last executing test programs: 9.769729056s ago: executing program 2 (id=2587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = eventfd2(0x0, 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) 8.523324039s ago: executing program 3 (id=2588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x8) 8.369678784s ago: executing program 2 (id=2590): mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@subj_type={'subj_type', 0x3d, '-.'}}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x10005}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 7.659322489s ago: executing program 2 (id=2592): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, 0x5, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) 7.30588565s ago: executing program 3 (id=2594): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, 0x0) ptrace$getsig(0x4202, r0, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x20000000000, 0xfffffffffffffffd, 0xef, 0x0, 0x1000001000, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0xb, 0x0, 0x8, 0x80000009}, 0x0, 0x0) socket(0x2b, 0x1, 0x1) 6.420684988s ago: executing program 0 (id=2595): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 5.817629671s ago: executing program 3 (id=2597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0x7e8, 0x9, 0x7, 0x0, 0x2, "65ddd5db82c93f07"}) 5.779124087s ago: executing program 4 (id=2598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x10, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfe}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x2000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x7f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0xfe}, {0x0, 0x8000000, 0xa, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0x9, 0xd801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2000, 0x8000, 0x0, 0x1, 0x0, [{0x1, 0x3, 0x6, '\x00', 0x91}, {0x6c, 0xbc, 0x15, '\x00', 0xf}, {0x5, 0x83, 0x6, '\x00', 0x95}, {0x0, 0x9, 0x8, '\x00', 0xd7}, {0x3, 0x5, 0x7, '\x00', 0x2}, {0x3, 0x3, 0x7f, '\x00', 0x89}, {0xb, 0x2, 0xb4, '\x00', 0x9}, {0x6, 0x0, 0x80, '\x00', 0x3}, {0xb, 0x4, 0x4, '\x00', 0xd}, {0x2, 0x7, 0x1, '\x00', 0x3a}, {0x5, 0xff, 0xc, '\x00', 0x5}, {0x3, 0xf2, 0x3, '\x00', 0x1e}, {0x8, 0x9, 0x8, '\x00', 0x3}, {0x2, 0x7, 0xa4}, {0x1, 0x40, 0x6, '\x00', 0x20}, {0xe, 0x4, 0xb, '\x00', 0x1}, {0x4d, 0xe, 0x6d}, {0xe, 0x8, 0x8, '\x00', 0xd3}, {0x0, 0x5, 0x2, '\x00', 0x2}, {0x7f, 0x0, 0x72, '\x00', 0x5}, {0x9, 0x4, 0x9, '\x00', 0x7}, {0x1, 0xe, 0x1, '\x00', 0x2}, {0x72, 0xe, 0x5}, {0x80, 0xd, 0x40}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x5, 0x0, [{0x1, 0x2, 0x1, 0x0, @msi={0x5, 0x4ec6}}, {0x9, 0x3, 0x1, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @msi}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)={0x676, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0011023}]}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x44, 0x80, 0x3, 0x3, 0x44, 0x8, 0xff, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x1, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x7, 0x15, 0x0, 0x2, 0x200000000004}], 0x9}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x1067a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0xfffffffffffffffd, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.541223051s ago: executing program 0 (id=2599): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x40010, 0x24114}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) 5.357337013s ago: executing program 1 (id=2600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = eventfd2(0x0, 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) 5.224518212s ago: executing program 0 (id=2601): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}]}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 4.547178315s ago: executing program 3 (id=2602): mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@subj_type={'subj_type', 0x3d, '-.'}}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x10005}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 4.309162171s ago: executing program 2 (id=2603): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x10000, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) truncate(&(0x7f0000000140)='./file0/file1\x00', 0x1000) 4.275907297s ago: executing program 4 (id=2604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x100000, 0xf00}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000940)=[@uexit={0x0, 0x18, 0x8}, @code={0xa, 0x71, {"0f20d835080000000f22d8b9bf080000b80a000000ba000000000f30b8010000000f01c166b8af000f00d8c4c299479be00b4c21b91d030000b83deb0000ba000000000f300f01dfb9800000c00f3235001000000f30642e2e450fc72e0f01c5"}}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x66, 0x18, {0x8aa}}, @rdmsr={0x32, 0x18, {0xbc5}}, @rdmsr={0x32, 0x18, {0x316}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffffff00}}, @wrmsr={0x1e, 0x20, {0x339, 0x17fffffff}}, @wr_crn={0x46, 0x20, {0x2, 0x4000000}}, @uexit={0x0, 0x18, 0x7ff}, @rdmsr={0x32, 0x18, {0x35c}}, @rdmsr={0x66, 0x18, {0x3f6}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @in_dx={0x69, 0x20, {0x8cf9}}, @wrmsr={0x1e, 0x20, {0x340, 0x5}}, @cpuid={0x14, 0x18, {0x3fd, 0x4}}], 0x209}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0x5, 0xb9, 0x1, 0x11, 0xd, 0x204}, {0x804, 0x0, 0x1, 0xfd, 0x87, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x4000001, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x71, 0x3, 0x5, 0x4}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x5, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x1, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x4, 0x2000000, 0x0, 0x2004cb, 0x0, 0x10a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x8, 0x4, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x4}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x7000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xf, 0xfe, 0x0, 0x0, 0xff}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.152880396s ago: executing program 0 (id=2605): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x2, 0xa, 0x5) socket$inet_udplite(0x2, 0x2, 0x88) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r0], 0x108}}], 0x2, 0xc040) 4.080470319s ago: executing program 1 (id=2606): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x9}, {0x1, 0x100003}]}]}}, 0x0, 0x62, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 3.365663025s ago: executing program 2 (id=2607): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, 0x0) ptrace$getsig(0x4202, r0, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x20000000000, 0xfffffffffffffffd, 0xef, 0x0, 0x1000001000, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0xb, 0x0, 0x8, 0x80000009}, 0x0, 0x0) socket(0x2b, 0x1, 0x1) 3.365104376s ago: executing program 1 (id=2608): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.354135556s ago: executing program 0 (id=2609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x14d1, {0x0, 0x0, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 3.302394621s ago: executing program 3 (id=2610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$getown(r1, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r5 = socket$inet6(0xa, 0x80002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r4, 0xffffffffffffffff, 0x0) 3.240422162s ago: executing program 4 (id=2611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) dup3(r1, r2, 0x0) 3.009600368s ago: executing program 1 (id=2612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0x7e8, 0x9, 0x7, 0x0, 0x2, "65ddd5db82c93f07"}) 2.573842355s ago: executing program 0 (id=2613): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, 0x5, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) 2.128071523s ago: executing program 4 (id=2614): socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0xfc, 0xfe, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xe) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0xfffffdfb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) eventfd(0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.589788215s ago: executing program 2 (id=2615): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x209}, {0x1, 0x3, 0x38, 0x2, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x5], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.508300868s ago: executing program 1 (id=2616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = eventfd2(0x0, 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) 1.042430254s ago: executing program 4 (id=2617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x4, r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a4000000000090002002564253200000000090001007379"], 0x40c4}}, 0x0) 18.224783ms ago: executing program 3 (id=2618): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000040)) 6.842731ms ago: executing program 1 (id=2619): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x7, 0x2, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 0s ago: executing program 4 (id=2620): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_io_uring_setup(0xc8f, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) kernel console output (not intermixed with test programs): elected [ 389.513501][T10261] input: syz1 as /devices/virtual/input/input12 [ 389.832430][T10269] overlayfs: missing 'lowerdir' [ 390.083158][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 390.988252][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 390.996341][ C1] lec:lec_tx_timeout: lec0 [ 391.001207][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.207458][T10300] netlink: 'syz.0.1333': attribute type 2 has an invalid length. [ 391.341120][T10302] overlayfs: missing 'workdir' [ 391.679892][T10308] tipc: Enabled bearer , priority 0 [ 391.719207][T10308] syzkaller0: entered promiscuous mode [ 391.753185][T10308] syzkaller0: entered allmulticast mode [ 391.950078][T10319] netlink: 'syz.3.1349': attribute type 4 has an invalid length. [ 392.320316][T10308] tipc: Resetting bearer [ 392.342737][T10307] tipc: Resetting bearer [ 392.383691][T10307] tipc: Disabling bearer [ 392.565563][T10326] overlayfs: missing 'workdir' [ 392.722633][T10333] No control pipe specified [ 393.548541][ T6391] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 394.608449][ T6391] usb 1-1: Using ep0 maxpacket: 32 [ 394.666032][ T6391] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 395.648415][ T6391] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 395.679191][ T6391] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 395.726129][T10371] bridge1: entered allmulticast mode [ 395.743491][T10370] bridge1: left allmulticast mode [ 395.754007][ T6391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.768235][ T6391] usb 1-1: Product: syz [ 395.772447][ T6391] usb 1-1: Manufacturer: syz [ 395.777076][ T6391] usb 1-1: SerialNumber: syz [ 395.801095][ T6391] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 395.828281][ T6391] usb 1-1: no configuration chosen from 1 choice [ 396.008198][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 396.016336][ C1] lec:lec_tx_timeout: lec0 [ 396.020960][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 396.064099][T10382] No control pipe specified [ 396.534183][ T6576] usb 1-1: USB disconnect, device number 13 [ 398.175911][T10411] netlink: 'syz.3.1371': attribute type 2 has an invalid length. [ 399.061481][T10439] tipc: Enabled bearer , priority 0 [ 399.084235][T10439] syzkaller0: entered promiscuous mode [ 399.091068][T10439] syzkaller0: entered allmulticast mode [ 399.189000][T10439] tipc: Resetting bearer [ 399.212664][T10438] tipc: Resetting bearer [ 399.292011][T10438] tipc: Disabling bearer [ 399.368357][T10441] syz_tun: entered allmulticast mode [ 399.382888][T10440] syz_tun: left allmulticast mode [ 400.303583][T10456] tipc: Enabling not permitted [ 400.309379][T10456] tipc: Enabling of bearer rejected, failed to enable media [ 400.722540][T10475] netlink: 'syz.2.1407': attribute type 3 has an invalid length. [ 400.749924][T10475] bridge1: entered allmulticast mode [ 400.757095][T10473] bridge1: left allmulticast mode [ 400.868337][ T6391] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 401.024486][ T6391] usb 5-1: device descriptor read/64, error -71 [ 401.028216][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 401.038916][ C1] lec:lec_tx_timeout: lec0 [ 401.044676][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.852535][ T6391] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 401.869791][T10499] siw: device registration error -23 [ 402.042373][T10507] netlink: 'syz.0.1420': attribute type 3 has an invalid length. [ 403.621750][T10541] netlink: 'syz.4.1433': attribute type 3 has an invalid length. [ 403.647254][T10541] syz_tun: entered allmulticast mode [ 403.664686][T10540] syz_tun: left allmulticast mode [ 403.776590][T10553] loop0: detected capacity change from 0 to 8 [ 403.781620][T10552] tipc: Enabled bearer , priority 0 [ 403.791194][T10552] syzkaller0: entered promiscuous mode [ 403.796772][T10552] syzkaller0: entered allmulticast mode [ 403.988442][ T6062] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 404.059782][T10555] netlink: 'syz.0.1438': attribute type 4 has an invalid length. [ 404.248680][ T6062] usb 3-1: device descriptor read/64, error -71 [ 404.265738][T10556] tipc: Resetting bearer [ 404.413329][T10550] tipc: Resetting bearer [ 404.466891][T10550] tipc: Disabling bearer [ 404.633552][ T6062] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 404.788671][ T6062] usb 3-1: device descriptor read/64, error -71 [ 404.873131][T10562] wlan1 speed is unknown, defaulting to 1000 [ 404.917967][T10562] ªªªªªª speed is unknown, defaulting to 1000 [ 404.927763][ T6062] usb usb3-port1: attempt power cycle [ 405.404040][ T6062] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 405.439008][ T6062] usb 3-1: device descriptor read/8, error -71 [ 405.518318][ T6391] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 405.680430][ T6391] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 405.698277][ T6391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.708246][ T6062] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 405.728291][ T6391] usb 5-1: config 0 descriptor?? [ 405.739627][ T6062] usb 3-1: device descriptor read/8, error -71 [ 405.744656][ T6391] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 405.795095][T10582] syz_tun: entered allmulticast mode [ 405.834774][T10581] syz_tun: left allmulticast mode [ 405.848661][ T6062] usb usb3-port1: unable to enumerate USB device [ 405.950387][ T6391] gspca_sn9c2028: read1 error -32 [ 405.957453][ T6391] gspca_sn9c2028: read1 error -32 [ 406.058206][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.066258][ C1] lec:lec_tx_timeout: lec0 [ 406.071364][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.130056][T10588] loop3: detected capacity change from 0 to 8 [ 406.292337][ T183] usb 5-1: USB disconnect, device number 9 [ 406.358217][T10589] netlink: 'syz.3.1451': attribute type 4 has an invalid length. [ 406.784938][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 407.120776][T10610] bridge1: entered allmulticast mode [ 407.140717][T10607] bridge1: left allmulticast mode [ 407.270217][T10619] loop2: detected capacity change from 0 to 8 [ 407.560927][T10627] netlink: 'syz.2.1464': attribute type 4 has an invalid length. [ 409.417766][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 409.445228][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 409.454507][T10657] netlink: 'syz.2.1476': attribute type 4 has an invalid length. [ 409.472727][T10653] tipc: Enabled bearer , priority 0 [ 409.483227][T10653] syzkaller0: entered promiscuous mode [ 409.490470][T10653] syzkaller0: entered allmulticast mode [ 409.500940][T10651] wlan1 speed is unknown, defaulting to 1000 [ 409.522708][T10651] ªªªªªª speed is unknown, defaulting to 1000 [ 409.531429][T10652] tipc: Resetting bearer [ 409.594774][T10652] tipc: Disabling bearer [ 409.648304][T10663] openvswitch: netlink: Message has 4 unknown bytes. [ 410.421573][T10671] siw: device registration error -23 [ 410.815674][T10674] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1482'. [ 411.078331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 411.086383][ C1] lec:lec_tx_timeout: lec0 [ 411.098282][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.197553][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 411.209308][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 411.314473][T10695] tipc: Enabled bearer , priority 0 [ 411.334877][T10695] syzkaller0: entered promiscuous mode [ 411.348658][T10695] syzkaller0: entered allmulticast mode [ 411.493235][T10694] tipc: Resetting bearer [ 411.587243][T10694] tipc: Disabling bearer [ 411.648695][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 411.828301][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 411.836270][ T9] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 411.846794][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 411.858517][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 255, changing to 11 [ 411.869812][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 411.879711][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.894867][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 411.912094][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.930127][ T9] usb 2-1: Product: syz [ 411.935051][ T9] usb 2-1: Manufacturer: syz [ 411.940371][ T9] usb 2-1: SerialNumber: syz [ 411.947896][ T9] usb 2-1: config 0 descriptor?? [ 411.973787][T10709] netlink: 'syz.3.1496': attribute type 3 has an invalid length. [ 411.981849][T10709] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1496'. [ 412.018329][ T43] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 412.149264][ T43] usb 1-1: device descriptor read/64, error -71 [ 412.418326][ T43] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 412.510357][T10724] loop4: detected capacity change from 0 to 8 [ 412.568617][ T43] usb 1-1: device descriptor read/64, error -71 [ 412.691803][T10726] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 412.701521][ T43] usb usb1-port1: attempt power cycle [ 413.063857][ T43] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 413.105731][T10730] tipc: Enabled bearer , priority 0 [ 413.109112][ T43] usb 1-1: device descriptor read/8, error -71 [ 413.147096][T10730] syzkaller0: entered promiscuous mode [ 413.154071][T10730] syzkaller0: entered allmulticast mode [ 413.191812][T10728] tipc: Resetting bearer [ 413.206021][T10733] siw: device registration error -23 [ 413.231043][T10728] tipc: Disabling bearer [ 413.370223][ T43] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 413.472354][T10748] rdma_rxe: rxe_newlink: failed to add lo [ 413.483295][T10748] ªªªªªª: renamed from lo (while UP) [ 413.574255][ T43] usb 1-1: device descriptor read/8, error -71 [ 413.689133][ T43] usb usb1-port1: unable to enumerate USB device [ 414.458713][ T5918] usb 2-1: USB disconnect, device number 10 [ 414.508040][T10762] siw: device registration error -23 [ 414.613108][T10768] tipc: Enabled bearer , priority 0 [ 414.629122][T10768] syzkaller0: entered promiscuous mode [ 414.634865][T10768] syzkaller0: entered allmulticast mode [ 414.651261][T10773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 414.677591][T10771] wlan1 speed is unknown, defaulting to 1000 [ 414.686586][T10765] tipc: Resetting bearer [ 414.720187][T10765] tipc: Disabling bearer [ 414.743680][T10771] ªªªªªª speed is unknown, defaulting to 1000 [ 414.763090][T10776] openvswitch: netlink: Duplicate or invalid key (type 0). [ 414.775943][T10776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.547499][T10793] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.1527'. [ 415.556884][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1527'. [ 416.108203][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 416.116250][ C1] lec:lec_tx_timeout: lec0 [ 416.120932][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 416.157806][T10797] openvswitch: netlink: Message has 4 unknown bytes. [ 416.189706][T10798] loop4: detected capacity change from 0 to 8 [ 416.396346][T10804] netlink: 'syz.4.1531': attribute type 4 has an invalid length. [ 416.708222][T10802] siw: device registration error -23 [ 417.146634][T10819] openvswitch: netlink: Duplicate or invalid key (type 0). [ 417.158437][T10819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.309314][ T5918] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 417.469392][ T5918] usb 2-1: device descriptor read/64, error -71 [ 418.137922][ T5918] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 418.308252][ T5918] usb 2-1: device descriptor read/64, error -71 [ 418.418730][ T5918] usb usb2-port1: attempt power cycle [ 418.550420][T10842] loop2: detected capacity change from 0 to 1024 [ 418.563531][T10842] EXT4-fs: inline encryption not supported [ 418.569662][T10842] EXT4-fs: Ignoring removed orlov option [ 418.576402][T10842] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 418.593707][T10842] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 418.604891][T10842] System zones: 0-1, 3-12 [ 418.616176][T10842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.713547][T10851] openvswitch: netlink: Duplicate or invalid key (type 0). [ 418.730496][T10851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.761817][ T5918] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 418.789137][ T5918] usb 2-1: device descriptor read/8, error -71 [ 419.027780][ T30] audit: type=1326 audit(1764171990.728:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.2.1549" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595138f749 code=0x0 [ 419.100964][T10861] tipc: Enabled bearer , priority 0 [ 419.693172][T10861] tipc: Resetting bearer [ 419.771932][ T5918] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 419.800063][ T5918] usb 2-1: device descriptor read/8, error -71 [ 419.846982][T10860] tipc: Disabling bearer [ 419.919768][ T5918] usb usb2-port1: unable to enumerate USB device [ 419.981336][T10870] siw: device registration error -23 [ 420.088279][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 420.112144][T10874] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1560'. [ 420.133971][T10876] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 420.136641][T10874] block nbd0: reconnected socket [ 420.170613][ T5840] block nbd0: Receive control failed (result -32) [ 420.260346][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 420.288242][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.333774][ T9] usb 4-1: config 0 descriptor?? [ 420.347318][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 420.372415][T10884] openvswitch: netlink: Duplicate or invalid key (type 0). [ 420.395362][T10884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.548940][ T9] gspca_sn9c2028: read1 error -32 [ 420.558832][ T9] gspca_sn9c2028: read1 error -32 [ 420.682856][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.799164][ T183] usb 4-1: USB disconnect, device number 16 [ 421.128193][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 421.136240][ C1] lec:lec_tx_timeout: lec0 [ 421.148258][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 421.294123][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 421.424042][T10896] siw: device registration error -23 [ 421.460279][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 421.469741][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 421.568653][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 421.582048][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 421.595654][ T9] usb 5-1: config 0 has no interface number 0 [ 421.608555][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 421.618023][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 421.668301][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.676349][ T9] usb 5-1: Product: syz [ 421.689669][ T9] usb 5-1: Manufacturer: syz [ 421.708311][ T9] usb 5-1: SerialNumber: syz [ 421.715674][ T9] usb 5-1: config 0 descriptor?? [ 421.740758][ T9] smsc75xx v1.0.0 [ 421.785853][T10915] openvswitch: netlink: Duplicate or invalid key (type 0). [ 421.814427][T10915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.824556][T10918] loop3: detected capacity change from 0 to 1024 [ 421.840613][T10918] EXT4-fs: inline encryption not supported [ 421.857469][T10918] EXT4-fs: Ignoring removed orlov option [ 421.875262][T10918] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 421.959493][T10927] openvswitch: netlink: Message has 4 unknown bytes. [ 422.020593][T10918] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 422.035956][T10918] System zones: 0-1, 3-12 [ 422.086596][T10918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.718843][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 422.731991][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 422.929858][ T30] audit: type=1326 audit(1764171994.628:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.3.1580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3f2d8f749 code=0x0 [ 423.172836][T10947] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1588'. [ 423.321273][T10953] syzkaller0: entered promiscuous mode [ 423.327115][T10953] syzkaller0: entered allmulticast mode [ 423.339450][T10953] 0: reclassify loop, rule prio 0, protocol 800 [ 423.528366][ T183] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 423.574721][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.621467][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 423.634602][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 423.654978][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 423.673414][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 423.720532][ T183] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 423.730601][ T183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.749129][ T183] usb 3-1: config 0 descriptor?? [ 423.758080][ T183] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 423.879416][T10971] netlink: 'syz.1.1601': attribute type 1 has an invalid length. [ 423.962996][T10971] bond1: (slave geneve2): making interface the new active one [ 423.975391][ T183] gspca_sn9c2028: read1 error -32 [ 423.982172][ T183] gspca_sn9c2028: read1 error -32 [ 423.991955][T10971] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 424.006947][ T6231] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.018283][ T6231] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.026588][ T6231] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.035061][ T6231] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.138692][T10983] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 424.193437][ T43] usb 3-1: USB disconnect, device number 16 [ 424.243114][T10985] wlan1 speed is unknown, defaulting to 1000 [ 424.252172][T10985] ªªªªªª speed is unknown, defaulting to 1000 [ 424.320785][T10988] wlan1 speed is unknown, defaulting to 1000 [ 424.548857][T10988] ªªªªªª speed is unknown, defaulting to 1000 [ 424.680844][ T43] usb 5-1: USB disconnect, device number 10 [ 425.139418][T11017] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 425.445226][T11024] siw: device registration error -23 [ 426.048779][ T7407] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 426.245271][ T7407] usb 3-1: unable to get BOS descriptor or descriptor too short [ 426.260084][ T7407] usb 3-1: not running at top speed; connect to a high speed hub [ 426.281787][ T7407] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.294432][ T7407] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.315610][ T7407] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.326344][ T7407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.334554][ T183] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 426.352877][ T7407] usb 3-1: Product: syz [ 426.357179][ T7407] usb 3-1: Manufacturer: syz [ 426.378466][ T7407] usb 3-1: SerialNumber: syz [ 426.498715][ T183] usb 4-1: Using ep0 maxpacket: 32 [ 426.516512][ T183] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 426.533160][ T183] usb 4-1: config 0 has no interface number 0 [ 426.548316][ T183] usb 4-1: config 0 interface 184 has no altsetting 0 [ 426.561784][ T183] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 426.581433][ T183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.590858][ T183] usb 4-1: Product: syz [ 426.595132][ T183] usb 4-1: Manufacturer: syz [ 426.599952][ T183] usb 4-1: SerialNumber: syz [ 426.608725][ T183] usb 4-1: config 0 descriptor?? [ 426.616410][ T183] smsc75xx v1.0.0 [ 426.660634][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 426.678662][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 426.687343][ T7407] usb 3-1: 0:2 : does not exist [ 426.715148][ T7407] usb 3-1: USB disconnect, device number 17 [ 426.918188][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 426.926277][ C1] lec:lec_tx_timeout: lec0 [ 426.931146][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.943905][T11059] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 427.232793][ T183] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 427.246623][ T183] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 427.837128][T11070] tipc: Enabling of bearer rejected, failed to enable media [ 427.937113][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 428.049045][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1641'. [ 428.233619][ T183] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 428.360188][ T183] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 428.509740][ T183] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 428.685633][ T183] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 429.041092][T11103] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 429.284782][ T183] usb 4-1: USB disconnect, device number 17 [ 429.509415][T11123] tipc: Enabling of bearer rejected, failed to enable media [ 430.428296][ T7407] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 430.580776][T11163] tipc: Enabling of bearer rejected, failed to enable media [ 430.591450][ T7407] usb 1-1: Using ep0 maxpacket: 32 [ 430.609036][ T7407] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 430.620398][ T7407] usb 1-1: config 0 has no interface number 0 [ 430.626536][ T7407] usb 1-1: config 0 interface 184 has no altsetting 0 [ 430.651299][ T7407] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 430.676518][T11164] wlan1 speed is unknown, defaulting to 1000 [ 430.682793][ T7407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.695418][T11164] ªªªªªª speed is unknown, defaulting to 1000 [ 430.701903][ T7407] usb 1-1: Product: syz [ 430.706200][ T7407] usb 1-1: Manufacturer: syz [ 430.711099][ T7407] usb 1-1: SerialNumber: syz [ 430.739234][ T7407] usb 1-1: config 0 descriptor?? [ 430.760084][ T7407] smsc75xx v1.0.0 [ 431.360505][ T7407] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 431.373871][ T7407] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 431.617770][ T7407] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 431.629050][ T7407] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 