last executing test programs: 6m1.951142807s ago: executing program 2 (id=2320): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x13f2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 6m1.735655111s ago: executing program 2 (id=2321): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0xf, 0xffffffffffffffff}, 0x0, &(0x7f0000000440)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffe}, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 6m0.31963525s ago: executing program 2 (id=2324): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x42) lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0x80000001, 0x5193}, {0x1, 0x2}]}, 0x18, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) 5m58.619832514s ago: executing program 2 (id=2326): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@fat=@discard}, {@rodir}, {@utf8}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@numtail}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 5m56.502460866s ago: executing program 2 (id=2331): r0 = syz_open_dev$video(&(0x7f0000000480), 0x100, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0xa, @raw_data="3466976e9c93555b5448d6d554f22afb7516edae04ba77027efb4cd4461aed622af6b9a26333e4c71390acb80110ea0377b11d301057aa70c982ab97a654f41e80ae38b6776207e7c05d6619e091020d58c2b53482c2c874a37139698c6ecae291415ec95010b4304b1988af0ef741c33be04fe2fbf50f9ebbbefc1ee2fb32ce56870c41d3ef3331c2daa8b5dea00cfb155f2ad3ead8d9a6e67f167d011540b39154766f63f93f7f3e58c5cdb11231f779f6936a31fc5a03f8a3fb8ec48fa24ee110a9fc664ec9a0"}) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82U\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\/\xfc\xe3\xb8\xc7\x0f/\\\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) creat(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x888200, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 5m49.168966193s ago: executing program 2 (id=2346): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x800448d5, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000280)=0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, 0x0, 0x20000011) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 5m48.676016023s ago: executing program 32 (id=2346): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x800448d5, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000280)=0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, 0x0, 0x20000011) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 4m22.799861714s ago: executing program 0 (id=2472): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x48010) close(r1) 4m21.430051371s ago: executing program 0 (id=2474): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e138", 0xf}, {&(0x7f0000000580)}], 0x2}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m19.950438871s ago: executing program 0 (id=2476): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b", 0xcc}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0", 0xc9}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m18.415118682s ago: executing program 0 (id=2480): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@fat=@discard}, {@rodir}, {@utf8}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@numtail}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 4m17.153811097s ago: executing program 0 (id=2482): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 4m13.170671337s ago: executing program 0 (id=2492): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@fat=@discard}, {@rodir}, {@utf8}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@numtail}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 4m12.434722282s ago: executing program 33 (id=2492): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@fat=@discard}, {@rodir}, {@utf8}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@numtail}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 13.446793511s ago: executing program 3 (id=3001): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x60}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x2b, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x3, 0x7, 0x15e, 0x0}) socket$rds(0x15, 0x5, 0x0) 7.954172721s ago: executing program 3 (id=3012): r0 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000900)=ANY=[@ANYBLOB='utf8=1,io\t\x00\x00\x00\x00\x00\x00\x00cp860,utf8=0,codepage=950,utf8=0,codepame=865,shortname=win95,nonumtail=0,shortname=lower,utf8=0,rodir,check=relaxed,iocharset=iso8859-14,\x00'], 0x89, 0x29b, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x143042, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f00000000c0)='check=relaxed', 0x101080, &(0x7f0000000100)={@align=0x4f, {0x0, 0x4, 0x9, 0x4}}, 0x3, &(0x7f0000000140), 0x0}, {[0xfffffffa, 0x5af5, 0x553, 0x7]}, 0x0, 0xee, &(0x7f00000001c0)=""/238}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.impure\x00', &(0x7f0000000180)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) r3 = socket$inet(0x2, 0x4, 0xffffffff) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000040)=0x6, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x9}}, './file4\x00'}) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="2e000000010002", 0x7) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) 6.410777341s ago: executing program 5 (id=3013): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x660f3000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 6.195565016s ago: executing program 3 (id=3014): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000240)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040020) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_add_vcpu$x86(0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) 6.153073917s ago: executing program 1 (id=3015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x28, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2a}, @ptr={0x70742a85, 0x80000, &(0x7f0000000640)=""/223, 0xdf, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x1c}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 5.887272852s ago: executing program 1 (id=3016): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x2, 0x0, 0x0, 0x1d, 0x15, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x7]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 5.725838825s ago: executing program 3 (id=3017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000003540), 0x1, 0x200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x7}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) pipe2$9p(&(0x7f0000001900), 0x0) 5.662697486s ago: executing program 1 (id=3018): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5405, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x9e, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40010) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000ffb09188b0f5"], 0x20}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, 0x0) 4.508775179s ago: executing program 3 (id=3019): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x7f, 0xfffffffffffffffe, 0xfffffffeffffffff, {0x5, 0x3, 0x0, 0x4000000000004, 0xfffffffd, 0x6, {0x2, 0xb, 0x8, 0x100000000000, 0xdb4, 0x81, 0x8, 0x6, 0x200c, 0x1000, 0xe44, r2, r3, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 3.559153629s ago: executing program 4 (id=3023): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) 3.306167604s ago: executing program 1 (id=3024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x28, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2a}, @ptr={0x70742a85, 0x80000, &(0x7f0000000640)=""/223, 0xdf, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x1c}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2.617340508s ago: executing program 4 (id=3025): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4c22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x3) 2.607327027s ago: executing program 1 (id=3026): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001080)={[{@barrier_val={'barrier', 0x3d, 0x8}}, {@user_xattr}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@noinit_itable}, {@nodioread_nolock}]}, 0x4, 0xbce, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0xcddec000) brk(0x20ffc004) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x0) 2.560291449s ago: executing program 5 (id=3027): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 2.47485426s ago: executing program 4 (id=3028): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x31000, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) 2.159700566s ago: executing program 4 (id=3029): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x0, 0x1000, 0x2, &(0x7f0000871000/0x1000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xfffff073) shmctl$IPC_INFO(r3, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) 1.9841461s ago: executing program 5 (id=3030): request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) 1.356393902s ago: executing program 5 (id=3031): r0 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000900)=ANY=[@ANYBLOB='utf8=1,io\t\x00\x00\x00\x00\x00\x00\x00cp860,utf8=0,codepage=950,utf8=0,codepame=865,shortname=win95,nonumtail=0,shortname=lower,utf8=0,rodir,check=relaxed,iocharset=iso8859-14,\x00'], 0x89, 0x29b, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x143042, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f00000000c0)='check=relaxed', 0x101080, &(0x7f0000000100)={@align=0x4f, {0x0, 0x4, 0x9, 0x4}}, 0x3, &(0x7f0000000140), 0x0}, {[0xfffffffa, 0x5af5, 0x553, 0x7]}, 0x0, 0xee, &(0x7f00000001c0)=""/238}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.impure\x00', &(0x7f0000000180)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) r3 = socket$inet(0x2, 0x4, 0xffffffff) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000040)=0x6, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x9}}, './file4\x00'}) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r6, 0x0, 0x0) write(r5, &(0x7f0000000040)="2e000000010002", 0x7) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) 1.356232013s ago: executing program 1 (id=3032): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.263424634s ago: executing program 3 (id=3033): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000440)=ANY=[@ANYBLOB='noswap,mpol=interleave']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzsz8GJwkAABdAfskl2WMK2kCa2j72IbdhBSClec7EuW/CiREasQER47zDz5/MvE96qNGW7xqRNhvLst6Otj9PY/dfYT3PJz/Hw2A1Zzn2S36YW05p87bvk7/KdpNbXLc73uDQZ6rbdrS//IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8gFsAAAD//4npCg4=") 442.736331ms ago: executing program 4 (id=3034): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) 346.927763ms ago: executing program 5 (id=3035): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000001009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) 0s ago: executing program 5 (id=3037): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18450000feffffffffff0000000000009500000000000000feca3e1bafa167d13f94150bcb4f4328433fc156f36ab8410f7a8c6791128fb30527273466380c054e3f425a"], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="4700330080000500ffffffffffff080211000000505050"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) kernel console output (not intermixed with test programs): 003:1532:010D.0004: unknown main item tag 0x0 [ 727.485381][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.519109][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.526115][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.557866][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.564790][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.617522][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.632745][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.647918][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.679768][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.686674][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.711747][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.748235][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.756377][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.787988][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.794912][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.820201][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.827134][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.857990][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.864895][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.899026][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.905940][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.942406][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.963428][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 727.995248][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.020071][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.026984][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.055931][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.084513][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.110196][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.117101][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.147011][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.177844][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.184746][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.217847][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.224752][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.257844][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.264846][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.297874][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.304831][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.317923][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.324851][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x6 [ 728.368130][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.376235][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.404812][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.424975][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.450761][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.457665][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.488049][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.494972][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.517870][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.524779][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.575246][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.597995][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.604930][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.647927][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.654840][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.699526][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.706765][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x5 [ 728.728233][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x2 [ 728.735145][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.763350][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.784479][ T5806] razer 0003:1532:010D.0004: unknown main item tag 0x0 [ 728.802531][ T5806] razer 0003:1532:010D.0004: collection stack underflow [ 728.821790][ T5806] razer 0003:1532:010D.0004: item 0 0 0 12 parsing failed [ 728.842374][ T5806] razer: probe of 0003:1532:010D.0004 failed with error -22 [ 728.897304][ T5806] usb 3-1: USB disconnect, device number 38 [ 732.522813][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 732.536380][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 732.608022][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 732.857883][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 732.865306][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 732.873881][ T10] usb 4-1: config 0 has no interface number 0 [ 732.887286][ T10] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 732.911259][ T10] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 732.934378][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 732.947770][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.973337][ T10] usb 4-1: Product: syz [ 732.984153][ T10] usb 4-1: Manufacturer: syz [ 732.993419][ T10] usb 4-1: SerialNumber: syz [ 733.006889][ T10] usb 4-1: config 0 descriptor?? [ 733.027398][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 733.230511][ T10] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 733.248104][ T10] quatech2: probe of 4-1:0.51 failed with error -90 [ 733.445072][ T10] usb 4-1: USB disconnect, device number 40 [ 747.577925][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.584391][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.767671][T11788] loop5: detected capacity change from 0 to 7 [ 747.811772][T11788] Dev loop5: unable to read RDB block 7 [ 747.817397][T11788] loop5: unable to read partition table [ 747.838109][T11788] loop5: partition table beyond EOD, truncated [ 747.861063][T11788] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 748.327857][ T5806] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 748.687119][T11802] hub 8-0:1.0: USB hub found [ 748.697890][T11802] hub 8-0:1.0: 1 port detected [ 748.867908][ T5806] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 748.877175][ T5806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.888413][ T5806] usb 2-1: config 0 has no interface number 0 [ 749.022716][ T5806] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 749.167088][ T5806] usb 2-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.656877][ T5806] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 749.681950][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.703704][ T5806] usb 2-1: Product: syz [ 749.717830][ T5806] usb 2-1: Manufacturer: syz [ 749.743018][ T5806] usb 2-1: SerialNumber: syz [ 749.768979][ T5806] usb 2-1: config 0 descriptor?? [ 749.806500][ T5806] vmk80xx 2-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 751.168165][ T5806] usb 2-1: USB disconnect, device number 22 [ 754.614043][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 754.624622][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 754.624635][ T28] audit: type=1326 audit(1783530458.448:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.1.1988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ee379de59 code=0x0 [ 754.760464][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.771333][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.786143][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.804372][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.814666][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.827933][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.382818][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 758.629806][ T5781] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 758.638944][ T5781] Bluetooth: hci1: Injecting HCI hardware error event [ 758.646912][ T5781] Bluetooth: hci1: hardware error 0x00 [ 759.108550][ T28] audit: type=1326 audit(1783530462.938:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11870 comm="syz.3.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17ce39de59 code=0x0 [ 761.690626][ T5781] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 761.697667][ T23] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 761.823680][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 761.900445][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 761.910595][ T23] usb 4-1: config 1 has no interface number 0 [ 761.916739][ T23] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.927999][ T23] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 761.937106][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 761.954935][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 761.974180][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.031532][ T23] usb 4-1: Product: syz [ 762.051056][ T23] usb 4-1: Manufacturer: syz [ 762.055909][ T23] usb 4-1: SerialNumber: syz [ 762.388483][ T5781] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 762.397960][ T5781] Bluetooth: hci2: Injecting HCI hardware error event [ 762.408259][ T5781] Bluetooth: hci2: hardware error 0x00 [ 763.197309][ T23] cdc_ncm 4-1:1.1: bind() failure [ 763.474699][ T5811] usb 4-1: USB disconnect, device number 41 [ 764.468704][ T5781] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 766.637922][ T5811] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 766.677861][ T5806] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 766.824445][ T5811] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 766.833819][ T5811] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 766.847569][ T5811] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 766.864477][ T5806] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 766.882020][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.891171][ T5806] usb 3-1: config 1 has no interface number 0 [ 766.897361][ T5811] usb 4-1: Product: syz [ 766.902326][ T5811] usb 4-1: Manufacturer: syz [ 766.907046][ T5806] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.918211][ T5811] usb 4-1: SerialNumber: syz [ 766.926336][ T5811] usb 4-1: config 0 descriptor?? [ 766.931504][ T5806] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 766.946616][ T5806] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 766.967413][ T5806] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 766.987029][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.995727][ T5806] usb 3-1: Product: syz [ 767.000462][ T5806] usb 3-1: Manufacturer: syz [ 767.005176][ T5806] usb 3-1: SerialNumber: syz [ 767.175528][ T5811] usb 