struct sctp_sack_info instead [ 60.817343][ T6101] sctp: [Deprecated]: syz.2.78 (pid 6101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.817343][ T6101] Use struct sctp_sack_info instead [ 60.865433][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.015475][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 61.018412][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 61.023402][ T9] usb 8-1: config 0 has an invalid interface number: 107 but max is 0 [ 61.028165][ T9] usb 8-1: config 0 has no interface number 0 [ 61.030797][ T9] usb 8-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 61.037937][ T9] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 61.041453][ T9] usb 8-1: Product: syz [ 61.043085][ T9] usb 8-1: Manufacturer: syz [ 61.044590][ T9] usb 8-1: SerialNumber: syz [ 61.048456][ T9] usb 8-1: config 0 descriptor?? [ 61.052002][ T9] keyspan 8-1:0.107: Keyspan 4 port adapter converter detected [ 61.054613][ T9] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 81 [ 61.057188][ T9] keyspan 8-1:0.107: unsupported endpoint type 0 [ 61.061549][ T9] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 1 [ 61.067313][ T9] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 61.071891][ T9] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 2 [ 61.075438][ T9] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 61.080041][ T9] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 4 [ 61.083488][ T9] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 61.087697][ T9] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 6 [ 61.091594][ T9] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 61.254876][ T5884] usb 8-1: USB disconnect, device number 4 [ 61.264079][ T5884] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 61.269414][ T5884] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 61.273917][ T5884] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 61.278406][ T5884] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 61.281755][ T5884] keyspan 8-1:0.107: device disconnected [ 62.247413][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 62.573127][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 62.849060][ T6174] netlink: 72 bytes leftover after parsing attributes in process `syz.3.97'. [ 62.860789][ T6172] mmap: syz.2.96 (6172) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.868234][ T6172] Zero length message leads to an empty skb [ 63.573181][ T6219] syzkaller0: entered promiscuous mode [ 63.575119][ T6219] syzkaller0: entered allmulticast mode [ 65.306861][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 65.466080][ T9] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 65.469961][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 65.473349][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.481623][ T6275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 65.489953][ T9] opticon 8-1:1.0: opticon converter detected [ 65.493637][ T9] usb 8-1: opticon converter now attached to ttyUSB0 [ 66.164991][ T5611] usb 8-1: USB disconnect, device number 5 [ 66.175533][ T5611] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 66.178937][ T5611] opticon 8-1:1.0: device disconnected [ 66.217011][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 66.542980][ T6319] udevd[6319]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 66.638549][ T6322] Invalid option length (64949) for dns_resolver key [ 68.812066][ T6382] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 69.455351][ T3267] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.605331][ T3267] usb 5-1: Using ep0 maxpacket: 8 [ 69.608670][ T3267] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40 [ 69.612476][ T3267] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.615869][ T3267] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.620063][ T3267] usb 5-1: config 1 interface 0 has no altsetting 0 [ 69.625404][ T61] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.625576][ T3267] usb 5-1: string descriptor 0 read error: -22 [ 69.630262][ T3267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.780421][ T61] usb 7-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 69.785051][ T61] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 69.789015][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.793850][ T61] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.802769][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.810206][ T61] usb 7-1: config 0 descriptor?? [ 69.815078][ T61] usbhid 7-1:0.0: can't add hid device: -22 [ 69.819828][ T61] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 69.840493][ T3267] usbhid 5-1:1.0: can't add hid device: -71 [ 69.844883][ T3267] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 69.859624][ T3267] usb 5-1: USB disconnect, device number 2 [ 70.021260][ T61] usb 7-1: USB disconnect, device number 3 [ 70.395917][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 70.757721][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 70.757810][ T42] audit: type=1326 audit(1787333537.312:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.201" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 70.957924][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.960477][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.353777][ T6445] loop0: detected capacity change from 0 to 3904 [ 71.412632][ T6445] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 71.416906][ T6445] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 71.419704][ T6445] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 71.422004][ T6445] loop0: [ 71.905342][ T61] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.055367][ T61] usb 6-1: device descriptor read/64, error -71 [ 72.094385][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 72.306158][ T61] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.436798][ T61] usb 6-1: device descriptor read/64, error -71 [ 72.546816][ T61] usb usb6-port1: attempt power cycle [ 72.614884][ T6528] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 72.915364][ T61] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.935999][ T61] usb 6-1: device descriptor read/8, error -71 [ 73.175467][ T61] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 73.206094][ T61] usb 6-1: device descriptor read/8, error -71 [ 73.317059][ T61] usb usb6-port1: unable to enumerate USB device [ 73.627105][ T5813] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.795810][ T5813] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.799729][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.803199][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.808012][ T5813] usb 7-1: config 0 descriptor?? [ 73.820320][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 73.825142][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 73.829750][ T6551] netlink: 104 bytes leftover after parsing attributes in process `syz.0.250'. [ 73.833758][ T6551] netlink: 104 bytes leftover after parsing attributes in process `syz.0.250'. [ 73.914949][ T6555] random: crng reseeded on system resumption [ 74.020344][ T5813] usbhid 7-1:0.0: can't add hid device: -71 [ 74.022343][ T5813] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 74.028390][ T5813] usb 7-1: USB disconnect, device number 4 [ 74.455430][ T5611] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 74.615781][ T5611] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 74.623194][ T5611] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 74.627504][ T5611] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 74.630694][ T5611] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.638354][ T5611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.640972][ T5611] usb 7-1: Product: syz [ 74.642363][ T5611] usb 7-1: Manufacturer: syz [ 74.643941][ T5611] usb 7-1: SerialNumber: syz [ 74.653902][ T6580] ublk_ctrl_add_dev: dev id not match 4294967295 4096 [ 74.765609][ T42] audit: type=1804 audit(1787333541.312:35): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.264" name="/newroot/51/config/usb_gadget/g1/bcdDevice" dev="configfs" ino=14407 res=1 errno=0 [ 74.772984][ T42] audit: type=1800 audit(1787333541.322:36): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.264" name="bcdDevice" dev="configfs" ino=14407 res=0 errno=0 [ 74.860137][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 74.868084][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.871398][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.062029][ T3267] usb 7-1: USB disconnect, device number 5 [ 75.365504][ T61] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.526881][ T61] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.529452][ T61] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 75.533101][ T61] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.536342][ T61] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 75.541028][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.544327][ T61] usb 5-1: Product: syz [ 75.545941][ T61] usb 5-1: Manufacturer: syz [ 75.547899][ T61] usb 5-1: SerialNumber: syz [ 75.758447][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 75.764668][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.767153][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.782818][ T61] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 75.818522][ T61] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 75.822367][ T61] usb 5-1: USB disconnect, device number 3 [ 75.836267][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.085393][ T5813] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 76.225560][ T5813] usb 8-1: device descriptor read/64, error -71 [ 76.466687][ T5741] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 76.470442][ T5741] Bluetooth: hci1: Injecting HCI hardware error event [ 76.474505][ T5741] Bluetooth: hci1: hardware error 0x00 [ 76.485360][ T5813] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 76.486325][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.491362][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.494418][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.498961][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.525493][ T3267] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 76.625384][ T5813] usb 8-1: device descriptor read/64, error -71 [ 76.686014][ T3267] usb 6-1: Using ep0 maxpacket: 8 [ 76.688728][ T3267] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.692719][ T3267] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 76.696173][ T3267] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 76.702367][ T3267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.705090][ T3267] usb 6-1: Product: syz [ 76.706780][ T3267] usb 6-1: Manufacturer: syz [ 76.708411][ T3267] usb 6-1: SerialNumber: syz [ 76.735611][ T5813] usb usb8-port1: attempt power cycle [ 76.805367][ T5841] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.865338][ T3988] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 76.924129][ T3267] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 76.926426][ T3267] cdc_ncm 6-1:1.0: bind() failure [ 76.930870][ T3267] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 76.933052][ T3267] cdc_ncm 6-1:1.1: bind() failure [ 76.937832][ T3267] usb 6-1: USB disconnect, device number 7 [ 76.956805][ T5841] usb 5-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 76.961968][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.966202][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.970556][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.977279][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.980538][ T5841] usb 5-1: Product: syz [ 76.982058][ T5841] usb 5-1: Manufacturer: syz [ 76.983604][ T5841] usb 5-1: SerialNumber: syz [ 77.025354][ T3988] usb 7-1: Using ep0 maxpacket: 32 [ 77.027735][ T3988] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 77.031905][ T3988] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 77.034559][ T3988] usb 7-1: config 0 has no interface number 0 [ 