431.674990][ T7407] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 431.740668][ T7407] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 431.827657][T11204] syzkaller0: entered promiscuous mode [ 431.841297][T11204] syzkaller0: entered allmulticast mode [ 431.973116][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 431.981200][ C1] lec:lec_tx_timeout: lec0 [ 431.986286][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 432.101223][T11214] tipc: Enabled bearer , priority 0 [ 432.161406][T11214] tipc: Resetting bearer [ 432.177237][T11212] tipc: Disabling bearer [ 432.643954][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 432.948904][T11233] openvswitch: netlink: Message has 592 unknown bytes. [ 432.955843][T11233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.042170][T11239] openvswitch: netlink: Message has 4 unknown bytes. [ 433.213422][T11245] tipc: Enabled bearer , priority 0 [ 433.229131][T11245] tipc: Resetting bearer [ 433.268446][ T5918] usb 1-1: USB disconnect, device number 18 [ 433.299558][T11243] tipc: Disabling bearer [ 433.325539][T11250] IPVS: set_ctl: invalid protocol: 4 172.20.20.27:20004 [ 433.410109][T11254] tipc: Can't bind to reserved service type 2 [ 433.496402][T11254] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 433.553895][T11261] netlink: 'syz.3.1701': attribute type 1 has an invalid length. [ 433.597815][T11261] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1701'. [ 433.626086][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 433.905612][T11273] openvswitch: netlink: Message has 592 unknown bytes. [ 433.912737][T11273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.082358][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1709'. [ 434.413504][ T6454] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 434.578972][ T6454] usb 3-1: Using ep0 maxpacket: 32 [ 434.620036][ T6454] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 434.638506][ T6454] usb 3-1: config 0 has no interface number 0 [ 434.644689][ T6454] usb 3-1: config 0 interface 184 has no altsetting 0 [ 434.655591][ T6454] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 434.664998][ T6454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.673163][ T6454] usb 3-1: Product: syz [ 434.682159][ T6454] usb 3-1: Manufacturer: syz [ 434.686785][ T6454] usb 3-1: SerialNumber: syz [ 434.845157][ T6454] usb 3-1: config 0 descriptor?? [ 434.867495][ T6454] smsc75xx v1.0.0 [ 435.156745][T11291] syzkaller0: entered promiscuous mode [ 435.179979][T11291] syzkaller0: entered allmulticast mode [ 435.497555][ T6454] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 435.517230][ T6454] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 435.687524][T11309] wlan1 speed is unknown, defaulting to 1000 [ 435.699060][T11309] ªªªªªª speed is unknown, defaulting to 1000 [ 435.728084][ T6454] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 435.749214][ T6454] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 435.771556][ T6454] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 435.801942][ T6454] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 436.078329][ T6454] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 436.288254][ T6454] usb 5-1: Using ep0 maxpacket: 32 [ 436.300984][ T6454] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 436.343968][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 436.355395][T11324] siw: device registration error -23 [ 436.482738][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 436.512172][ T6454] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 436.561032][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 436.584670][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 436.606601][ T6454] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 436.618337][ T6454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.626490][ T6454] usb 5-1: Product: syz [ 436.632305][ T6454] usb 5-1: Manufacturer: syz [ 436.637072][ T6454] usb 5-1: SerialNumber: syz [ 436.646151][ T6454] usb 5-1: config 0 descriptor?? [ 436.752122][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 436.831750][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1730'. [ 437.008753][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 437.016804][ C1] lec:lec_tx_timeout: lec0 [ 437.021446][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 437.305383][ T7407] usb 3-1: USB disconnect, device number 18 [ 438.148281][ T5918] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 438.302089][ T5918] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 438.311510][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.325125][ T5918] usb 3-1: config 0 descriptor?? [ 438.334218][ T5918] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 438.534174][ T5918] gspca_sn9c2028: read1 error -32 [ 438.540087][ T5918] gspca_sn9c2028: read1 error -32 [ 438.648840][ T7407] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 438.710906][T11372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1745'. [ 438.762392][T11374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1746'. [ 438.808317][ T7407] usb 2-1: Using ep0 maxpacket: 32 [ 438.815589][ T7407] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 438.824328][ T7407] usb 2-1: config 0 has no interface number 0 [ 438.835342][ T9] usb 3-1: USB disconnect, device number 19 [ 438.842048][ T7407] usb 2-1: config 0 interface 184 has no altsetting 0 [ 438.865041][ T7407] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 438.886638][ T7407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.905282][ T183] usb 5-1: USB disconnect, device number 11 [ 438.913894][ T7407] usb 2-1: Product: syz [ 438.923755][ T7407] usb 2-1: Manufacturer: syz [ 438.932098][ T7407] usb 2-1: SerialNumber: syz [ 438.940233][ T7407] usb 2-1: config 0 descriptor?? [ 438.950539][ T7407] smsc75xx v1.0.0 [ 439.075622][T11386] syzkaller0: entered promiscuous mode [ 439.082001][T11386] syzkaller0: entered allmulticast mode [ 439.490091][T11398] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1756'. [ 439.580564][ T7407] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 439.601963][ T7407] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 439.775940][T11408] smc: removing ib device sz1 [ 439.816950][ T7407] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 439.851079][ T7407] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 439.870676][ T7407] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 439.890031][ T7407] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 440.576363][T11420] nr0: renamed from bond0 (while UP) [ 440.627000][T11420] A link change request failed with some changes committed already. Interface nr0 may have been left with an inconsistent configuration, please check. [ 440.750784][T11426] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1768'. [ 440.884644][T11428] syz_tun: entered promiscuous mode [ 440.898443][ T5918] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 441.075274][ T5918] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 441.097791][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.159079][ T5918] usb 5-1: config 0 descriptor?? [ 441.171339][ T5918] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 441.371014][ T5918] gspca_sn9c2028: read1 error -32 [ 441.391198][ T5918] gspca_sn9c2028: read1 error -32 [ 441.512388][ T7407] usb 2-1: USB disconnect, device number 15 [ 441.606074][ T5918] usb 5-1: USB disconnect, device number 12 [ 441.851857][T11442] openvswitch: netlink: Message has 4 unknown bytes. [ 442.028256][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 442.036395][ C1] lec:lec_tx_timeout: lec0 [ 442.041184][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 442.667340][T11455] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1779'. [ 442.897366][T11464] netlink: 'syz.1.1781': attribute type 1 has an invalid length. [ 442.926418][T11464] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 443.058298][ T7407] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 443.118590][T11467] openvswitch: netlink: Message has 4 unknown bytes. [ 443.418259][ T7407] usb 3-1: Using ep0 maxpacket: 32 [ 443.429645][ T7407] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 443.438239][ T7407] usb 3-1: config 0 has no interface number 0 [ 443.444368][ T7407] usb 3-1: config 0 interface 184 has no altsetting 0 [ 443.454328][ T7407] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 443.468360][ T7407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.487358][ T7407] usb 3-1: Product: syz [ 443.493525][ T7407] usb 3-1: Manufacturer: syz [ 443.503327][ T7407] usb 3-1: SerialNumber: syz [ 443.550287][T11475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1786'. [ 443.830778][ T7407] usb 3-1: config 0 descriptor?? [ 443.849660][ T7407] smsc75xx v1.0.0 [ 444.479679][ T7407] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 444.518250][ T7407] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 444.749716][ T7407] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 444.768234][ T7407] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 444.808255][ T7407] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 444.878236][ T7407] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 444.900644][ T7407] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 445.927586][ T7407] usb 3-1: USB disconnect, device number 20 [ 446.013364][T11501] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 446.174382][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1795'. [ 446.477599][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1797'. [ 447.048184][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 447.056250][ C1] lec:lec_tx_timeout: lec0 [ 447.061069][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.706136][T11428] Set syz1 is full, maxelem 65536 reached [ 449.248465][T11539] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.1805'. [ 449.257645][T11539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1805'. [ 449.664358][ T5903] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 449.706972][T11545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 449.791602][T11540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.931511][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 450.017367][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 450.024908][ T5903] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 450.034035][ T5903] usb 2-1: config 0 has no interface number 0 [ 450.046102][ T5903] usb 2-1: config 0 interface 184 has no altsetting 0 [ 450.055275][ T5903] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 450.064600][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.072801][ T5903] usb 2-1: Product: syz [ 450.077081][ T5903] usb 2-1: Manufacturer: syz [ 450.081912][ T5903] usb 2-1: SerialNumber: syz [ 450.098517][ T5903] usb 2-1: config 0 descriptor?? [ 450.305486][ T5903] smsc75xx v1.0.0 [ 451.000169][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 451.017809][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 451.234499][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 451.245819][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 451.265859][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 451.286449][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 451.307486][ T5903] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 451.388481][ T5935] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 451.578226][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 451.587132][ T5935] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 451.609678][T11575] netlink: 'syz.0.1818': attribute type 2 has an invalid length. [ 451.624191][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 451.645964][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.666261][ T5935] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.698544][ T5935] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.709988][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.938815][ T5935] usb 5-1: usb_control_msg returned -71 [ 451.944482][ T5935] usbtmc 5-1:16.0: can't read capabilities [ 452.002242][ T5935] usb 5-1: USB disconnect, device number 13 [ 452.068200][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 452.076287][ C1] lec:lec_tx_timeout: lec0 [ 452.080997][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 452.283567][ T7407] usb 2-1: USB disconnect, device number 16 [ 453.370084][T11598] syzkaller0: entered promiscuous mode [ 453.482008][T11599] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1822'. [ 453.491297][T11599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1822'. [ 453.986337][T11598] syzkaller0: entered allmulticast mode [ 454.449768][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 454.778276][ T5935] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 455.488359][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 455.500775][ T5935] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 455.528266][ T5935] usb 2-1: config 0 has no interface number 0 [ 455.548350][ T5935] usb 2-1: config 0 interface 184 has no altsetting 0 [ 455.583297][ T5935] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 455.611907][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.638500][ T5935] usb 2-1: Product: syz [ 455.642717][ T5935] usb 2-1: Manufacturer: syz [ 455.652704][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'. [ 455.668894][ T5935] usb 2-1: SerialNumber: syz [ 455.699260][ T5935] usb 2-1: config 0 descriptor?? [ 455.730158][ T5935] smsc75xx v1.0.0 [ 455.845716][T11636] wlan1 speed is unknown, defaulting to 1000 [ 456.229360][T11647] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.1838'. [ 456.238714][T11647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1838'. [ 456.725434][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 456.776443][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 456.829261][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 456.865514][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 456.906638][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 456.941579][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 456.978555][ T5935] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 457.088195][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 457.096241][ C1] lec:lec_tx_timeout: lec0 [ 457.101014][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 457.321801][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'. [ 457.463754][T11659] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 457.532017][T11657] netlink: 'syz.2.1840': attribute type 2 has an invalid length. [ 457.877184][T11652] binder_alloc: 11651: binder_alloc_buf, no vma [ 458.250767][ T43] usb 2-1: USB disconnect, device number 17 [ 458.496463][T11682] siw: device registration error -23 [ 459.032223][T11697] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1855'. [ 459.041454][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1855'. [ 461.204281][T11730] openvswitch: netlink: Message has 592 unknown bytes. [ 461.211435][T11730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.665262][T11739] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1872'. [ 461.674553][T11739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1872'. [ 462.108171][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 462.116299][ C1] lec:lec_tx_timeout: lec0 [ 462.122884][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 