77.038149][ T3988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.040782][ T3988] usb 7-1: Product: syz [ 77.042093][ T3988] usb 7-1: Manufacturer: syz [ 77.043616][ T3988] usb 7-1: SerialNumber: syz [ 77.046972][ T3988] usb 7-1: config 0 descriptor?? [ 77.050256][ T3988] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 77.095371][ T5813] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 77.116717][ T5813] usb 8-1: device descriptor read/8, error -71 [ 77.258385][ T3988] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 77.263202][ T3988] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 77.385340][ T5813] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 77.406143][ T5813] usb 8-1: device descriptor read/8, error -71 [ 77.515544][ T5813] usb usb8-port1: unable to enumerate USB device [ 77.603460][ T3988] usb 5-1: USB disconnect, device number 4 [ 77.607577][ T6647] ushc 5-1:1.0: probe with driver ushc failed with error -71 [ 77.664545][ T51] IPVS: starting estimator thread 0... [ 77.755357][ T6652] IPVS: using max 44 ests per chain, 105600 per kthread [ 77.852428][ T6661] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.924387][ T6662] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 78.041995][ T6664] device-mapper: ioctl: Unable to rename non-existent device,  to uuid [ 78.239585][ C3] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 78.240080][ T3267] usb 7-1: USB disconnect, device number 6 [ 78.260667][ T3267] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 78.314975][ T3267] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 78.329697][ T3267] quatech2 7-1:0.51: device disconnected [ 78.387357][ T5747] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 78.391886][ T5747] Bluetooth: hci0: Injecting HCI hardware error event [ 78.395021][ T5747] Bluetooth: hci0: hardware error 0x00 [ 78.545399][ T5741] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 78.555403][ T5611] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.726305][ T5611] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 78.736479][ T5611] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.740612][ T5611] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 78.755852][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.755878][ T5611] usb 5-1: Product: syz [ 78.755892][ T5611] usb 5-1: Manufacturer: syz [ 78.755907][ T5611] usb 5-1: SerialNumber: syz [ 79.376009][ C1] usb 5-1: invalid arpc response id received: 55087 [ 79.576674][ T5611] usb 5-1: failed to send ARPC request 1: -71 [ 79.582634][ T5611] usb 5-1: failed to execute ARPC: -71 [ 79.584545][ T5611] usb 5-1: failed to set connected state for cport 0: -71 [ 79.587772][ T5611] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 79.591693][ T5611] usb 5-1: failed to send ARPC request 3: -71 [ 79.596355][ T5611] usb 5-1: failed to execute ARPC: -71 [ 79.599022][ T5611] usb 5-1: failed to clear cport 0: -71 [ 79.600894][ T5611] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 79.607980][ T5611] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 79.617967][ T5611] usb 5-1: USB disconnect, device number 5 [ 79.657610][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 79.697206][ T1156] IPVS: starting estimator thread 0... [ 79.795514][ T6700] IPVS: using max 44 ests per chain, 105600 per kthread [ 79.818182][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.823214][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.828932][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.834979][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.837850][ T10] usb 6-1: Product: syz [ 79.839201][ T10] usb 6-1: Manufacturer: syz [ 79.840800][ T10] usb 6-1: SerialNumber: syz [ 79.846477][ T10] usb 6-1: 0:2 : does not exist [ 79.851313][ T10] usb 6-1: unit 9 not found! [ 79.852880][ T10] usb 6-1: unit 0 not found! [ 80.048585][ T10] usb 6-1: USB disconnect, device number 8 [ 80.204564][ T108] IPVS: starting estimator thread 0... [ 80.315394][ T6709] IPVS: using max 44 ests per chain, 105600 per kthread [ 80.321620][ T42] audit: type=1800 audit(1787333546.872:37): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.311" name="/" dev="fuse" ino=1 res=0 errno=0 [ 80.477172][ T5747] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 81.011977][ T5611] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 81.156015][ T5611] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 81.160446][ T5611] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.166036][ T5611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.169299][ T5611] usb 6-1: Product: syz [ 81.171015][ T5611] usb 6-1: Manufacturer: syz [ 81.172884][ T5611] usb 6-1: SerialNumber: syz [ 81.177895][ T5611] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 81.181181][ T5611] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 81.184992][ T5611] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 81.192103][ T5611] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 81.195611][ T1034] cfg80211: failed to load regulatory.db [ 81.197495][ T5611] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 81.200530][ T5611] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 81.202962][ T5611] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 81.206594][ T5611] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 81.209917][ T5611] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 81.382699][ T5842] usb 6-1: USB disconnect, device number 9 [ 81.389801][ T5842] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 81.394398][ T5842] keyspan 6-1:1.0: device disconnected [ 81.639981][ T6758] db_root: cannot open: ./my [ 82.259156][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 82.264272][ T6782] netlink: 104 bytes leftover after parsing attributes in process `syz.1.338'. [ 82.271232][ T6782] netlink: 104 bytes leftover after parsing attributes in process `syz.1.338'. [ 82.967092][ T3988] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 83.117081][ T3988] usb 8-1: unable to get BOS descriptor