462.517486][T11734] binder_alloc: 11733: binder_alloc_buf, no vma [ 462.602655][T11747] tipc: Enabling of bearer rejected, failed to enable media [ 462.727989][T11753] netlink: 'syz.1.1865': attribute type 2 has an invalid length. [ 462.930268][T11760] siw: device registration error -23 [ 463.936987][T11777] openvswitch: netlink: Message has 592 unknown bytes. [ 463.944439][T11777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.251216][T11785] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 464.290629][T11790] tipc: Enabling of bearer rejected, failed to enable media [ 464.407935][T11793] bridge0: entered promiscuous mode [ 464.429925][T11793] bridge0: port 3(macvtap1) entered blocking state [ 464.453578][T11793] bridge0: port 3(macvtap1) entered disabled state [ 464.474039][T11793] macvtap1: entered allmulticast mode [ 464.487331][T11793] bridge0: entered allmulticast mode [ 464.512960][T11793] macvtap1: left allmulticast mode [ 464.525514][T11793] bridge0: left allmulticast mode [ 464.551709][T11793] bridge0: left promiscuous mode [ 464.996248][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 465.465512][T11834] wlan1 speed is unknown, defaulting to 1000 [ 466.274732][T11854] tipc: Enabling of bearer rejected, failed to enable media [ 466.396187][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 466.807187][T11873] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 467.138175][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 467.146277][ C1] lec:lec_tx_timeout: lec0 [ 467.151197][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 468.044164][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 469.132223][T11914] tipc: Enabling of bearer rejected, failed to enable media [ 469.246180][T11919] wlan1 speed is unknown, defaulting to 1000 [ 469.289896][T11922] siw: device registration error -23 [ 469.323253][T11925] netlink: 'syz.4.1926': attribute type 8 has an invalid length. [ 469.543573][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1932'. [ 469.718485][T11925] wlan1 speed is unknown, defaulting to 1000 [ 469.749129][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 471.040313][T11980] siw: device registration error -23 [ 471.854306][T11986] syzkaller0: entered promiscuous mode [ 471.888465][T11986] syzkaller0: entered allmulticast mode [ 472.028529][T11995] tipc: Enabling of bearer rejected, failed to enable media [ 472.398520][T12004] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1946'. [ 472.410039][T12006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1945'. [ 472.636623][T12018] batman_adv: batadv0: Adding interface: dummy0 [ 472.678722][T12018] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.768243][T12018] batman_adv: batadv0: Interface activated: dummy0 [ 472.848365][ T183] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 473.028373][ T183] usb 5-1: Using ep0 maxpacket: 8 [ 473.272741][ T183] usb 5-1: no configurations [ 473.277414][ T183] usb 5-1: can't read configurations, error -22 [ 473.295588][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 473.398176][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6250 ms [ 473.406274][ C1] lec:lec_tx_timeout: lec0 [ 473.411011][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 473.972572][ T183] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 474.151279][ T183] usb 5-1: Using ep0 maxpacket: 8 [ 474.160688][ T183] usb 5-1: no configurations [ 474.176004][ T183] usb 5-1: can't read configurations, error -22 [ 474.192202][ T183] usb usb5-port1: attempt power cycle [ 474.340505][T12047] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1960'. [ 474.538316][ T183] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 474.591388][ T183] usb 5-1: Using ep0 maxpacket: 8 [ 474.603303][ T183] usb 5-1: no configurations [ 475.153934][ T183] usb 5-1: can't read configurations, error -22 [ 475.288468][ T183] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 475.341804][ T183] usb 5-1: Using ep0 maxpacket: 8 [ 475.348941][ T183] usb 5-1: no configurations [ 475.558360][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 475.803241][ T183] usb 5-1: can't read configurations, error -22 [ 475.810486][ T183] usb usb5-port1: unable to enumerate USB device [ 475.818288][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 475.841017][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 475.859813][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 475.888870][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 475.946595][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 476.033027][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 476.483512][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1970'. [ 476.491102][ T43] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 476.518346][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.534803][ T43] usb 2-1: Product: syz [ 476.539054][ T43] usb 2-1: Manufacturer: syz [ 476.543663][ T43] usb 2-1: SerialNumber: syz [ 476.565784][ T43] usb 2-1: config 0 descriptor?? [ 476.625224][T12077] xt_hashlimit: size too large, truncated to 1048576 [ 476.693715][T12080] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1973'. [ 477.100115][ T43] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 477.116840][ T43] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 477.366375][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.435221][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.488051][ T5903] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 477.497833][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.605442][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.698441][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.715433][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.819313][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.828615][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.838288][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 477.843517][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.851031][ T5903] usb 1-1: no configurations [ 477.855668][ T5903] usb 1-1: can't read configurations, error -22 [ 477.865754][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.873183][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.881873][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.891167][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.897661][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.908837][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.915239][ T43] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 477.969272][ T43] input input13: Timeout waiting for response from device. [ 477.998491][ T5903] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 478.047530][ T43] usb 2-1: USB disconnect, device number 18 [ 478.188373][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 478.293488][ T5903] usb 1-1: no configurations [ 478.381924][ T5903] usb 1-1: can't read configurations, error -22 [ 478.398977][ T5903] usb usb1-port1: attempt power cycle [ 479.067004][ T5903] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 479.102940][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 479.110418][ T5903] usb 1-1: no configurations [ 479.115063][ T5903] usb 1-1: can't read configurations, error -22 [ 479.158207][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 479.166280][ C1] lec:lec_tx_timeout: lec0 [ 479.170940][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 479.268344][ T5903] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 479.289120][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 479.306713][ T5903] usb 1-1: no configurations [ 479.308768][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 479.320270][ T5903] usb 1-1: can't read configurations, error -22 [ 479.320654][ T5903] usb usb1-port1: unable to enumerate USB device [ 479.337044][T12127] tipc: New replicast peer: 255.255.255.255 [ 479.346868][T12127] tipc: Enabled bearer , priority 10 [ 479.356577][T12127] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 479.376072][T12127] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1988'. [ 479.788314][ T7407] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 479.938291][ T7407] usb 2-1: Using ep0 maxpacket: 32 [ 479.945225][ T7407] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 479.957219][ T7407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 479.968806][ T7407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 479.978625][ T7407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 479.990101][ T7407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 480.004782][ T7407] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 480.013961][ T7407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.022075][ T7407] usb 2-1: Product: syz [ 480.026261][ T7407] usb 2-1: Manufacturer: syz [ 480.030988][ T7407] usb 2-1: SerialNumber: syz [ 480.039493][ T7407] usb 2-1: config 0 descriptor?? [ 480.156860][T12150] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 480.316414][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 480.987706][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 481.099351][ T5935] tipc: Node number set to 813509815 [ 481.119992][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 481.144390][T12164] lo speed is unknown, defaulting to 1000 [ 481.169702][T12164] lo speed is unknown, defaulting to 1000 [ 481.176422][T12164] lo speed is unknown, defaulting to 1000 [ 481.229618][T12172] ªªªªªª: renamed from lo (while UP) [ 481.327691][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.337099][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.358246][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.373587][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.387198][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.414481][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.431441][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.572711][T12164] infiniband sz1: set active [ 481.577560][T12164] infiniband sz1: added ªªªªªª [ 481.602609][ T5935] ªªªªªª speed is unknown, defaulting to 1000 [ 481.622203][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.629820][T12164] RDS/IB: sz1: added [ 481.633948][T12164] smc: adding ib device sz1 with port count 1 [ 481.640381][T12164] smc: ib device sz1 port 1 has no pnetid [ 481.649957][T12164] ªªªªªª speed is unknown, defaulting to 1000 [ 481.731597][ T5935] ªªªªªª speed is unknown, defaulting to 1000 [ 481.749998][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.763088][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.780781][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.794131][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.808987][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.822245][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.852808][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.868612][ T7407] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 481.886237][ T7407] input input14: Timeout waiting for response from device. [ 481.922967][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 481.961092][ T7407] usb 2-1: USB disconnect, device number 19 [ 482.658410][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 482.665279][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.678158][ T43] usb 3-1: config 0 has no interfaces? [ 482.743801][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 482.809930][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.872796][ T43] usb 3-1: Product: syz [ 482.904896][ T43] usb 3-1: Manufacturer: syz [ 482.941078][ T43] usb 3-1: SerialNumber: syz [ 483.088586][T12164] ªªªªªª speed is unknown, defaulting to 1000 [ 483.127088][ T43] usb 3-1: config 0 descriptor?? [ 483.254459][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2016'. [ 483.633987][T12164] ªªªªªª speed is unknown, defaulting to 1000 [ 484.484148][ T6454] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 484.918166][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 484.926219][ C1] lec:lec_tx_timeout: lec0 [ 484.938243][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 485.303252][ T5918] usb 3-1: USB disconnect, device number 21 [ 485.368285][ T6454] usb 5-1: Using ep0 maxpacket: 32 [ 485.398785][ T6454] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 485.426395][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 485.616209][T12164] ªªªªªª speed is unknown, defaulting to 1000 [ 485.646200][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 485.657312][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 485.670910][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 485.693196][ T6454] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 485.870404][ T6454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.011750][ T6454] usb 5-1: Product: syz [ 486.083694][ T6454] usb 5-1: Manufacturer: syz [ 486.155292][ T6454] usb 5-1: SerialNumber: syz [ 486.434656][ T6454] usb 5-1: config 0 descriptor?? [ 487.140722][ T6454] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 487.147739][ T6454] input input15: Device does not respond to id packet M [ 487.182600][ T6454] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 487.583563][ T6454] input input15: Device does not respond to id packet P [ 487.690065][ T6454] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 487.696149][ T6454] input input15: Device does not respond to id packet B [ 487.744017][ T6454] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 487.764866][T12164] ªªªªªª speed is unknown, defaulting to 1000 [ 487.787428][ T6454] input input15: Device does not respond to id packet N [ 487.804825][ T6454] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 487.840242][ T6454] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 487.867183][ T6454] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 487.900844][ T6454] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 487.930865][ T6454] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 488.015711][ T6454] usb 5-1: USB disconnect, device number 18 [ 489.314798][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f47000: rx timeout, send abort [ 489.816707][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f47400: rx timeout, send abort [ 489.828178][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f47000: abort rx timeout. Force session deactivation [ 489.958486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 489.966559][ C1] lec:lec_tx_timeout: lec0 [ 489.971268][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 490.115994][T12312] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 490.324983][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f47400: abort rx timeout. Force session deactivation [ 491.371027][T12324] Process accounting resumed [ 491.792229][T12345] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 492.204752][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561d6c00: rx timeout, send abort [ 492.705246][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561d7000: rx timeout, send abort [ 492.713609][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561d6c00: abort rx timeout. Force session deactivation [ 492.715503][T12355] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 493.178294][ T5935] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 493.197866][T12374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.207022][T12374] IPv6: NLM_F_CREATE should be set when creating new route [ 493.214353][T12374] IPv6: NLM_F_CREATE should be set when creating new route [ 493.221955][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561d7000: abort rx timeout. Force session deactivation [ 493.233025][T12374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.295312][T12376] xt_policy: neither incoming nor outgoing policy selected [ 493.316957][T12376] input: syz1 as /devices/virtual/input/input16 [ 493.328716][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 493.359661][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 493.397693][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 493.414040][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 493.435961][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 493.449304][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 493.463492][ T5935] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 493.473615][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.483868][ T5935] usb 2-1: Product: syz [ 493.488060][ T5935] usb 2-1: Manufacturer: syz [ 493.492958][ T5935] usb 2-1: SerialNumber: syz [ 493.549087][ T5935] usb 2-1: config 0 descriptor?? [ 494.734511][ T5935] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 494.752495][ T5935] input input17: Device does not respond to id packet M [ 494.763994][ T5935] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 494.776455][ T5935] input input17: Device does not respond to id packet P [ 494.978252][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 494.986385][ C1] lec:lec_tx_timeout: lec0 [ 494.998483][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 495.532672][ T5935] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 495.538915][ T5935] input input17: Device does not respond to id packet B [ 495.546260][ T5935] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 495.552373][ T5935] input input17: Device does not respond to id packet N [ 495.568579][ T5935] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 495.602648][ T5935] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 495.622190][ T5935] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 495.643202][ T5935] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 495.666964][ T5935] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 495.758427][ T5935] usb 2-1: USB disconnect, device number 20 [ 496.051129][T12405] siw: device registration error -23 [ 496.468334][ T5935] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 497.278279][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 497.290029][ T5935] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 497.301638][ T5935] usb 1-1: config 0 has no interface number 0 [ 497.310631][ T5935] usb 1-1: config 0 interface 184 has no altsetting 0 [ 497.324386][ T5935] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 497.349144][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.368907][ T5935] usb 1-1: Product: syz [ 497.456311][ T5935] usb 1-1: Manufacturer: syz [ 497.466461][ T5935] usb 1-1: SerialNumber: syz [ 497.477614][ T5935] usb 1-1: config 0 descriptor?? [ 497.489919][ T5935] smsc75xx v1.0.0 [ 497.913588][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 497.926866][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 497.938537][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 497.949522][ T5935] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 497.983116][T12413] netlink: 'syz.4.2088': attribute type 2 has an invalid length. [ 498.998446][ T5911] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 499.200369][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 499.385974][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 499.404750][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 499.497174][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 499.542855][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 499.599577][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 499.639615][ T5911] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 499.804313][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.817336][ T6454] usb 1-1: USB disconnect, device number 23 [ 499.836890][ T5911] usb 4-1: Product: syz [ 499.848255][ T5911] usb 4-1: Manufacturer: syz [ 499.857182][ T5911] usb 4-1: SerialNumber: syz [ 499.873507][ T5911] usb 4-1: config 0 descriptor?? [ 500.008219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 500.016293][ C1] lec:lec_tx_timeout: lec0 [ 500.028235][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 500.961452][T12468] xt_policy: neither incoming nor outgoing policy selected [ 500.972363][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 501.002017][ T5911] input input18: Device does not respond to id packet M [ 501.028785][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 501.105518][ T5911] input input18: Device does not respond to id packet P [ 501.113294][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 501.119590][ T5911] input input18: Device does not respond to id packet B [ 501.135600][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 501.140636][T12468] input: syz1 as /devices/virtual/input/input19 [ 501.141860][ T5911] input input18: Device does not respond to id packet N [ 501.168564][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 501.185390][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 501.193948][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 501.215001][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 501.234334][ T5911] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 501.335133][ T5911] usb 4-1: USB disconnect, device number 18 [ 504.611891][ T6282] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 505.038143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 505.046229][ C1] lec:lec_tx_timeout: lec0 [ 505.058217][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 505.208284][ T6282] usb 5-1: Using ep0 maxpacket: 32 [ 505.216475][ T6282] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 505.225414][ T6282] usb 5-1: config 0 has no interface number 0 [ 505.232394][ T6282] usb 5-1: config 0 interface 184 has no altsetting 0 [ 505.242038][ T6282] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 505.810085][ T6282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.818489][ T6282] usb 5-1: Product: syz [ 505.822682][ T6282] usb 5-1: Manufacturer: syz [ 505.827311][ T6282] usb 5-1: SerialNumber: syz [ 505.912908][ T6282] usb 5-1: config 0 descriptor?? [ 505.942713][ T6282] usb 5-1: can't set config #0, error -71 [ 505.959889][ T6282] usb 5-1: USB disconnect, device number 19 [ 506.019097][T12508] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 507.075376][T12517] zonefs (nullb0) ERROR: Not a zoned block device [ 507.103470][T12525] syzkaller0: entered promiscuous mode [ 507.110160][T12525] syzkaller0: entered allmulticast mode [ 507.266920][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 508.332074][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.342574][ T5918] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 508.358687][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.375083][ T5918] usb 3-1: config 0 descriptor?? [ 508.386521][ T5918] pwc: Askey VC010 type 2 USB webcam detected. [ 508.610276][ T5918] pwc: send_video_command error -71 [ 508.615522][ T5918] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 508.625055][ T5918] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 508.637218][ T5918] usb 3-1: USB disconnect, device number 22 [ 509.388258][ T5911] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 509.483070][T12551] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2132'. [ 509.487487][T12552] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 509.538253][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 509.550704][ T5911] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 509.572150][ T5911] usb 4-1: config 0 has no interface number 0 [ 509.581734][ T5911] usb 4-1: config 0 interface 184 has no altsetting 0 [ 509.594317][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 509.604117][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.612512][ T5911] usb 4-1: Product: syz [ 509.617000][ T5911] usb 4-1: Manufacturer: syz [ 509.623655][ T5911] usb 4-1: SerialNumber: syz [ 509.628568][ T5918] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 509.642885][ T5911] usb 4-1: config 0 descriptor?? [ 509.651403][ T5911] smsc75xx v1.0.0 [ 509.773080][T12564] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 509.810463][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.821193][ T5918] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 509.830485][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.844557][ T5918] usb 3-1: config 0 descriptor?? [ 509.863685][ T5918] pwc: Askey VC010 type 2 USB webcam detected. [ 509.914501][T12568] syzkaller0: entered promiscuous mode [ 509.920101][T12568] syzkaller0: entered allmulticast mode [ 510.057066][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 510.068160][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 510.076211][ C1] lec:lec_tx_timeout: lec0 [ 510.080828][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 510.099513][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 510.123081][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 510.145938][ T5911] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 510.291252][ T5918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 510.298515][ T5918] pwc: recv_control_msg error -32 req 02 val 2700 [ 510.305751][ T5918] pwc: recv_control_msg error -32 req 02 val 2c00 [ 510.313309][ T5918] pwc: recv_control_msg error -32 req 04 val 1000 [ 510.321382][ T5918] pwc: recv_control_msg error -32 req 04 val 1300 [ 510.356047][ T5918] pwc: recv_control_msg error -32 req 04 val 1400 [ 510.874824][ T5918] pwc: recv_control_msg error -32 req 02 val 2000 [ 510.989116][ T5918] pwc: recv_control_msg error -32 req 02 val 2100 [ 511.009468][ T5918] pwc: recv_control_msg error -32 req 04 val 1500 [ 511.029025][ T5918] pwc: recv_control_msg error -32 req 02 val 2500 [ 511.036599][ T5918] pwc: recv_control_msg error -32 req 02 val 2400 [ 511.050205][ T5918] pwc: recv_control_msg error -32 req 02 val 2600 [ 511.269127][ T5918] pwc: recv_control_msg error -71 req 02 val 2800 [ 511.286523][ T5918] pwc: recv_control_msg error -71 req 04 val 1100 [ 511.390125][ T5918] pwc: recv_control_msg error -71 req 04 val 1200 [ 511.592772][ T5918] pwc: Registered as video103. [ 511.687889][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 511.748431][ T6282] usb 4-1: USB disconnect, device number 19 [ 511.769540][ T5918] usb 3-1: USB disconnect, device number 23 [ 511.946140][T12598] netlink: 'syz.1.2149': attribute type 1 has an invalid length. [ 512.973868][ T30] audit: type=1800 audit(1764172084.458:6): pid=12616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2156" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 513.208224][ T5911] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 513.422664][ T5911] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 513.473341][ T5911] usb 1-1: config 0 has no interface number 0 [ 513.520625][ T5911] usb 1-1: too many endpoints for config 0 interface 231 altsetting 238: 205, using maximum allowed: 30 [ 513.572332][ T5911] usb 1-1: config 0 interface 231 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 513.624406][ T5911] usb 1-1: config 0 interface 231 has no altsetting 0 [ 513.698224][ T5911] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 513.707967][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.912382][ T5911] usb 1-1: Product: syz [ 513.917368][ T5911] usb 1-1: Manufacturer: syz [ 513.922303][ T5911] usb 1-1: SerialNumber: syz [ 513.931764][ T5911] usb 1-1: config 0 descriptor?? [ 515.088162][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 515.096352][ C1] lec:lec_tx_timeout: lec0 [ 515.100986][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 515.831317][ T5911] hub 1-1:0.231: bad descriptor, ignoring hub [ 515.998601][ T5911] hub 1-1:0.231: probe with driver hub failed with error -5 [ 516.036294][ T5911] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 516.105728][ T5911] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 516.116196][ T5911] dib0700: firmware download failed at 7 with -22 [ 516.155985][ T5911] usb 1-1: USB disconnect, device number 24 [ 519.268261][ T183] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 519.438390][ T183] usb 5-1: Using ep0 maxpacket: 8 [ 519.539900][ T183] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 519.565676][ T183] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 519.578993][ T183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.593985][ T183] usb 5-1: Product: syz [ 519.613717][ T183] usb 5-1: Manufacturer: syz [ 519.618564][ T183] usb 5-1: SerialNumber: syz [ 519.646348][ T183] usb 5-1: config 0 descriptor?? [ 520.108143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 520.116264][ C1] lec:lec_tx_timeout: lec0 [ 520.121027][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 521.293403][T12742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2198'. [ 522.062503][ T6576] usb 5-1: USB disconnect, device number 20 [ 522.955696][T12776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2209'. [ 523.073443][ T6576] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 523.231295][T12783] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 523.241013][ T6576] usb 1-1: Using ep0 maxpacket: 16 [ 523.249313][ T6576] usb 1-1: unable to get BOS descriptor or descriptor too short [ 523.809537][ T6576] usb 1-1: config 4 has an invalid interface number: 248 but max is 0 [ 523.818934][ T6576] usb 1-1: config 4 has no interface number 0 [ 523.825285][ T6576] usb 1-1: config 4 interface 248 has no altsetting 0 [ 524.221919][ T30] audit: type=1326 audit(1764172095.918:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000 [ 524.250595][ T6576] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=bb.31 [ 524.259830][ T6576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.269502][ T6576] usb 1-1: Product: syz [ 524.273715][ T6576] usb 1-1: Manufacturer: syz [ 524.288599][ T6576] usb 1-1: SerialNumber: syz [ 524.300365][ T30] audit: type=1326 audit(1764172095.928:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000 [ 524.384402][ T30] audit: type=1326 audit(1764172095.948:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000 [ 524.454993][ T30] audit: type=1326 audit(1764172095.948:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000 [ 524.481041][ T30] audit: type=1326 audit(1764172095.948:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000 [ 524.514047][ T30] audit: type=1326 audit(1764172095.948:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000 [ 524.578214][ T30] audit: type=1326 audit(1764172095.948:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm=2B6AF540 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000 [ 524.620151][T12804] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2221'. [ 524.647339][ T30] audit: type=1326 audit(1764172095.948:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm=2B6AF540 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000 [ 524.672900][T12807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2222'. [ 524.705030][ T30] audit: type=1326 audit(1764172096.268:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595138f749 code=0x7ffc0000 [ 524.731587][ T6576] snd_usb_podhd 1-1:4.248: Line 6 POD HD300 found [ 524.748937][ T6576] usb 1-1: selecting invalid altsetting 5 [ 524.761592][ T6576] snd_usb_podhd 1-1:4.248: set_interface failed [ 524.772871][ T6576] snd_usb_podhd 1-1:4.248: Line 6 POD HD300 now disconnected [ 524.782847][ T30] audit: type=1326 audit(1764172096.278:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595138f749 code=0x7ffc0000 [ 524.807836][ T6576] snd_usb_podhd 1-1:4.248: probe with driver snd_usb_podhd failed with error -22 [ 524.823353][ T6576] usb 1-1: USB disconnect, device number 25 [ 525.013298][T12821] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 525.128257][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 525.136374][ C1] lec:lec_tx_timeout: lec0 [ 525.141022][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 525.221523][ T5903] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 525.454242][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 525.560984][ T5903] usb 2-1: not running at top speed; connect to a high speed hub [ 525.653393][ T5903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.730186][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.851104][ T5903] usb 2-1: string descriptor 0 read error: -22 [ 525.862298][ T5903] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.904111][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.937545][ T5903] usb 2-1: 0:2 : does not exist [ 526.159155][T12835] loop3: detected capacity change from 0 to 32768 [ 526.182110][T12835] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 526.197012][T12835] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 526.206914][T12835] OCFS2: File system is now read-only. [ 526.212430][T12835] (syz.3.2231,12835,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 526.220762][T12835] (syz.3.2231,12835,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 526.229696][T12835] (syz.3.2231,12835,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 526.240068][T12835] (syz.3.2231,12835,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 526.248940][T12835] (syz.3.2231,12835,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 526.257689][T12835] (syz.3.2231,12835,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 527.130658][T12852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2235'. [ 527.959424][ T5903] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 527.981803][ T5903] usb 2-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 528.003289][ T5903] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/-8016 [ 528.036953][ T5903] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 528.092730][ T5903] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 528.186504][T12874] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 528.363249][ T5903] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 528.375041][ T5903] usb 2-1: USB disconnect, device number 21 [ 529.722520][T12896] loop0: detected capacity change from 0 to 32768 [ 529.739881][T12896] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 529.754723][T12896] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 529.764581][T12896] OCFS2: File system is now read-only. [ 529.770069][T12896] (syz.0.2244,12896,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 529.778413][T12896] (syz.0.2244,12896,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 529.787363][T12896] (syz.0.2244,12896,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 529.797735][T12896] (syz.0.2244,12896,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 529.806644][T12896] (syz.0.2244,12896,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 529.817569][T12896] (syz.0.2244,12896,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 529.962589][ T5903] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 530.170037][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 530.232022][ T5903] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 530.326402][ T5903] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 530.434921][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 530.467665][ T5903] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 530.498245][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 530.508026][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.543640][ T5903] usbtmc 2-1:16.0: bulk endpoints not found [ 530.829332][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 530.918136][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 530.926254][ C1] lec:lec_tx_timeout: lec0 [ 530.931483][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 532.544498][ T5903] usb 2-1: USB disconnect, device number 22 [ 534.846856][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2265'. [ 535.218244][ T183] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 535.399195][ T183] usb 1-1: Using ep0 maxpacket: 8 [ 535.408418][ T183] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 535.426911][ T183] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 535.444889][ T183] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 535.461364][ T183] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.475828][ T183] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 535.486056][ T183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.500574][ T183] usbtmc 1-1:16.0: bulk endpoints not found [ 535.968184][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 535.976330][ C1] lec:lec_tx_timeout: lec0 [ 535.981127][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 536.495742][T12999] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2282'. [ 536.514959][T13000] loop4: detected capacity change from 0 to 512 [ 536.548643][T13000] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 536.565891][T13000] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 536.578753][T13000] EXT4-fs (loop4): orphan cleanup on readonly fs [ 536.597743][T13000] __quota_error: 23 callbacks suppressed [ 536.597764][T13000] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 536.640948][T13000] EXT4-fs warning (device loop4): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 536.675623][T13000] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 536.710769][T13000] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2281: bg 0: block 40: padding at end of block bitmap is not set [ 536.755521][T13000] EXT4-fs (loop4): Remounting filesystem read-only [ 536.771318][T13000] EXT4-fs (loop4): 1 truncate cleaned up [ 536.782719][T13000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 536.803889][T13000] EXT4-fs (loop4): shut down requested (2) [ 537.991016][ T183] usb 1-1: USB disconnect, device number 26 [ 538.294809][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.718920][T13038] IPv6: Can't replace route, no match found [ 540.188582][T13054] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.2300'. [ 540.197840][T13054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2300'. [ 540.659300][ T183] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 540.724831][T13057] loop1: detected capacity change from 0 to 512 [ 540.800962][T13057] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 540.818366][ T183] usb 5-1: Using ep0 maxpacket: 8 [ 540.926673][ T183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 540.938053][ T183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 540.954444][ T183] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 540.968659][T13057] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 540.972890][ T183] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.998168][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 541.003236][ T183] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 541.006200][ C1] lec:lec_tx_timeout: lec0 [ 541.018189][ T183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.020006][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 541.038488][T13057] EXT4-fs (loop1): orphan cleanup on readonly fs [ 541.044943][T13057] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 541.056585][ T183] usbtmc 5-1:16.0: bulk endpoints not found [ 541.082064][T13057] EXT4-fs warning (device loop1): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 541.110486][T13057] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 541.118636][T13057] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2303: bg 0: block 40: padding at end of block bitmap is not set [ 541.186085][T13057] EXT4-fs (loop1): Remounting filesystem read-only [ 541.204694][T13057] EXT4-fs (loop1): 1 truncate cleaned up [ 541.221722][T13057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 541.719330][T13057] EXT4-fs (loop1): shut down requested (2) [ 543.048719][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.089569][ T5911] usb 5-1: USB disconnect, device number 21 [ 543.740097][T13095] sd 0:0:1:0: device reset [ 543.966503][T13097] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.2315'. [ 543.977031][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2315'. [ 546.039533][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 546.047720][ C1] lec:lec_tx_timeout: lec0 [ 546.052366][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 546.376766][T13124] netlink: 'syz.2.2316': attribute type 2 has an invalid length. [ 546.528496][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 546.688219][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 546.757248][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 546.809033][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 546.833578][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 546.853808][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 546.873128][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 547.603485][ T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 547.612867][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.621403][ T9] usb 4-1: Product: syz [ 547.625595][ T9] usb 4-1: Manufacturer: syz [ 547.733588][ T9] usb 4-1: SerialNumber: syz [ 547.788569][ T9] usb 4-1: config 0 descriptor?? [ 548.218797][ T9] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 548.258241][ T9] input input21: Device does not respond to id packet M [ 548.803645][ T9] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 548.809967][ T9] input input21: Device does not respond to id packet P [ 548.833285][ T9] input input21: Device does not respond to id packet B [ 549.035216][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 549.058570][ T9] input input21: Device does not respond to id packet N [ 549.083857][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 549.128591][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 549.141910][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 549.155079][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 549.179950][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 549.255186][ T9] usb 4-1: USB disconnect, device number 20 [ 551.068181][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 551.076244][ C1] lec:lec_tx_timeout: lec0 [ 551.077360][T13155] loop4: detected capacity change from 0 to 32768 [ 551.104575][T13155] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 551.119495][T13155] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 551.129479][T13155] OCFS2: File system is now read-only. [ 551.134930][T13155] (syz.4.2332,13155,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 551.143265][T13155] (syz.4.2332,13155,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 551.152204][T13155] (syz.4.2332,13155,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 551.162609][T13155] (syz.4.2332,13155,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 551.171498][T13155] (syz.4.2332,13155,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 551.181229][T13155] (syz.4.2332,13155,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 553.186531][T13183] siw: device registration error -23 [ 554.276415][T13200] loop0: detected capacity change from 0 to 32768 [ 554.313279][T13200] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 554.329622][T13200] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 554.339472][T13200] OCFS2: File system is now read-only. [ 554.344928][T13200] (syz.0.2347,13200,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 554.353272][T13200] (syz.0.2347,13200,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 554.362289][T13200] (syz.0.2347,13200,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 554.372652][T13200] (syz.0.2347,13200,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 554.381509][T13200] (syz.0.2347,13200,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 554.390051][T13200] (syz.0.2347,13200,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 554.518401][ T183] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 554.933631][ T183] usb 3-1: Using ep0 maxpacket: 32 [ 554.976881][ T183] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 555.005290][ T183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 555.050902][ T183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 555.075910][ T183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 555.112230][ T183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 555.140529][ T183] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 555.169544][ T183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.187879][ T183] usb 3-1: Product: syz [ 555.198462][ T183] usb 3-1: Manufacturer: syz [ 555.203102][ T183] usb 3-1: SerialNumber: syz [ 555.359781][ T183] usb 3-1: config 0 descriptor?? [ 556.489588][T13220] loop3: detected capacity change from 0 to 8 [ 556.505318][ T183] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 556.514477][ T183] input input22: Device does not respond to id packet M [ 556.532279][ T183] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 556.759199][ T183] input input22: Device does not respond to id packet P [ 556.767526][ T183] input input22: Device does not respond to id packet B [ 556.898497][ T5918] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 556.998640][T13224] netlink: 'syz.3.2354': attribute type 4 has an invalid length. [ 557.009847][ T183] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 557.018235][ T183] input input22: Device does not respond to id packet N [ 557.042628][ T183] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 557.060409][ T183] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 557.075262][ T183] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 557.090862][ T183] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 557.113884][ T183] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 557.178228][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 557.185146][ T5918] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 557.215213][ T5918] usb 1-1: config 0 has no interface number 0 [ 557.221165][ T183] usb 3-1: USB disconnect, device number 24 [ 557.237715][ T5918] usb 1-1: config 0 interface 184 has no altsetting 0 [ 557.268270][ T5918] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 557.318279][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.326312][ T5918] usb 1-1: Product: syz [ 557.348269][ T5918] usb 1-1: Manufacturer: syz [ 557.352930][ T5918] usb 1-1: SerialNumber: syz [ 557.389886][ T5918] usb 1-1: config 0 descriptor?? [ 557.403513][ T5918] smsc75xx v1.0.0 [ 557.409091][ T5918] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 557.421152][ T5918] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 557.908621][ T6576] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 558.080157][ T6576] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 558.091658][ T6576] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 558.103194][ T6576] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 558.114875][ T6576] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 558.125323][ T6576] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 558.138517][ T6576] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 558.151541][ T6576] usb 2-1: string descriptor 0 read error: -22 [ 558.165507][ T6576] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 558.175211][ T6576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.398461][T13256] loop3: detected capacity change from 0 to 8 [ 559.084121][T13259] netlink: 'syz.3.2365': attribute type 4 has an invalid length. [ 560.143357][ T5903] usb 1-1: USB disconnect, device number 27 [ 560.243294][ T5918] usb 2-1: USB disconnect, device number 23 [ 560.428407][ T5935] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 560.588310][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 560.595221][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 560.607458][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 560.627425][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 560.637571][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 560.719017][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 560.753540][ T5935] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 560.765789][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.785293][ T5935] usb 3-1: Product: syz [ 560.806169][ T5935] usb 3-1: Manufacturer: syz [ 560.824368][ T5935] usb 3-1: SerialNumber: syz [ 560.865109][ T5935] usb 3-1: config 0 descriptor?? [ 560.977540][T13293] wlan1 speed is unknown, defaulting to 1000 [ 560.985935][T13293] ªªªªªª speed is unknown, defaulting to 1000 [ 561.302071][ T5935] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 561.416035][ T5935] input input23: Device does not respond to id packet M [ 561.430435][ T5935] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 561.437736][ T5935] input input23: Device does not respond to id packet P [ 561.449292][ T5935] input input23: Device does not respond to id packet B [ 561.540502][T13298] IPv6: Can't replace route, no match found [ 561.950941][ T5935] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 561.957048][ T5935] input input23: Device does not respond to id packet N [ 562.035804][ T5935] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 562.057259][ T5935] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 562.078763][ T5935] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 562.088767][ T5935] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 562.109858][ T5935] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 562.166999][T13305] loop0: detected capacity change from 0 to 8 [ 562.173836][ T5935] usb 3-1: USB disconnect, device number 25 [ 562.263283][T13307] loop3: detected capacity change from 0 to 1024 [ 562.291006][T13307] EXT4-fs: inline encryption not supported [ 562.302018][T13307] EXT4-fs: Ignoring removed orlov option [ 562.309286][ T183] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 562.312065][T13307] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 562.373540][T13310] netlink: 'syz.0.2380': attribute type 4 has an invalid length. [ 562.475234][ T183] usb 5-1: Using ep0 maxpacket: 32 [ 562.726168][ T183] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 562.748149][ T183] usb 5-1: config 0 has no interface number 0 [ 562.765134][ T183] usb 5-1: config 0 interface 184 has no altsetting 0 [ 562.765741][T13307] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 562.780627][T13307] System zones: 0-1, 3-12 [ 562.790870][T13307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.806458][ T183] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 562.840592][ T183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.019521][ T183] usb 5-1: Product: syz [ 563.023823][ T183] usb 5-1: Manufacturer: syz [ 563.052527][ T183] usb 5-1: SerialNumber: syz [ 563.070184][ T183] usb 5-1: config 0 descriptor?? [ 563.083224][ T183] smsc75xx v1.0.0 [ 563.086998][ T183] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 563.264979][ T183] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 564.525353][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 565.062184][ T5903] usb 5-1: USB disconnect, device number 22 [ 565.351183][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.094404][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 566.118238][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 566.789978][T13358] loop4: detected capacity change from 0 to 8 [ 567.543972][T13360] netlink: 'syz.4.2393': attribute type 4 has an invalid length. [ 568.151653][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 568.193937][T13383] loop3: detected capacity change from 0 to 1024 [ 568.217137][T13383] EXT4-fs: inline encryption not supported [ 568.223090][T13383] EXT4-fs: Ignoring removed orlov option [ 568.229734][T13383] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 568.528293][ T5911] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 568.819444][T13383] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 568.827772][T13383] System zones: 0-1, 3-12 [ 568.835971][T13383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.858291][ T5935] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 569.057892][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 569.100477][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 569.120099][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 569.128398][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 569.163392][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 569.164179][ T5935] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 569.194987][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 569.241594][ T5935] usb 2-1: config 0 has no interface number 0 [ 569.352116][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.358266][ T5935] usb 2-1: config 0 interface 184 has no altsetting 0 [ 569.526821][ T5911] usb 5-1: config 0 descriptor?? [ 569.670308][ T5935] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 569.808260][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.816349][ T5935] usb 2-1: Product: syz [ 569.825088][ T5911] hdpvr 5-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 569.866168][ T5935] usb 2-1: Manufacturer: syz [ 569.878890][ T5935] usb 2-1: SerialNumber: syz [ 569.894406][ T5935] usb 2-1: config 0 descriptor?? [ 569.903871][ T5911] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 569.934399][ T5935] smsc75xx v1.0.0 [ 569.951827][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 569.969285][ T5935] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 570.270684][ T5911] hdpvr 5-1:0.0: Could not setup controls [ 570.277236][ T5911] hdpvr 5-1:0.0: registering videodev failed [ 570.303398][ T5911] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 570.330026][ T5911] usb 5-1: USB disconnect, device number 23 [ 571.195058][T13412] loop2: detected capacity change from 0 to 8 [ 571.490777][ T5918] usb 2-1: USB disconnect, device number 24 [ 571.592931][T13413] netlink: 'syz.2.2408': attribute type 4 has an invalid length. [ 571.876063][T13420] binder: 13419:13420 ioctl c0306201 200000000680 returned -14 [ 572.833106][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.972202][T13437] netlink: 'syz.4.2418': attribute type 1 has an invalid length. [ 573.035519][T13437] bond2: entered promiscuous mode [ 573.040804][T13437] bond2: entered allmulticast mode [ 573.046481][T13437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.076835][T13437] veth3: entered promiscuous mode [ 573.088522][T13437] veth3: entered allmulticast mode [ 573.105049][T13437] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 573.206151][T13442] wlan1 speed is unknown, defaulting to 1000 [ 573.214985][T13442] ªªªªªª speed is unknown, defaulting to 1000 [ 573.411212][T13454] loop4: detected capacity change from 0 to 1024 [ 573.423286][T13456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2423'. [ 573.429439][T13454] EXT4-fs: inline encryption not supported [ 573.438177][T13454] EXT4-fs: Ignoring removed orlov option [ 573.551906][T13454] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 573.596625][ T183] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 573.958151][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 573.966229][ C1] lec:lec_tx_timeout: lec0 [ 573.989714][ T183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 573.999946][T13454] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 574.025620][T13454] System zones: 0-1, 3-12 [ 574.030136][ T183] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 574.060562][T13454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.082205][ T183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 574.112966][ T183] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 574.159381][ T183] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 574.185009][ T183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.398426][ T183] usb 3-1: config 0 descriptor?? [ 574.966159][ T6282] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 574.977255][ T183] hdpvr 3-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 574.993202][ T183] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 575.175192][T13472] loop0: detected capacity change from 0 to 8 [ 575.183115][ T183] hdpvr 3-1:0.0: device init failed [ 575.194560][ T183] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 575.219047][ T6282] usb 4-1: Using ep0 maxpacket: 16 [ 575.224527][ T183] usb 3-1: USB disconnect, device number 26 [ 575.231080][ T6282] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 575.418802][ T6282] usb 4-1: config 0 has no interface number 0 [ 575.425329][ T6282] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.442372][ T6282] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.452597][ T6282] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 575.468548][ T6282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.525502][T13478] netlink: 'syz.0.2427': attribute type 4 has an invalid length. [ 575.952940][ T6282] usb 4-1: config 0 descriptor?? [ 576.804132][ T6282] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 576.820427][ T6282] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 576.832616][ T6282] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 576.841276][ T6282] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 576.849238][ T6282] uclogic 0003:28BD:0071.0004: probe with driver uclogic failed with error -71 [ 576.880750][ T6282] usb 4-1: USB disconnect, device number 21 [ 577.359081][T13490] dummy0: entered promiscuous mode [ 577.375036][T13490] macsec1: entered allmulticast mode [ 577.395138][T13490] dummy0: entered allmulticast mode [ 577.433280][T13490] dummy0: left allmulticast mode [ 577.458492][T13490] dummy0: left promiscuous mode [ 577.532379][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.689449][T13496] syzkaller0: entered promiscuous mode [ 577.694950][T13496] syzkaller0: entered allmulticast mode [ 577.780461][T13501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2436'. [ 577.847590][T13504] syzkaller0: entered promiscuous mode [ 577.853253][T13504] syzkaller0: entered allmulticast mode [ 578.079816][ T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 578.240240][ T9] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 578.323253][ T9] usb 1-1: config 0 has no interface number 0 [ 579.773252][ T9] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 579.798422][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.835358][ T9] usb 1-1: config 0 descriptor?? [ 580.113642][ T9] usb 1-1: string descriptor 0 read error: -71 [ 580.247971][ T9] usb-storage 1-1:0.168: USB Mass Storage device detected [ 580.516518][ T9] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 580.604528][ T9] usb 1-1: USB disconnect, device number 28 [ 580.858419][T13551] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 580.865315][T13551] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 580.873545][ T8786] lec:lec_start_xmit: lec0:No lecd attached [ 580.879646][T13551] vhci_hcd vhci_hcd.0: Device attached [ 581.400331][ T6391] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 581.500618][T13552] vhci_hcd: connection reset by peer [ 581.515730][ T1336] vhci_hcd vhci_hcd.3: stop threads [ 581.631236][ T1336] vhci_hcd vhci_hcd.3: release socket [ 581.736466][ T1336] vhci_hcd vhci_hcd.3: disconnect device [ 582.910905][ T30] audit: type=1326 audit(1764172154.618:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13564 comm="syz.3.2454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3f2d8f749 code=0x0 [ 585.958138][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 585.966236][ C1] lec:lec_tx_timeout: lec0 [ 586.550887][ T6391] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 589.446901][T13627] binder: 13625:13627 unknown command 0 [ 589.491270][T13627] binder: 13625:13627 ioctl c0306201 200000000080 returned -22 [ 593.190185][T13667] syzkaller0: entered promiscuous mode [ 593.216371][T13667] syzkaller0: entered allmulticast mode [ 593.457924][T13677] tipc: Enabling of bearer rejected, already enabled [ 593.480692][T13677] tipc: Enabled bearer , priority 10 [ 593.773424][T13684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 593.780783][T13684] IPv6: NLM_F_CREATE should be set when creating new route [ 594.489537][T13692] netlink: 'syz.1.2495': attribute type 1 has an invalid length. [ 594.736961][T13696] bond2: entered promiscuous mode [ 594.742508][T13696] bond2: entered allmulticast mode [ 594.752556][T13696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.492762][ T6282] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 597.869098][ T6282] usb 2-1: Using ep0 maxpacket: 8 [ 597.924961][ T6282] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 597.959192][ T6282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 597.981981][ T6282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.001925][ T6282] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.050020][ T6282] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 598.066898][ T6282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.839825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.018506][ T6282] usb 2-1: usb_control_msg returned -32 [ 599.040682][ T6282] usbtmc 2-1:16.0: can't read capabilities [ 599.100086][ T6282] usb 2-1: USB disconnect, device number 25 [ 604.134648][T13781] netlink: 'syz.0.2523': attribute type 1 has an invalid length. [ 604.191385][T13784] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2524'. [ 604.213154][T13785] bond1: entered promiscuous mode [ 604.218641][T13785] bond1: entered allmulticast mode [ 604.224432][T13785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.258374][ T7407] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 604.485230][ T5911] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 604.650541][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 605.278822][ T7407] usb 2-1: Using ep0 maxpacket: 16 [ 605.278918][ T5911] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 605.289625][ T7407] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 605.305923][ T7407] usb 2-1: config 0 has no interface number 0 [ 605.312198][ T7407] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.323208][ T7407] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 605.335343][ T7407] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 