or descriptor too short [ 83.119710][ T3988] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 83.123492][ T3988] usb 8-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.127767][ T3988] usb 8-1: config 1 interface 0 has no altsetting 0 [ 83.131600][ T3988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.134137][ T3988] usb 8-1: Product: syz [ 83.135694][ T3988] usb 8-1: Manufacturer: 햏旫ꪎ侷洺ᮡ꠆畧㴂儜ђ欈፶拄᪠륨㠡콟ㅥ䑢苷牰㻦爂맧녯캺얀삕둫Ⅷꊓ옥柍暙쪆䧮緷䒻懵  [ 83.140439][ T3988] usb 8-1: SerialNumber: syz [ 83.225390][ T5813] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.357401][ T3988] usbhid 8-1:1.0: can't add hid device: -71 [ 83.359453][ T3988] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 83.363873][ T3988] usb 8-1: USB disconnect, device number 10 [ 83.386288][ T5813] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 83.392484][ T5813] usb 5-1: config 1 interface 0 has no altsetting 0 [ 83.398349][ T5813] usb 5-1: string descriptor 0 read error: -22 [ 83.401203][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.861332][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 83.863574][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 83.865706][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 83.867869][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 83.870280][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 83.872556][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 83.874695][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 83.877406][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 83.879603][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 83.881745][ T5813] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 84.030418][ T5813] razer 0003:1532:010D.0002: failed to enable macro keys: -71 [ 84.040526][ T5813] razer 0003:1532:010D.0002: hidraw1: USB HID vff.7f Device [HID 1532:010d] on usb-dummy_hcd.0-1/input0 [ 84.051607][ T5813] usb 5-1: USB disconnect, device number 6 [ 84.083255][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 84.086832][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 84.720862][ T6878] netlink: 'syz.0.378': attribute type 62 has an invalid length. [ 85.345492][ T3267] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 85.496301][ T3267] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 85.502189][ T3267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.508521][ T3267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.512573][ T3267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.519678][ T3267] usb 5-1: config 0 descriptor?? [ 85.752610][ T6934] capability: warning: `syz.2.402' uses deprecated v2 capabilities in a way that may be insecure [ 85.932197][ T3267] usbhid 5-1:0.0: can't add hid device: -71 [ 85.934193][ T3267] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 85.939213][ T3267] usb 5-1: USB disconnect, device number 7 [ 86.147222][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.406'. [ 86.922457][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 86.926106][ T6960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'. [ 87.192218][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 87.235790][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 87.397405][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 87.409772][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.415475][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.418736][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.422206][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.426702][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.482292][ T42] audit: type=1326 audit(1787333554.032:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.3.417" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2fec code=0x0 [ 87.780271][ T6977] warning: `syz.2.418' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.247325][ T10] gud 6-1:1.0: Failed to get connectors (error=-5) [ 88.249532][ T10] gud 6-1:1.0: probe with driver gud failed with error -5 [ 88.404717][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.424'. [ 88.416860][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 88.453213][ T1034] usb 6-1: USB disconnect, device number 10 [ 89.369548][ T7019] binder: 7016:7019 ioctl c0306201 80000680 returned -14 [ 89.696908][ T7025] loop0: detected capacity change from 0 to 6 [ 89.778639][ T7025] ldm_validate_privheads(): Disk read failed. [ 89.780682][ T7025] loop0: [ 89.782081][ T7025] loop0: partition table partially beyond EOD, truncated [ 90.080041][ T7044] binder: 7042:7044 ioctl c0306201 80000680 returned -14 [ 90.565646][ T42] audit: type=1804 audit(1787333557.112:39): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.448" name="bus" dev="ramfs" ino=17498 res=1 errno=0 [ 90.718550][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 91.626173][ T5884] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 91.785875][ T5884] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 91.794439][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.797248][ T5884] usb 5-1: Product: syz [ 91.798585][ T5884] usb 5-1: Manufacturer: syz [ 91.800104][ T5884] usb 5-1: SerialNumber: syz [ 91.805687][ T5884] usb 5-1: config 0 descriptor?? [ 92.014271][ T7081] binder: 7080:7081 ioctl 5000940c 0 returned -22 [ 92.016978][ T7081] binder: 7080:7081 ioctl 40285881 0 returned -22 [ 92.020335][ T7081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.026195][ T7081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.225515][ T3267] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 92.284852][ T108] IPVS: starting estimator thread 0... [ 92.315759][ T7106] loop0: detected capacity change from 0 to 3904 [ 92.372615][ T7106] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 92.375382][ T3267] usb 6-1: Using ep0 maxpacket: 8 [ 92.379424][ T3267] usb 6-1: unable to get BOS descriptor or descriptor too short [ 92.381388][ T7106] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 92.382131][ T3267] usb 6-1: New USB device found, idVendor=045b, idProduct=0248, bcdDevice=d1.9c [ 92.388650][ T7104] IPVS: using max 45 ests per chain, 108000 per kthread [ 92.392721][ T3267] usb 6-1: config 120 has an invalid interface number: 212 but max is 0 [ 92.396321][ T3267] usb 6-1: config 120 has no interface number 0 [ 92.396559][ T7106] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 92.398368][ T3267] usb 6-1: config 120 interface 212 has no altsetting 0 [ 92.405231][ T3267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.408556][ T3267] usb 6-1: Product: syz [ 92.409974][ T3267] usb 6-1: Manufacturer: syz [ 92.411513][ T3267] usb 6-1: SerialNumber: syz [ 92.411734][ T7106] loop0: [ 92.633064][ T3267] usb 6-1: USB disconnect, device number 11 [ 92.824336][ T7117] tmpfs: Bad value for 'mpol' [ 92.926278][ T7121] syzkaller1: entered promiscuous mode [ 92.928418][ T7121] syzkaller1: entered allmulticast mode [ 93.835937][ T5884] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 93.841120][ T5884] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 93.960031][ T5146] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 93.963310][ T5146] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 93.969629][ T5146] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 93.971919][ T5146] loop0: [ 93.998125][ T42] audit: type=1800 audit(1787333560.552:40): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.488" name="active" dev="configfs" ino=17651 res=0 errno=0 [ 94.332455][ T7159] loop8: detected capacity change from 0 to 8 [ 94.340925][ T7159] Dev loop8: unable to read RDB block 8 [ 94.345137][ T7159] loop8: unable to read partition table [ 94.350188][ T7159] loop8: partition table beyond EOD, truncated [ 94.352266][ T7159] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 94.946968][ T5813] usb 5-1: USB disconnect, device number 8 [ 95.339529][ T7168] loop0: detected capacity change from 0 to 3904 [ 95.388931][ T7168] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 95.392036][ T7168] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 95.395644][ T7168] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 95.398125][ T7168] loop0: [ 95.494363][ T7172] kAFS: unable to lookup cell '' [ 96.395510][ T1034] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 96.556136][ T1034] usb 6-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 96.561013][ T1034] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.565335][ T1034] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 96.571100][ T1034] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.579370][ T1034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.582865][ T1034] usb 6-1: Product: syz [ 96.584553][ T1034] usb 6-1: Manufacturer: syz [ 96.587201][ T1034] usb 6-1: SerialNumber: syz [ 96.717057][ T1034] ushc 6-1:1.0: probe with driver ushc failed with error -110 [ 96.811536][ T7184] ushc 6-1:1.0: probe with driver ushc failed with error -32 [ 96.819780][ T3267] usb 6-1: USB disconnect, device number 12 [ 97.675544][ T5813] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 97.769612][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 97.839462][ T5813] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.850744][ T5813] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.854707][ T5813] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 97.861960][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.884222][ T5813] usb 6-1: config 0 descriptor?? [ 97.936555][ T5813] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 98.585383][ T3267] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.746267][ T3267] usb 5-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 98.750204][ T3267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.753494][ T3267] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.757832][ T3267] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.766941][ T3267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.772351][ T3267] usb 5-1: Product: syz [ 98.774154][ T3267] usb 5-1: Manufacturer: syz [ 98.784837][ T3267] usb 5-1: SerialNumber: syz [ 99.045867][ T3267] ushc 5-1:1.0: probe with driver ushc failed with error -110 [ 99.053366][ T3267] usb 5-1: USB disconnect, device number 9 [ 99.061073][ T5744] udevd[5744]: setting owner of /dev/bus/usb/005/009 to uid=0, gid=0 failed: No such file or directory [ 99.772872][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'. [ 100.095390][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 100.255396][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 100.258621][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.263606][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 100.268534][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.272582][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.276568][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.280700][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.286012][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.417578][ T3267] usb 6-1: USB disconnect, device number 13 [ 100.498394][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 100.500887][ T10] usbtmc 5-1:16.0: can't read capabilities [ 100.707466][ T3267] usb 5-1: USB disconnect, device number 10 [ 100.901842][ T7260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.247161][ T7266] set match dimension is over the limit! [ 101.471655][ T7260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.934993][ T7291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.696277][ T7370] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.055111][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 106.926554][ T7397] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 106.926554][ T7397] program syz.1.590 not setting count and/or reply_len properly [ 107.037639][ T7403] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 107.355479][ T3267] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 107.525392][ T3267] usb 6-1: Using ep0 maxpacket: 8 [ 107.528388][ T3267] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.533480][ T3267] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 107.537029][ T3267] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.541164][ T3267] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.545106][ T3267] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.549729][ T3267] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.554944][ T3267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.773646][ T3267] usb 6-1: GET_CAPABILITIES returned 0 [ 107.775603][ T3267] usbtmc 6-1:16.0: can't read capabilities [ 107.970552][ T3988] usb 6-1: USB disconnect, device number 14 [ 109.493004][ T7452] binder_alloc: 7451: binder_alloc_buf, no vma [ 109.615963][ T7457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.623768][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 110.012571][ T7471] netlink: 56 bytes leftover after parsing attributes in process `syz.0.620'. [ 110.315508][ T7478] binder_alloc: 7477: binder_alloc_buf, no vma [ 110.449851][ T7482] netlink: 132732 bytes leftover after parsing attributes in process `syz.1.625'. [ 111.135639][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 111.605477][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.805429][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 111.825790][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 111.875828][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.901714][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 111.908545][ T10] usb 5-1: Product: syz [ 111.910626][ T10] usb 5-1: Manufacturer: syz [ 111.912814][ T10] usb 5-1: SerialNumber: syz [ 111.962686][ T10] usb 5-1: config 0 descriptor?? [ 111.968679][ T7496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.977489][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 111.985452][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 112.359052][ T7522] comedi comedi1: warning! irq 16384 unavailable! [ 112.495684][ T5611] usb 5-1: USB disconnect, device number 11 [ 113.499596][ T7549] binder: BINDER_SET_CONTEXT_MGR already set [ 113.503064][ T7549] binder: 7548:7549 ioctl 4018620d 80004a80 returned -16 [ 113.549942][ T7551] jffs2: notice: (7551) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.693874][ T7554] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 114.047165][ T7573] jffs2: notice: (7573) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 114.784862][ T7608] jffs2: notice: (7608) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 114.962655][ T7620] binder: BINDER_SET_CONTEXT_MGR already set [ 114.964821][ T7620] binder: 7619:7620 ioctl 4018620d 80004a80 returned -16 [ 115.122801][ T7630] netlink: 56 bytes leftover after parsing attributes in process `syz.3.688'. [ 115.407593][ T1034] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 115.576441][ T1034] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 115.596388][ T1034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.600045][ T1034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 115.604274][ T1034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.614783][ T1034] usb 6-1: config 0 descriptor?? [ 115.635717][ T7637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.062191][ T1034] hid (null): report_id 0 is invalid [ 116.067951][ T1034] hid (null): unknown global tag 0xc [ 116.071333][ T1034] hid (null): report_id 0 is invalid [ 116.073255][ T1034] hid (null): unknown global tag 0xe [ 116.075204][ T1034] hid (null): unknown global tag 0xd [ 116.089568][ T1034] hid_parser_main: 3991 callbacks suppressed [ 116.089584][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.099811][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.105070][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.113654][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.117111][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.119408][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.121505][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.123771][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.136487][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.139253][ T1034] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 116.143748][ T1034] asus 0003:0B05:1ABE.0003: report_id 0 is invalid [ 116.147696][ T1034] asus 0003:0B05:1ABE.0003: item 0 0 1 8 parsing failed [ 116.151914][ T1034] asus 0003:0B05:1ABE.0003: Asus hid parse failed: -22 [ 116.154251][ T1034] asus 0003:0B05:1ABE.0003: probe with driver asus failed with error -22 [ 116.275229][ T7628] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in; [ 116.275229][ T7628] program syz.1.684 not setting count and/or reply_len properly [ 116.300800][ T1034] usb 6-1: USB disconnect, device number 15 [ 116.388521][ T7673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.705'. [ 116.500483][ T7683] netlink: 72 bytes leftover after parsing attributes in process `syz.0.710'. [ 116.663040][ T7697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.706575][ T7699] binder: BINDER_SET_CONTEXT_MGR already set [ 116.709075][ T7699] binder: 7698:7699 ioctl 4018620d 80004a80 returned -16 [ 116.854027][ T7710] loop0: detected capacity change from 0 to 3904 [ 116.901543][ T7710] loop0: [ 117.420138][ T5884] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.546313][ T7730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.552905][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 117.585397][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 117.587541][ T5884] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 117.592706][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.595481][ T5884] usb 5-1: Product: syz [ 117.596885][ T5884] usb 5-1: Manufacturer: syz [ 117.598819][ T5884] usb 5-1: SerialNumber: syz [ 117.601810][ T5884] usb 5-1: config 0 descriptor?? [ 117.809364][ T5884] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 117.815620][ T5813] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 117.852161][ T7735] jffs2: notice: (7735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.975341][ T5813] usb 8-1: Using ep0 maxpacket: 16 [ 117.977809][ T5813] usb 8-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 117.981449][ T5813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.984828][ T5813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.987957][ T5813] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.992335][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.996293][ T5813] usb 8-1: config 0 descriptor?? [ 118.505142][ T5813] hid-generic 0003:045E:9994.0004: unbalanced collection at end of report description [ 118.511054][ T5813] hid-generic 0003:045E:9994.0004: probe with driver hid-generic failed with error -22 [ 118.673923][ T1034] usb 8-1: USB disconnect, device number 11 [ 119.412203][ T7765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.418069][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 119.484556][ T5884] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 119.551874][ T5884] usb 5-1: USB disconnect, device number 12 [ 119.726438][ T7778] tls_set_device_offload: netdev not found [ 119.762857][ T7780] jffs2: notice: (7780) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.856367][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 120.065514][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 120.110740][ T7796] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 120.113320][ T7796] netlink: 'syz.0.757': attribute type 4 has an invalid length. [ 120.116535][ T7796] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.757'. [ 120.265422][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.345803][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 120.348480][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.351333][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.354085][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.357225][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.361525][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.418558][ T7803] jffs2: notice: (7803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 120.431348][ T7806] loop0: detected capacity change from 0 to 3904 [ 120.479192][ T7806] loop0: [ 120.572400][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 120.575188][ T9] usbtmc 7-1:16.0: can't read capabilities [ 120.773283][ T5822] usb 7-1: USB disconnect, device number 7 [ 120.778979][ T7772] usbtmc: can not find device for minor 0 [ 121.829656][ T7843] jffs2: notice: (7843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.953226][ T7852] netlink: 'syz.1.782': attribute type 39 has an invalid length. [ 122.078593][ T7860] loop0: detected capacity change from 0 to 3904 [ 122.582526][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 122.837377][ T7886] binder: 7885:7886 ioctl 4018620d 0 returned -22 [ 123.455339][ T5813] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 123.625394][ T5813] usb 8-1: Using ep0 maxpacket: 16 [ 123.628113][ T5813] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.632675][ T5813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.638820][ T5813] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.643838][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.648670][ T5813] usb 8-1: config 0 descriptor?? [ 123.725790][ T7915] binder: 7914:7915 ioctl 4018620d 0 returned -22 [ 124.064222][ T5813] HID 045e:07da: Invalid code 65791 type 1 [ 124.069293][ T5813] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0005/input/input7 [ 124.101684][ T5813] microsoft 0003:045E:07DA.0005: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 124.115213][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 124.120163][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2001: comm init: checksumming directory block 0 [ 124.124724][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 124.132091][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2001: comm init: checksumming directory block 0 [ 124.137254][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 124.141841][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2001: comm init: checksumming directory block 0 [ 124.145974][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 124.150592][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2001: comm init: checksumming directory block 0 [ 124.154494][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 124.159364][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2001: comm init: checksumming directory block 0 [ 124.163144][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 124.172490][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2001: comm init: checksumming directory block 0 [ 124.552969][ T7925] jffs2: notice: (7925) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.830029][ T7939] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.819'. [ 124.891354][ T7946] Bluetooth: MGMT ver 1.23 [ 125.141649][ T7961] binder: BINDER_SET_CONTEXT_MGR already set [ 125.144268][ T7961] binder: 7960:7961 ioctl 4018620d 80004a80 returned -16 [ 125.505429][ T5842] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 125.656145][ T5842] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.661166][ T5842] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.665451][ T5842] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.670611][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.673948][ T5842] usb 7-1: SerialNumber: syz [ 125.822486][ T7976] binder: 7975:7976 ioctl 4018620d 0 returned -22 [ 125.920599][ T5842] usb 7-1: 0:2 : does not exist [ 125.958882][ T5842] usb 7-1: USB disconnect, device number 8 [ 125.987105][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.109990][ T7986] binder: BINDER_SET_CONTEXT_MGR already set [ 126.111905][ T7986] binder: 7985:7986 ioctl 4018620d 80004a80 returned -16 [ 126.186760][ T7992] jffs2: notice: (7992) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.229417][ T5813] usb 8-1: USB disconnect, device number 12 [ 126.528026][ T8003] 9p: Bad value for 'wfdno' [ 126.594018][ T8008] loop0: detected