605.348402][ T7407] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 605.356121][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 605.356503][ T7407] usb 2-1: Product: syz [ 605.370874][ T7407] usb 2-1: SerialNumber: syz [ 605.381380][ T7407] usb 2-1: config 0 descriptor?? [ 605.390470][ T7407] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 605.399471][ T7407] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input24 [ 605.408136][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 605.434978][ T5911] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.468233][ T5911] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 605.485470][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.504957][T13801] fuse: Bad value for 'fd' [ 605.609589][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.609884][ T6282] usb 2-1: USB disconnect, device number 26 [ 605.617151][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 605.672322][ T6282] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 605.752539][ T5911] usb 3-1: GET_CAPABILITIES returned 0 [ 605.812893][ T5911] usbtmc 3-1:16.0: can't read capabilities [ 606.318670][ T5911] usb 3-1: USB disconnect, device number 27 [ 606.709016][T13815] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2536'. [ 608.388205][ T7407] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 608.701991][ T7407] usb 4-1: Using ep0 maxpacket: 16 [ 608.719023][ T7407] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 608.728290][ T7407] usb 4-1: config 0 has no interface number 0 [ 608.736980][ T7407] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 608.783657][ T7407] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 609.019652][ T7407] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 609.043462][ T7407] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 609.072419][ T7407] usb 4-1: Product: syz [ 609.076647][ T7407] usb 4-1: SerialNumber: syz [ 609.293799][ T7407] usb 4-1: config 0 descriptor?? [ 609.963616][ T7407] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 609.972435][ T7407] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input25 [ 610.188611][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 611.140634][ T7407] usb 4-1: USB disconnect, device number 22 [ 611.189430][ T7407] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 611.589361][ T6576] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 611.704748][T13878] wlan1 speed is unknown, defaulting to 1000 [ 611.750144][ T6576] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 611.758619][ T6576] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 611.881489][T13878] ªªªªªª speed is unknown, defaulting to 1000 [ 611.899935][ T6576] usb 2-1: config 5 has no interface number 0 [ 612.638194][ T6576] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 612.667127][ T6576] usb 2-1: config 5 interface 123 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.698357][ T6576] usb 2-1: config 5 interface 123 has no altsetting 0 [ 612.727046][ T6576] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 612.737110][ T6576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.785148][ T6576] usb 2-1: Product: syz [ 612.797974][ T6576] usb 2-1: Manufacturer: syz [ 612.823420][ T6576] usb 2-1: SerialNumber: syz [ 613.951943][ T6576] comedi comedi5: Wrong number of endpoints [ 613.978639][ T6576] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 614.067099][ T6576] usb 2-1: USB disconnect, device number 27 [ 614.137925][T13901] tipc: Enabled bearer , priority 0 [ 614.155585][T13901] syzkaller0: entered promiscuous mode [ 614.186576][T13901] syzkaller0: entered allmulticast mode [ 614.217431][T13907] netlink: 'syz.3.2567': attribute type 1 has an invalid length. [ 614.229381][T13899] tipc: Resetting bearer [ 614.254691][T13899] tipc: Disabling bearer [ 614.601761][T13908] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 618.274721][T13943] kvm: kvm [13941]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x5 [ 618.320604][T13944] tipc: Enabled bearer , priority 0 [ 618.346047][T13944] syzkaller0: entered promiscuous mode [ 618.358378][T13944] syzkaller0: entered allmulticast mode [ 618.387112][T13944] tipc: Resetting bearer [ 618.421203][T13942] tipc: Resetting bearer [ 618.472883][T13942] tipc: Disabling bearer [ 618.641460][T13956] netlink: 'syz.3.2583': attribute type 1 has an invalid length. [ 618.678827][ T6576] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 619.948178][ T5918] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 620.126647][T13971] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 620.168168][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 620.180833][ T6576] usb 2-1: Using ep0 maxpacket: 32 [ 620.181975][ T5918] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 620.206447][ T5918] usb 1-1: config 0 has no interface number 0 [ 620.310205][ T5918] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 620.320368][ T6576] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.321640][ T5918] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 620.323735][ T5918] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 620.350671][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 620.369335][ T6576] usb 2-1: config 0 interface 0 has no altsetting 0 [ 620.378137][ T5918] usb 1-1: Product: syz [ 620.378748][ T6576] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 620.382388][ T5918] usb 1-1: SerialNumber: syz [ 620.408705][ T6576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.418027][ T5918] usb 1-1: config 0 descriptor?? [ 620.427114][ T5918] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 620.545870][ T5918] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input26 [ 620.652817][ T6576] usb 2-1: config 0 descriptor?? [ 620.986282][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 621.192653][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.201533][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.208713][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.215878][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.223043][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.230307][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.237481][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.244801][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.252017][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.259280][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 621.296925][ T5918] usb 1-1: USB disconnect, device number 29 [ 621.302977][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 621.322090][ T5918] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 621.610580][ T6576] usbhid 2-1:0.0: can't add hid device: -71 [ 621.631627][T13994] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 621.638218][T13994] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 621.646142][T13994] vhci_hcd vhci_hcd.0: Device attached [ 621.899061][ T5918] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 621.991233][ T6576] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 622.325129][T13996] vhci_hcd: connection reset by peer [ 622.373994][ T6577] vhci_hcd vhci_hcd.3: stop threads [ 622.431062][ T6577] vhci_hcd vhci_hcd.3: release socket [ 622.491496][ T6577] vhci_hcd vhci_hcd.3: disconnect device [ 622.873451][ T6576] usb 2-1: USB disconnect, device number 28 [ 623.258854][T14012] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 623.425237][T14015] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 623.500412][T14020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.417281][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 625.539217][T14050] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 625.545767][T14050] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 625.553671][T14050] vhci_hcd vhci_hcd.0: Device attached [ 625.828255][ T5911] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 626.383442][T14051] vhci_hcd: connection reset by peer [ 626.421037][ T50] vhci_hcd vhci_hcd.2: stop threads [ 626.504047][ T50] vhci_hcd vhci_hcd.2: release socket [ 626.541016][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 627.528276][ T5918] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 628.483340][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2617'. [ 628.861292][T14086] ------------[ cut here ]------------ [ 628.866990][T14086] WARNING: arch/x86/kvm/lapic.c:3501 at kvm_apic_accept_events+0x341/0x490, CPU#1: syz.3.2618/14086 [ 628.877897][T14086] Modules linked in: [ 628.882160][T14086] CPU: 1 UID: 0 PID: 14086 Comm: syz.3.2618 Not tainted syzkaller #0 PREEMPT(full) [ 628.891583][T14086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.901676][T14086] RIP: 0010:kvm_apic_accept_events+0x341/0x490 [ 628.907840][T14086] Code: eb 0c e8 b2 c1 72 00 eb 05 e8 ab c1 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 90 c1 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f [ 628.927947][T14086] RSP: 0018:ffffc9000e7a7bf0 EFLAGS: 00010283 [ 628.934144][T14086] RAX: ffffffff814ede70 RBX: 0000000000000002 RCX: 0000000000080000 [ 628.942168][T14086] RDX: ffffc9000cd0c000 RSI: 00000000000003a7 RDI: 00000000000003a8 [ 628.950251][T14086] RBP: 0000000000000000 R08: ffffffff81471af2 R09: ffff888056419838 [ 628.958299][T14086] R10: dffffc0000000000 R11: fffff91ffffaf88d R12: 0000000000000002 [ 628.966295][T14086] R13: dffffc0000000000 R14: ffff88807ef73600 R15: ffff88802958ac18 [ 628.974324][T14086] FS: 00007fd3f3b756c0(0000) GS:ffff888125f88000(0000) knlGS:0000000000000000 [ 628.983323][T14086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.989959][T14086] CR2: 000000110c33130f CR3: 000000007b6c8000 CR4: 00000000003526f0 [ 628.997954][T14086] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 629.005975][T14086] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 629.013989][T14086] Call Trace: [ 629.017290][T14086] [ 629.020277][T14086] kvm_arch_vcpu_ioctl_get_mpstate+0x115/0x450 [ 629.026487][T14086] ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450 [ 629.032813][T14086] kvm_vcpu_ioctl+0x663/0xed0 [ 629.037553][T14086] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 629.042834][T14086] ? do_futex+0x395/0x420 [ 629.047230][T14086] ? __fget_files+0x2a/0x420 [ 629.051900][T14086] ? __fget_files+0x3a0/0x420 [ 629.056617][T14086] ? __fget_files+0x2a/0x420 [ 629.061261][T14086] ? bpf_lsm_file_ioctl+0x9/0x20 [ 629.066276][T14086] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 629.071586][T14086] __se_sys_ioctl+0xfc/0x170 [ 629.076218][T14086] do_syscall_64+0xfa/0xf80 [ 629.080808][T14086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.086912][T14086] ? clear_bhb_loop+0x60/0xb0 [ 629.091656][T14086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.097583][T14086] RIP: 0033:0x7fd3f2d8f749 [ 629.102140][T14086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.121824][T14086] RSP: 002b:00007fd3f3b75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.130362][T14086] RAX: ffffffffffffffda RBX: 00007fd3f2fe5fa0 RCX: 00007fd3f2d8f749 [ 629.138427][T14086] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005 [ 629.146424][T14086] RBP: 00007fd3f2e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 629.154458][T14086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.162543][T14086] R13: 00007fd3f2fe6038 R14: 00007fd3f2fe5fa0 R15: 00007ffc321cbca8 [ 629.170603][T14086] [ 629.173650][T14086] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 629.180942][T14086] CPU: 1 UID: 0 PID: 14086 Comm: syz.3.2618 Not tainted syzkaller #0 PREEMPT(full) [ 629.190357][T14086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.200428][T14086] Call Trace: [ 629.203711][T14086] [ 629.206637][T14086] dump_stack_lvl+0x99/0x250 [ 629.211239][T14086] ? __asan_memcpy+0x40/0x70 [ 629.215834][T14086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.221049][T14086] ? __pfx__printk+0x10/0x10 [ 629.225652][T14086] vpanic+0x237/0x6d0 [ 629.229634][T14086] ? __pfx_vpanic+0x10/0x10 [ 629.234140][T14086] ? is_bpf_text_address+0x292/0x2b0 [ 629.239433][T14086] ? is_bpf_text_address+0x26/0x2b0 [ 629.244646][T14086] panic+0xb9/0xc0 [ 629.248374][T14086] ? __pfx_panic+0x10/0x10 [ 629.252807][T14086] __warn+0x317/0x4b0 [ 629.256792][T14086] ? kvm_apic_accept_events+0x341/0x490 [ 629.262351][T14086] ? kvm_apic_accept_events+0x341/0x490 [ 629.267917][T14086] __report_bug+0x22e/0x4b0 [ 629.272448][T14086] ? kvm_apic_accept_events+0x341/0x490 [ 629.278027][T14086] ? __pfx___report_bug+0x10/0x10 [ 629.283070][T14086] ? __lock_acquire+0x6b6/0x2cf0 [ 629.288022][T14086] ? rcu_is_watching+0x15/0xb0 [ 629.292792][T14086] ? trace_contention_end+0x39/0x100 [ 629.298084][T14086] ? kvm_apic_accept_events+0x341/0x490 [ 629.303656][T14086] report_bug+0x16a/0x220 [ 629.307998][T14086] ? kvm_apic_accept_events+0x341/0x490 [ 629.313571][T14086] ? kvm_apic_accept_events+0x343/0x490 [ 629.319126][T14086] handle_bug+0x98/0x200 [ 629.323388][T14086] exc_invalid_op+0x1a/0x50 [ 629.327908][T14086] asm_exc_invalid_op+0x1a/0x20 [ 629.332764][T14086] RIP: 0010:kvm_apic_accept_events+0x341/0x490 [ 629.338927][T14086] Code: eb 0c e8 b2 c1 72 00 eb 05 e8 ab c1 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 90 c1 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f [ 629.358537][T14086] RSP: 0018:ffffc9000e7a7bf0 EFLAGS: 00010283 [ 629.364701][T14086] RAX: ffffffff814ede70 RBX: 0000000000000002 RCX: 0000000000080000 [ 629.372675][T14086] RDX: ffffc9000cd0c000 RSI: 00000000000003a7 RDI: 00000000000003a8 [ 629.380659][T14086] RBP: 0000000000000000 R08: ffffffff81471af2 R09: ffff888056419838 [ 629.388630][T14086] R10: dffffc0000000000 R11: fffff91ffffaf88d R12: 0000000000000002 [ 629.396600][T14086] R13: dffffc0000000000 R14: ffff88807ef73600 R15: ffff88802958ac18 [ 629.404582][T14086] ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450 [ 629.410832][T14086] ? kvm_apic_accept_events+0x340/0x490 [ 629.416414][T14086] kvm_arch_vcpu_ioctl_get_mpstate+0x115/0x450 [ 629.422585][T14086] ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450 [ 629.428849][T14086] kvm_vcpu_ioctl+0x663/0xed0 [ 629.433551][T14086] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 629.438762][T14086] ? do_futex+0x395/0x420 [ 629.443133][T14086] ? __fget_files+0x2a/0x420 [ 629.447743][T14086] ? __fget_files+0x3a0/0x420 [ 629.452428][T14086] ? __fget_files+0x2a/0x420 [ 629.457044][T14086] ? bpf_lsm_file_ioctl+0x9/0x20 [ 629.462023][T14086] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 629.467234][T14086] __se_sys_ioctl+0xfc/0x170 [ 629.471839][T14086] do_syscall_64+0xfa/0xf80 [ 629.476351][T14086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.482430][T14086] ? clear_bhb_loop+0x60/0xb0 [ 629.487133][T14086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.493036][T14086] RIP: 0033:0x7fd3f2d8f749 [ 629.497459][T14086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.517079][T14086] RSP: 002b:00007fd3f3b75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.525504][T14086] RAX: ffffffffffffffda RBX: 00007fd3f2fe5fa0 RCX: 00007fd3f2d8f749 [ 629.533477][T14086] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005 [ 629.541459][T14086] RBP: 00007fd3f2e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 629.549439][T14086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.557416][T14086] R13: 00007fd3f2fe6038 R14: 00007fd3f2fe5fa0 R15: 00007ffc321cbca8 [ 629.565422][T14086] [ 629.568846][T14086] Kernel Offset: disabled [ 629.573178][T14086] Rebooting in 86400 seconds..