capacity change from 0 to 3904 [ 126.723732][ T8010] binder: 8009:8010 ioctl c0306201 0 returned -14 [ 127.208879][ T8026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.215096][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 127.675404][ T1034] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 127.837111][ T1034] usb 6-1: Using ep0 maxpacket: 8 [ 127.839537][ T1034] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.847602][ T1034] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 127.852348][ T1034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.860726][ T1034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.863947][ T1034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.867263][ T1034] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.871453][ T1034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.034046][ T8042] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 128.037876][ T8042] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 128.040591][ T8042] CPU: 2 UID: 0 PID: 8042 Comm: syz.0.861 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.043909][ T8042] Tainted: [L]=SOFTLOCKUP [ 128.045286][ T8042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.048435][ T8042] RIP: 0010:subdev_open+0x193/0x510 [ 128.050104][ T8042] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 bc 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2c 24 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 04 03 00 00 48 8b 6d 00 48 85 ed 0f 84 95 00 00 [ 128.056059][ T8042] RSP: 0000:ffffc900233cf900 EFLAGS: 00010246 [ 128.057958][ T8042] RAX: dffffc0000000000 RBX: ffff8880299e4400 RCX: ffffc9000c402000 [ 128.060472][ T8042] RDX: 0000000000000000 RSI: ffffffff881c78e3 RDI: ffff888020fbe3d0 [ 128.063022][ T8042] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 128.065494][ T8042] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880266fc820 [ 128.068101][ T8042] R13: ffff8880004a6000 R14: ffff888025d08380 R15: ffff8880299e4538 [ 128.070615][ T8042] FS: 0000000000000000(0000) GS:ffff888096ba9000(0063) knlGS:00000000f5445b40 [ 128.073427][ T8042] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 128.075520][ T8042] CR2: 00000000f7420170 CR3: 000000004c205000 CR4: 0000000000352ef0 [ 128.078059][ T8042] Call Trace: [ 128.079140][ T8042] [ 128.080123][ T8042] v4l2_open+0x1d2/0x490 [ 128.081470][ T8042] ? __pfx_v4l2_open+0x10/0x10 [ 128.083018][ T8042] chrdev_open+0x234/0x6a0 [ 128.084434][ T8042] ? __pfx_apparmor_file_open+0x10/0x10 [ 128.086211][ T8042] ? __pfx_chrdev_open+0x10/0x10 [ 128.087835][ T8042] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 128.089839][ T8042] do_dentry_open+0x6ab/0x14d0 [ 128.091486][ T8042] ? __pfx_chrdev_open+0x10/0x10 [ 128.092250][ T1034] usb 6-1: GET_CAPABILITIES returned 0 [ 128.093503][ T8042] vfs_open+0x82/0x3f0 [ 128.096774][ T8042] path_openat+0x19fa/0x2440 [ 128.098258][ T8042] ? __pfx_path_openat+0x10/0x10 [ 128.098576][ T1034] usbtmc 6-1:16.0: can't read capabilities [ 128.099855][ T8042] do_file_open+0x20e/0x430 [ 128.099875][ T8042] ? __pfx_do_file_open+0x10/0x10 [ 128.104830][ T8042] ? _raw_spin_unlock+0x28/0x50 [ 128.106388][ T8042] ? alloc_fd+0x471/0x7a0 [ 128.107818][ T8042] do_sys_openat2+0x10f/0x1e0 [ 128.109330][ T8042] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.111006][ T8042] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 128.113015][ T8042] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 128.114811][ T8042] __ia32_compat_sys_openat+0x12d/0x210 [ 128.116513][ T8042] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 128.118480][ T8042] do_int80_emulation+0x166/0x650 [ 128.120102][ T8042] asm_int80_emulation+0x1a/0x20 [ 128.121669][ T8042] RIP: 0023:0xf71a74eb [ 128.122979][ T8042] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 128.129019][ T8042] RSP: 002b:00000000f544503c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 128.131638][ T8042] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5445100 [ 128.134115][ T8042] RDX: 0000000000000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.136621][ T8042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.139112][ T8042] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 128.141623][ T8042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.144138][ T8042] [ 128.145137][ T8042] Modules linked in: [ 128.147206][ T8042] ---[ end trace 0000000000000000 ]--- [ 128.150405][ T5128] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2001: comm syslogd: No space for directory leaf checksum. Please run e2fsck -D. [ 128.165433][ T5128] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2001: comm syslogd: checksumming directory block 0 Aug 21 17:33:14 syzkaller kern.alert kernel: [ 128.037876][ T8042] KASAN: null-[ 128.173850][ T8042] RIP: 0010:subdev_open+0x193/0x510 ptr-deref in ran[ 128.176775][ T8042] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 bc 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2c 24 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 04 03 00 00 48 8b 6d 00 48 85 ed 0f 84 95 00 00 ge [0x0000000000[ 128.184849][ T8042] RSP: 0000:ffffc900233cf900 EFLAGS: 00010246 000000-0x0000000[ 128.188002][ T8042] RAX: dffffc0000000000 RBX: ffff8880299e4400 RCX: ffffc9000c402000 000000007] [ 128.191459][ T8042] RDX: 0000000000000000 RSI: ffffffff881c78e3 RDI: ffff888020fbe3d0 [ 128.194560][ T8042] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 128.197485][ T8042] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880266fc820 [ 128.202696][ T8042] R13: ffff8880004a6000 R14: ffff888025d08380 R15: ffff8880299e4538 [ 128.207617][ T8042] FS: 0000000000000000(0000) GS:ffff888096ba9000(0063) knlGS:00000000f5445b40 [ 128.210738][ T8042] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 128.213111][ T8042] CR2: 00000000f7228b50 CR3: 000000004c205000 CR4: 0000000000352ef0 [ 128.216366][ T8042] Kernel panic - not syncing: Fatal exception [ 128.219547][ T8042] Kernel Offset: disabled [ 128.220958][ T8042] Rebooting in 86400 seconds..