4-1: USB disconnect, device number 42 [ 769.567217][ T5806] cdc_ncm 3-1:1.1: bind() failure [ 769.588711][ T5806] usb 3-1: USB disconnect, device number 39 [ 770.223057][T11953] hsr0: entered promiscuous mode [ 770.257435][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 770.570766][ T5781] Bluetooth: hci3: unexpected event for opcode 0x000d [ 774.960493][ T5806] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 775.207773][ T5806] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 775.262689][ T5806] usb 3-1: config 1 has no interface number 0 [ 775.353431][ T5806] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.403334][ T5806] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 775.436457][ T5806] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 775.484524][ T5806] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 775.501561][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.526912][ T5806] usb 3-1: Product: syz [ 775.535938][ T5806] usb 3-1: Manufacturer: syz [ 775.548640][ T5806] usb 3-1: SerialNumber: syz [ 780.881317][ T5806] cdc_ncm 3-1:1.1: bind() failure [ 780.909376][ T5806] usb 3-1: USB disconnect, device number 40 [ 780.953495][T12006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2045'. [ 786.949497][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2056'. [ 790.457331][T12066] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 791.427416][T12072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2066'. [ 791.477935][T10066] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 791.669631][T10066] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 791.690839][T10066] usb 3-1: config 1 has no interface number 0 [ 791.697165][T10066] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.747883][T10066] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 791.767530][T10066] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 791.788856][T10066] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.805681][T10066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.813955][T10066] usb 3-1: Product: syz [ 791.822225][T10066] usb 3-1: Manufacturer: syz [ 791.831273][T10066] usb 3-1: SerialNumber: syz [ 793.528365][T10066] cdc_ncm 3-1:1.1: bind() failure [ 793.755609][T10066] usb 3-1: USB disconnect, device number 41 [ 808.999992][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.006306][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.997813][ T5811] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 811.200371][ T5811] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 811.219610][ T5811] usb 2-1: config 1 has no interface number 0 [ 811.225773][ T5811] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.257030][ T5811] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 811.276373][ T5811] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 811.298966][ T5811] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 811.308980][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.327730][ T5811] usb 2-1: Product: syz [ 811.331992][ T5811] usb 2-1: Manufacturer: syz [ 811.336620][ T5811] usb 2-1: SerialNumber: syz [ 812.363548][ T5811] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 813.828432][ T5811] cdc_ncm 2-1:1.1: bind() failure [ 813.858057][ T5811] usb 2-1: USB disconnect, device number 24 [ 817.108031][T12213] overlayfs: missing 'lowerdir' [ 833.022526][T12301] syz.0.2130 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 835.600272][T12319] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 863.512116][T11496] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 863.707815][T11496] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 863.718497][T11496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.753001][T11496] usb 2-1: config 0 descriptor?? [ 864.090896][T11496] usb 2-1: Cannot read MAC address [ 864.097634][T11496] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 864.130724][T11496] usb 2-1: USB disconnect, device number 25 [ 864.275087][T10066] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 864.527896][T10066] usb 4-1: Using ep0 maxpacket: 16 [ 864.588998][T10066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.613858][T10066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 864.672427][T12519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 865.357854][T10066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 865.372756][T10066] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 865.393080][T10066] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.454258][T10066] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 865.483796][T10066] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 865.517278][T10066] usb 4-1: Manufacturer: syz [ 865.535609][T10066] usb 4-1: config 0 descriptor?? [ 866.487817][T10066] rc_core: IR keymap rc-hauppauge not found [ 866.493835][T10066] Registered IR keymap rc-empty [ 866.506925][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.548044][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.719688][T10066] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 866.798758][T10066] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 868.304769][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.417829][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.657831][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.698062][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.728440][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.459134][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 870.927984][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 870.929194][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.948444][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.997816][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.048282][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.056857][T12546] loop3: detected capacity change from 0 to 4096 [ 871.105250][T10066] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.159870][T10066] mceusb 4-1:0.0: Registered ਧ with mce emulator interface version 1 [ 871.200497][T10066] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 871.282620][T10066] usb 4-1: USB disconnect, device number 43 [ 871.450272][T12546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 871.507838][T12546] EXT4-fs (loop3): Test dummy encryption mode enabled [ 871.660587][T12546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.645994][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.617986][T10066] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 877.369968][T12588] loop3: detected capacity change from 0 to 512 [ 877.454516][T12588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.488011][T12588] ext4 filesystem being mounted at /548/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.344876][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.629910][T12626] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 882.675514][T11496] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 882.907982][T11496] usb 2-1: Using ep0 maxpacket: 16 [ 882.953279][T11496] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.021213][T11496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 883.092855][T11496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 883.163443][T11496] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 883.231630][T11496] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.328646][T11496] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 883.389427][T11496] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 883.457292][T12628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2224'. [ 883.470737][T11496] usb 2-1: Manufacturer: syz [ 883.490521][T11496] usb 2-1: config 0 descriptor?? [ 884.642295][T11496] rc_core: IR keymap rc-hauppauge not found [ 884.667832][T11496] Registered IR keymap rc-empty [ 884.707431][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 884.758492][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 884.798460][T11496] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 884.828282][T11496] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 884.918009][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 884.978035][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 884.994974][T12641] loop0: detected capacity change from 0 to 512 [ 885.017899][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 885.044537][T12641] EXT4-fs: Ignoring removed nobh option [ 885.082561][T12641] EXT4-fs: Ignoring removed nobh option [ 885.088626][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 885.138523][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 885.171724][T12641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.201106][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 885.226221][T12641] ext4 filesystem being mounted at /575/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 885.238001][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 885.268199][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 885.307947][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 885.337771][T11496] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 885.372968][T11496] mceusb 2-1:0.0: Registered 鬸 with mce emulator interface version 1 [ 885.398938][T12647] EXT4-fs (loop0): resizing filesystem from 128 to 2 blocks [ 885.408910][T12641] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.2229: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 885.417224][T11496] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 885.447217][T12647] EXT4-fs warning (device loop0): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 885.478999][T11496] usb 2-1: USB disconnect, device number 26 [ 885.722052][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.092320][T12654] netlink: 1648 bytes leftover after parsing attributes in process `syz.1.2232'. [ 887.925040][T12667] comedi comedi0: bad chanlist[0]=0x00001016 chan=4118 range length=4 [ 894.758819][T12712] vivid-000: kernel_thread() failed [ 910.291926][T12786] syzkaller0: entered promiscuous mode [ 910.297447][T12786] syzkaller0: entered allmulticast mode [ 912.349884][T12813] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 914.389754][T12823] loop0: detected capacity change from 0 to 256 [ 915.316401][ T5808] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 915.552347][ T5808] usb 4-1: device descriptor read/64, error -71 [ 915.842111][ T5808] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 916.002928][ T5808] usb 4-1: device descriptor read/64, error -71 [ 916.139451][ T5808] usb usb4-port1: attempt power cycle [ 916.577844][ T5808] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 916.621134][ T5808] usb 4-1: device descriptor read/8, error -71 [ 916.897927][ T5808] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 916.979559][ T5808] usb 4-1: device descriptor read/8, error -71 [ 917.452736][ T5808] usb usb4-port1: unable to enumerate USB device [ 921.029364][T12869] loop1: detected capacity change from 0 to 128 [ 921.045719][T12868] loop2: detected capacity change from 0 to 2048 [ 921.103862][T12869] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 921.160561][T12868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.215777][T12869] ext4 filesystem being mounted at /578/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 921.247046][T12868] ext4 filesystem being mounted at /547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 921.402671][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 921.448992][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.277931][ T5811] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 924.723160][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 924.827165][ T5811] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 924.919361][ T5811] usb 4-1: config 1 has no interface number 0 [ 924.987248][ T5811] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 925.207194][ T5811] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 925.239123][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.267542][ T5811] usb 4-1: Product: syz [ 925.296171][ T5811] usb 4-1: Manufacturer: syz [ 925.311070][ T5811] usb 4-1: SerialNumber: syz [ 925.339658][ T5811] cdc_ncm 4-1:1.1: NCM or ECM functional descriptors missing [ 925.410172][ T5811] cdc_ncm 4-1:1.1: bind() failure [ 925.924492][T11856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 925.936017][T11856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 925.944970][T11856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 925.989306][T11856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 925.996994][T11856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 926.010146][T11856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 928.213331][T11856] Bluetooth: hci4: command tx timeout [ 928.265076][ T172] usb 4-1: USB disconnect, device number 49 [ 928.466043][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'. [ 928.481256][ T9239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.714282][ T9239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.436040][ T9239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.717879][T11856] Bluetooth: hci4: command tx timeout [ 930.895081][ T9239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.957572][T12910] chnl_net:caif_netlink_parms(): no params data found [ 931.309383][T12910] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.338569][T12910] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.345772][T12910] bridge_slave_0: entered allmulticast mode [ 931.369262][T12910] bridge_slave_0: entered promiscuous mode [ 931.388052][T12910] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.395203][T12910] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.407915][ T5811] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 931.431423][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.448256][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.456933][T12910] bridge_slave_1: entered allmulticast mode [ 931.464434][T12910] bridge_slave_1: entered promiscuous mode [ 931.556414][T12910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.618425][T12910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.661305][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.702479][ T5811] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 931.748812][ T5811] usb 2-1: config 1 has no interface number 0 [ 931.754991][ T5811] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 931.819981][T12910] team0: Port device team_slave_0 added [ 931.832680][ T5811] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.856590][T12910] team0: Port device team_slave_1 added [ 931.863586][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.881808][ T5811] usb 2-1: Product: syz [ 931.892747][ T5811] usb 2-1: Manufacturer: syz [ 931.918973][ T5811] usb 2-1: SerialNumber: syz [ 931.966282][ T5811] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 932.018477][ T5811] cdc_ncm 2-1:1.1: bind() failure [ 932.208433][T12910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.230069][T12910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.300846][T12910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.440419][T12910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.471790][T12910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.594137][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 932.608340][T12910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.787753][T11856] Bluetooth: hci4: command tx timeout [ 932.971793][T12910] hsr_slave_0: entered promiscuous mode [ 932.998256][T12910] hsr_slave_1: entered promiscuous mode [ 933.018314][T12910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 933.033169][T12910] Cannot create hsr debugfs directory [ 934.324180][ T9239] erspan0 (unregistering): left promiscuous mode [ 934.412894][ T5808] usb 2-1: USB disconnect, device number 27 [ 936.025768][T11856] Bluetooth: hci4: command tx timeout [ 936.061016][ T9239] gretap0 (unregistering): left promiscuous mode [ 938.010582][T13014] loop2: detected capacity change from 0 to 128 [ 938.231835][ T5778] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 938.276989][ T5778] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 938.865214][ T9239] hsr_slave_0: left promiscuous mode [ 938.984505][ T9239] hsr_slave_1: left promiscuous mode [ 940.673201][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.694561][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.749256][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.802365][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.868650][ T9239] bridge_slave_1: left allmulticast mode [ 940.874354][ T9239] bridge_slave_1: left promiscuous mode [ 940.899903][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.927372][ T9239] bridge_slave_0: left allmulticast mode [ 940.952079][ T9239] bridge_slave_0: left promiscuous mode [ 940.968283][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.225058][ T9239] veth1_macvtap: left promiscuous mode [ 941.918882][ T9239] veth0_macvtap: left promiscuous mode [ 941.924589][ T9239] veth1_vlan: left promiscuous mode [ 941.958003][ T9239] veth0_vlan: left promiscuous mode [ 942.546104][T13052] loop7: detected capacity change from 0 to 7 [ 942.558399][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.567788][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.579167][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.588402][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.599150][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.608360][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.616534][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.625732][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.640874][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.650089][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.659211][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.668452][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.682736][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.691975][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.708698][T13052] ldm_validate_partition_table(): Disk read failed. [ 942.715671][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.724863][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.738141][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.747374][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.757207][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.766413][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 942.775458][T13052] Dev loop7: unable to read RDB block 0 [ 942.792281][T13052] loop7: unable to read partition table [ 942.800134][T13052] loop7: partition table beyond EOD, truncated [ 942.806453][T13052] loop_reread_partitions: partition scan of loop7 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 944.356682][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2344'. [ 944.430836][ T9239] team0 (unregistering): Port device team_slave_1 removed [ 944.486547][ T9239] team0 (unregistering): Port device team_slave_0 removed [ 944.537840][ T9239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.609289][ T9239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.124106][ T9239] bond0 (unregistering): Released all slaves [ 946.230309][ T9239] IPVS: stop unused estimator thread 0... [ 946.280283][T12910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 946.316389][T12910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 946.350310][T12910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 946.367723][ T5806] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 946.390828][T12910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 946.527179][ T9239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.582766][ T5806] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.612997][ T5806] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 946.628532][ T5806] usb 4-1: config 1 has no interface number 0 [ 946.634830][ T5806] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.665342][ T5806] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 946.694238][ T9239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.710147][ T5806] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 946.728208][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.736254][ T5806] usb 4-1: Product: syz [ 946.769213][ T5806] usb 4-1: Manufacturer: syz [ 946.773852][ T5806] usb 4-1: SerialNumber: syz [ 946.838919][T11856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 946.850132][T11856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 946.859047][ T5806] usb 4-1: selecting invalid altsetting 1 [ 946.868692][T11856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 946.879121][T11856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 946.891099][T11856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 946.900282][T11856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 946.960129][ T9239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.017899][T12910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.061008][T12910] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.170760][ T9239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.209746][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.216931][ T8581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.246700][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.253892][ T8581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.262753][ T5806] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 947.278499][ T5806] cdc_ncm 4-1:1.1: bind() failure [ 948.958950][ T5781] Bluetooth: hci2: command tx timeout [ 949.145064][ T5807] usb 4-1: USB disconnect, device number 50 [ 949.211417][T13086] chnl_net:caif_netlink_parms(): no params data found [ 949.451756][T12910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.687336][T13086] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.767927][T13086] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.775179][T13086] bridge_slave_0: entered allmulticast mode [ 949.809260][T13086] bridge_slave_0: entered promiscuous mode [ 949.849194][T13086] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.856327][T13086] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.884023][T13086] bridge_slave_1: entered allmulticast mode [ 949.899755][T13086] bridge_slave_1: entered promiscuous mode [ 949.906332][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 950.050336][T13086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.560589][T13086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.027828][ T5781] Bluetooth: hci2: command tx timeout [ 951.305311][T13086] team0: Port device team_slave_0 added [ 951.541257][T13086] team0: Port device team_slave_1 added [ 951.972762][T12910] veth0_vlan: entered promiscuous mode [ 952.354410][T13086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.372747][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.435998][T13086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.844870][ T5781] Bluetooth: hci2: command tx timeout [ 953.854779][T13086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.959502][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.985806][T13086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.998715][T12910] veth1_vlan: entered promiscuous mode [ 954.061416][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.079972][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.102021][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.130088][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.156285][ T9239] bridge_slave_1: left allmulticast mode [ 954.164205][ T9239] bridge_slave_1: left promiscuous mode [ 954.176341][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.199273][ T9239] bridge_slave_0: left allmulticast mode [ 954.205061][ T9239] bridge_slave_0: left promiscuous mode [ 954.211180][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.254859][ T9239] veth1_macvtap: left promiscuous mode [ 954.261893][ T9239] veth0_macvtap: left promiscuous mode [ 954.268348][ T9239] veth1_vlan: left promiscuous mode [ 954.273816][ T9239] veth0_vlan: left promiscuous mode [ 955.007795][T11496] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 955.052645][ T9239] team0 (unregistering): Port device team_slave_1 removed [ 955.075516][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'. [ 955.102743][ T9239] team0 (unregistering): Port device team_slave_0 removed [ 955.143339][ T9239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.185589][ T9239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.200740][T11496] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.216644][T11496] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 955.232183][T11496] usb 4-1: config 1 has no interface number 0 [ 955.239958][T11496] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.255957][T11496] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 955.268398][T11496] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 955.277511][T11496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.285590][T11496] usb 4-1: Product: syz [ 955.292441][T11496] usb 4-1: Manufacturer: syz [ 955.297155][T11496] usb 4-1: SerialNumber: syz [ 955.314142][T11496] usb 4-1: selecting invalid altsetting 1 [ 955.627481][ T9239] bond0 (unregistering): Released all slaves [ 955.721768][T11496] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 955.728879][T11496] cdc_ncm 4-1:1.1: bind() failure [ 955.846284][T13086] hsr_slave_0: entered promiscuous mode [ 955.853089][T13086] hsr_slave_1: entered promiscuous mode [ 955.868192][T13086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 955.875785][T13086] Cannot create hsr debugfs directory [ 955.909190][ T5781] Bluetooth: hci2: command tx timeout [ 955.936607][T13170] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 956.066084][T12910] veth0_macvtap: entered promiscuous mode [ 956.080450][T12910] veth1_macvtap: entered promiscuous mode [ 956.097810][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.108572][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.139840][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.166286][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.206104][T12910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.280740][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.327670][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.337599][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.367606][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.602158][T12910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.904014][T12910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.904072][T12910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.904100][T12910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.904128][T12910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.103499][ T9239] IPVS: stop unused estimator thread 0... [ 957.469783][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.528679][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.313883][ T5806] usb 4-1: USB disconnect, device number 51 [ 958.556329][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.627235][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.784092][T13086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 958.991849][T13086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 959.026381][T13086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 959.045403][T13086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 959.108889][T13205] fuse: Bad value for 'group_id' [ 959.995486][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2366'. [ 961.058933][T13086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.078433][T13086] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.443947][ T9239] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.451408][ T9239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.619355][ T9239] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.626569][ T9239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.416482][T13086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.895032][T13244] fuse: Bad value for 'group_id' [ 964.526653][T13086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.090778][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 965.304566][T13086] veth0_vlan: entered promiscuous mode [ 966.021280][T13086] veth1_vlan: entered promiscuous mode [ 967.195911][T13086] veth0_macvtap: entered promiscuous mode [ 967.263374][T13086] veth1_macvtap: entered promiscuous mode [ 967.329239][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.359499][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.387671][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.422815][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.449796][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.467813][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.499107][T13086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.539216][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.625880][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.646007][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.677051][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.712178][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.747819][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.798063][T13086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.833620][T13086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.910358][T13289] fuse: Bad value for 'group_id' [ 968.120416][T13086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.244821][T13086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.469367][T13086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.794631][ T9239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.831817][ T9239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.916557][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.934269][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.963321][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 972.443999][T11856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 972.463113][T11856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 972.477395][T11856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 972.486058][T11856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 972.494573][T11856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 972.502113][T11856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 974.738954][ T5781] Bluetooth: hci3: command tx timeout [ 974.855338][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'. [ 975.199936][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.364891][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.423873][T13327] chnl_net:caif_netlink_parms(): no params data found [ 975.570432][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.736912][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.787756][ T5781] Bluetooth: hci3: command tx timeout [ 976.847473][T13327] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.894379][T13327] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.913846][T13327] bridge_slave_0: entered allmulticast mode [ 976.924393][T13327] bridge_slave_0: entered promiscuous mode [ 976.964164][T13327] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.410814][T13327] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.451007][T13327] bridge_slave_1: entered allmulticast mode [ 978.464532][T13327] bridge_slave_1: entered promiscuous mode [ 978.650418][T13327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.767724][T13327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.867793][ T5781] Bluetooth: hci3: command tx timeout [ 978.892798][T13327] team0: Port device team_slave_0 added [ 978.903653][T13327] team0: Port device team_slave_1 added [ 979.047034][T13327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.371938][T13327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.755668][T13327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.903788][T13327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.928028][T13327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.987735][T13327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.382439][T13327] hsr_slave_0: entered promiscuous mode [ 981.048474][ T5781] Bluetooth: hci3: command tx timeout [ 981.194869][T13327] hsr_slave_1: entered promiscuous mode [ 981.205122][T13327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.212818][T13327] Cannot create hsr debugfs directory [ 988.805742][ T13] hsr_slave_0: left promiscuous mode [ 988.883590][ T13] hsr_slave_1: left promiscuous mode [ 988.898534][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.905988][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.940315][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.967704][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.977559][ T13] bridge_slave_1: left allmulticast mode [ 989.007982][ T13] bridge_slave_1: left promiscuous mode [ 989.013732][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.208275][ T13] bridge_slave_0: left allmulticast mode [ 989.219287][ T13] bridge_slave_0: left promiscuous mode [ 989.859670][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.228610][ T13] veth1_macvtap: left promiscuous mode [ 991.247803][ T13] veth0_macvtap: left promiscuous mode [ 991.278097][ T13] veth1_vlan: left promiscuous mode [ 991.283396][ T13] veth0_vlan: left promiscuous mode [ 992.137920][T11496] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 992.351155][T11496] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.466380][T11496] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 992.550892][T11496] usb 5-1: config 1 has no interface number 0 [ 992.580050][T11496] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.619353][T11496] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 992.729462][T11496] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 992.878570][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.885051][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.905555][T11496] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 992.938020][T11496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.977651][T11496] usb 5-1: Product: syz [ 992.981853][T11496] usb 5-1: Manufacturer: syz [ 992.986473][T11496] usb 5-1: SerialNumber: syz [ 994.957229][T11496] cdc_ncm 5-1:1.1: bind() failure [ 995.162787][ T13] team0 (unregistering): Port device team_slave_1 removed [ 995.187342][T11496] usb 5-1: USB disconnect, device number 2 [ 995.314108][ T13] team0 (unregistering): Port device team_slave_0 removed [ 995.434852][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.580423][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.608093][ T13] bond0 (unregistering): Released all slaves [ 997.721768][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 997.943191][T13327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 999.481650][T13327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 999.537351][T13327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 999.698283][T13327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1001.745766][T13327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.842504][T13327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.900124][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.907286][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.949525][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.956676][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.096050][ T13] IPVS: stop unused estimator thread 0... [ 1002.170198][T13490] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1002.864086][T13327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.180572][T13327] veth0_vlan: entered promiscuous mode [ 1004.225523][T13327] veth1_vlan: entered promiscuous mode [ 1004.325599][T13327] veth0_macvtap: entered promiscuous mode [ 1004.372550][T13327] veth1_macvtap: entered promiscuous mode [ 1004.437943][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2427'. [ 1004.448800][T13327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.477717][T13327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.487558][T13327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.517690][T13327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.528663][T13327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.540580][T13327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.553217][T13327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.023680][T13327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.034274][T13327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.044633][T13327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.077744][T13327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.097910][T13327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.114035][T13327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.140809][T13327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.181448][T13327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.196237][T13327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.205380][T13327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.219399][T13327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.720495][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.942872][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.337819][ T8581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.345692][ T8581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.790176][T13552] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1010.447709][ T5806] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1010.763247][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'. [ 1010.807758][ T5806] usb 5-1: Using ep0 maxpacket: 16 [ 1010.838238][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.891243][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1010.939389][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1010.977634][ T5806] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1010.987398][ T5806] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1011.024333][ T5771] syz-executor (5771) used greatest stack depth: 19824 bytes left [ 1011.107601][ T5806] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1011.137305][ T5806] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1011.169595][ T5806] usb 5-1: Manufacturer: syz [ 1011.207986][ T5806] usb 5-1: config 0 descriptor?? [ 1011.237145][T11856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1011.246753][T11856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1011.255279][T11856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1011.264565][T11856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1011.273015][T11856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1011.280795][T11856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1011.671775][ T1127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.687686][ T5806] rc_core: IR keymap rc-hauppauge not found [ 1011.693624][ T5806] Registered IR keymap rc-empty [ 1011.699061][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1011.782198][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1011.884076][ T5806] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1012.093837][ T5806] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 1012.411989][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1012.599239][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1012.641993][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.712698][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.720265][ T5781] Bluetooth: hci0: command tx timeout [ 1013.730252][ T1127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.752878][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.827781][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.887002][T13587] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2440'. [ 1013.896394][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.927834][ T1127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.947958][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.990579][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1014.038289][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1014.080244][ T5806] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1014.088498][ T5806] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1014.101583][ T5806] usb 5-1: USB disconnect, device number 3 [ 1015.241766][ T1127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.514660][T13569] chnl_net:caif_netlink_parms(): no params data found [ 1015.753759][ T5781] Bluetooth: hci0: command tx timeout [ 1017.844646][ T5781] Bluetooth: hci0: command tx timeout [ 1018.047509][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.087801][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.126414][T13569] bridge_slave_0: entered allmulticast mode [ 1018.150563][T13569] bridge_slave_0: entered promiscuous mode [ 1018.179207][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.186358][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.227850][T13569] bridge_slave_1: entered allmulticast mode [ 1018.235043][T13569] bridge_slave_1: entered promiscuous mode [ 1018.432894][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.454751][T13625] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2450'. [ 1018.471964][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.549153][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 1019.846279][T13569] team0: Port device team_slave_0 added [ 1019.853733][T13638] loop4: detected capacity change from 0 to 256 [ 1019.877349][T13569] team0: Port device team_slave_1 added [ 1019.917970][ T5781] Bluetooth: hci0: command tx timeout [ 1020.252071][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.267754][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.337821][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.447454][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.461841][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.517693][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.637460][T13655] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1024.013038][T13569] hsr_slave_0: entered promiscuous mode [ 1024.067294][T13569] hsr_slave_1: entered promiscuous mode [ 1024.107772][T13569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.126974][T13569] Cannot create hsr debugfs directory [ 1024.148635][T13669] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2458'. [ 1026.776707][ T1127] hsr_slave_0: left promiscuous mode [ 1026.850882][ T1127] hsr_slave_1: left promiscuous mode [ 1026.894947][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.931925][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.960472][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.987739][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.018626][ T1127] bridge_slave_1: left allmulticast mode [ 1027.024306][ T1127] bridge_slave_1: left promiscuous mode [ 1027.038089][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.074934][ T1127] bridge_slave_0: left allmulticast mode [ 1027.092245][ T1127] bridge_slave_0: left promiscuous mode [ 1027.100492][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.238466][ T1127] veth1_macvtap: left promiscuous mode [ 1027.244052][ T1127] veth0_macvtap: left promiscuous mode [ 1027.267995][ T1127] veth1_vlan: left promiscuous mode [ 1027.283621][ T1127] veth0_vlan: left promiscuous mode [ 1030.022012][T13710] netlink: 'syz.0.2467': attribute type 72 has an invalid length. [ 1030.283865][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 1030.351334][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 1030.401614][T13715] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1030.778034][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.253242][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.673670][ T1127] bond0 (unregistering): Released all slaves [ 1033.033934][ T1127] IPVS: stop unused estimator thread 0... [ 1033.299187][T13569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1033.361856][T13569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1033.488708][T13569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1033.560357][T13569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1034.816503][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.922823][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.992299][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.999496][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.124038][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.131239][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.290332][T13569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1036.042935][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.216914][T13569] veth0_vlan: entered promiscuous mode [ 1036.291047][T13569] veth1_vlan: entered promiscuous mode [ 1036.438168][T13569] veth0_macvtap: entered promiscuous mode [ 1036.469902][T13569] veth1_macvtap: entered promiscuous mode [ 1036.690213][T13773] loop0: detected capacity change from 0 to 128 [ 1036.696511][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.696561][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.696574][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.696586][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.696598][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.696611][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.771179][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.809334][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.895278][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.266979][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.413497][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.429904][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.457899][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.470238][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.482476][T13569] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.493207][T13569] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.527935][T13569] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.538974][T13569] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.571776][T12910] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1037.704932][T12910] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1037.801785][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.827549][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.971796][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.001386][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.432419][T13790] overlayfs: failed to resolve './bus': -2 [ 1038.983680][T13799] netlink: 'syz.1.2486': attribute type 72 has an invalid length. [ 1039.322691][ T1094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.822453][ T1094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.282785][ T1094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.477159][T13822] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1041.434268][T13825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2490'. [ 1041.649572][ T1094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.596021][T13846] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1043.117834][ T2132] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1043.173420][T11856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1043.197822][T11856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1043.206018][T11856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1043.214192][T11856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1043.224133][T11856] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1043.241798][T11856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1043.317837][ T2132] usb 4-1: Using ep0 maxpacket: 16 [ 1043.324573][ T2132] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.344995][ T2132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1043.358130][ T2132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1043.368082][ T2132] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1043.378027][ T2132] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1043.393073][ T2132] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1043.407666][ T2132] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1043.416787][ T2132] usb 4-1: Manufacturer: syz [ 1043.426538][ T2132] usb 4-1: config 0 descriptor?? [ 1043.568699][T13868] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1044.538612][ T2132] rc_core: IR keymap rc-hauppauge not found [ 1044.544566][ T2132] Registered IR keymap rc-empty [ 1044.558913][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.635515][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.758429][ T2132] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1044.796817][ T2132] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 1044.823027][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.857850][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.889796][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.920627][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.967795][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.008000][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.067763][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.116543][T13861] chnl_net:caif_netlink_parms(): no params data found [ 1045.126189][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.198054][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.267855][ T2132] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.329338][ T2132] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1045.345834][ T2132] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1045.356043][T11856] Bluetooth: hci1: command tx timeout [ 1045.405397][ T2132] usb 4-1: USB disconnect, device number 52 [ 1045.753977][T13891] loop3: detected capacity change from 0 to 512 [ 1045.985716][T13891] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 1046.067933][T13891] EXT4-fs (loop3): 1 truncate cleaned up [ 1046.074863][T13891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.207204][T13861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.233558][T13861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.251290][T13861] bridge_slave_0: entered allmulticast mode [ 1046.272617][T13861] bridge_slave_0: entered promiscuous mode [ 1046.395796][T13327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.657396][T13861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.686435][T13861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.708018][T13861] bridge_slave_1: entered allmulticast mode [ 1046.715206][T13861] bridge_slave_1: entered promiscuous mode [ 1046.776829][T13905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2503'. [ 1046.862160][T13861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.929244][T13861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.229515][T13911] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2504'. [ 1047.427838][T11856] Bluetooth: hci1: command tx timeout [ 1047.556842][ T1094] hsr_slave_0: left promiscuous mode [ 1047.667836][ T1094] hsr_slave_1: left promiscuous mode [ 1047.802809][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.822117][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.855699][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.880827][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.898996][ T1094] bridge_slave_1: left allmulticast mode [ 1047.905162][ T1094] bridge_slave_1: left promiscuous mode [ 1047.922991][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.944161][ T1094] bridge_slave_0: left allmulticast mode [ 1047.953354][ T1094] bridge_slave_0: left promiscuous mode [ 1047.967883][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.026687][ T1094] veth1_macvtap: left promiscuous mode [ 1048.032424][ T1094] veth0_macvtap: left promiscuous mode [ 1048.046250][ T1094] veth1_vlan: left promiscuous mode [ 1048.057519][ T1094] veth0_vlan: left promiscuous mode [ 1048.456020][T13925] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1049.507680][T11856] Bluetooth: hci1: command tx timeout [ 1051.587761][T11856] Bluetooth: hci1: command tx timeout [ 1052.959017][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 1053.081325][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 1053.288070][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.308417][T13936] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2512'. [ 1053.433954][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.114230][ T1094] bond0 (unregistering): Released all slaves [ 1054.277143][T13861] team0: Port device team_slave_0 added [ 1054.295222][T13861] team0: Port device team_slave_1 added [ 1054.313760][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.320293][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.501668][T13861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.537699][T13861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.648890][T13861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.684783][T13861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.707696][T13861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.777799][T13861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.924485][T13861] hsr_slave_0: entered promiscuous mode [ 1055.988044][T13861] hsr_slave_1: entered promiscuous mode [ 1058.156715][T13861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1058.260976][T13861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1058.355212][T13861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1058.452442][T13861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1058.619000][ T5806] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1058.765844][T13980] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1058.849689][ T5806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.598599][ T5806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1059.607652][ T5806] usb 2-1: config 1 has no interface number 0 [ 1059.613814][ T5806] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.624858][ T5806] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1059.681595][T13861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.716979][ T5806] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1059.815486][ T5806] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1059.829225][T13861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.838071][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.860994][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.868190][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.886604][ T5806] usb 2-1: Product: syz [ 1059.895849][ T5806] usb 2-1: Manufacturer: syz [ 1059.909174][ T5806] usb 2-1: SerialNumber: syz [ 1059.971093][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.978297][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.133335][T13861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1060.184278][T13861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1062.177924][ T5806] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 1062.207838][ T5806] cdc_ncm 2-1:1.1: bind() failure [ 1062.270148][ T5806] usb 2-1: USB disconnect, device number 28 [ 1063.866934][T13861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.876446][T13861] veth0_vlan: entered promiscuous mode [ 1064.907452][T13861] veth1_vlan: entered promiscuous mode [ 1065.020955][T13861] veth0_macvtap: entered promiscuous mode [ 1065.063664][T13861] veth1_macvtap: entered promiscuous mode [ 1065.145440][T13861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.176898][T13861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.207260][T13861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.227639][T13861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.247900][T13861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.271721][T13861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.285680][T13861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.353100][T13861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.394501][T13861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.425355][T13861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.436713][T13861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.457357][T13861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.477917][T13861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.507197][T13861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.540677][T13861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.555523][T13861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.607434][T13861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.868289][T13861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.492838][T14049] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1067.359129][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.367478][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.375923][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.383580][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.187891][T11496] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1069.406155][T11496] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1069.416035][T11496] usb 2-1: config 1 has no interface number 0 [ 1069.424136][T11496] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.436286][T11496] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1069.446405][T11496] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 1069.470419][T11496] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1069.480047][T11496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.489383][T11496] usb 2-1: Product: syz [ 1069.493665][T11496] usb 2-1: Manufacturer: syz [ 1069.499729][T11496] usb 2-1: SerialNumber: syz [ 1070.375205][T11496] cdc_ncm 2-1:1.1: bind() failure [ 1070.604671][ T2132] usb 2-1: USB disconnect, device number 29 [ 1071.764626][T14078] Bluetooth: hci2: command 0x0406 tx timeout [ 1077.172955][T14137] overlay: filesystem on ./file0 not supported as upperdir [ 1078.811484][T14159] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1086.786930][T14207] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1092.385352][T14252] loop3: detected capacity change from 0 to 512 [ 1092.481062][T14252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.560924][T14252] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.896089][T13327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.548283][T14280] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1100.284969][T14078] Bluetooth: hci3: command 0x0406 tx timeout [ 1100.760686][T13089] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1102.617859][ T5806] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1102.840943][ T5806] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1102.865426][ T5806] usb 4-1: config 1 has no interface number 0 [ 1102.892061][ T5806] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.934263][ T5806] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1102.958028][ T5806] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1102.982274][ T5806] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1102.992062][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.011107][ T5806] usb 4-1: Product: syz [ 1103.028115][ T5806] usb 4-1: Manufacturer: syz [ 1103.045658][ T5806] usb 4-1: SerialNumber: syz [ 1103.834949][T14362] fuse: Bad value for 'user_id' [ 1104.557770][ T5806] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 1104.564350][ T5806] cdc_ncm 4-1:1.1: bind() failure [ 1105.647466][ T5806] usb 4-1: USB disconnect, device number 53 [ 1107.591019][T14388] fuse: Bad value for 'user_id' [ 1109.710689][T14407] fuse: Bad value for 'user_id' [ 1110.678011][ T172] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1110.893101][ T172] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1110.914397][ T172] usb 4-1: config 1 has no interface number 0 [ 1110.945894][ T172] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.978107][ T172] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1110.987218][ T172] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1111.035274][ T172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.067104][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.096244][ T172] usb 4-1: Product: syz [ 1111.107649][ T172] usb 4-1: Manufacturer: syz [ 1111.112336][ T172] usb 4-1: SerialNumber: syz [ 1111.844128][ T172] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 1111.850842][ T172] cdc_ncm 4-1:1.1: bind() failure [ 1113.044874][T14464] fuse: Bad value for 'fd' [ 1113.891430][T11496] usb 4-1: USB disconnect, device number 54 [ 1115.757952][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.758035][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.284471][T14503] fuse: Bad value for 'fd' [ 1118.966610][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'. [ 1119.311344][ T5808] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1119.523963][ T5808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1119.537625][ T5808] usb 4-1: config 1 has no interface number 0 [ 1119.558203][ T5808] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.596567][ T5808] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1119.631971][ T5808] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1119.670031][ T5808] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1119.692417][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.720809][ T5808] usb 4-1: Product: syz [ 1119.725008][ T5808] usb 4-1: Manufacturer: syz [ 1119.754335][ T5808] usb 4-1: SerialNumber: syz [ 1122.239554][ T5808] cdc_ncm 4-1:1.1: bind() failure [ 1122.258716][ T5808] usb 4-1: USB disconnect, device number 55 [ 1122.362874][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 1122.840801][T14551] fuse: Bad value for 'fd' [ 1124.768977][T14574] fuse: Bad value for 'fd' [ 1125.990935][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2640'. [ 1126.187858][T11519] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1126.405295][T11519] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1126.434322][T11519] usb 4-1: config 1 has no interface number 0 [ 1126.459207][T11519] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.498022][T11519] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1126.564074][T11519] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1126.614776][T11519] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1126.647698][T11519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.655736][T11519] usb 4-1: Product: syz [ 1126.700429][T11519] usb 4-1: Manufacturer: syz [ 1126.717998][T11519] usb 4-1: SerialNumber: syz [ 1127.060466][T14612] fuse: Bad value for 'fd' [ 1127.845220][T11519] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 1127.851373][T11519] cdc_ncm 4-1:1.1: bind() failure [ 1129.693299][ T5808] usb 4-1: USB disconnect, device number 56 [ 1130.163882][T14647] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 1130.189734][T14647] syzkaller0: entered promiscuous mode [ 1130.202275][T14647] syzkaller0: entered allmulticast mode [ 1130.745001][T14655] fuse: Bad value for 'fd' [ 1135.307754][ T2132] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1135.503953][ T2132] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1135.531698][ T2132] usb 6-1: config 1 has no interface number 0 [ 1135.547663][ T2132] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.589409][ T2132] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1135.626849][ T2132] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1135.666574][ T2132] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1135.686200][ T2132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.716957][ T2132] usb 6-1: Product: syz [ 1135.735222][ T2132] usb 6-1: Manufacturer: syz [ 1135.746642][ T2132] usb 6-1: SerialNumber: syz [ 1136.469045][ T2132] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 1136.475074][ T2132] cdc_ncm 6-1:1.1: bind() failure [ 1136.563048][T14704] fuse: Bad value for 'fd' [ 1138.086860][T11496] usb 6-1: USB disconnect, device number 2 [ 1138.307857][T11856] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.956561][ T2132] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1144.188382][ T2132] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1144.227082][ T2132] usb 4-1: config 1 has no interface number 0 [ 1144.268544][ T2132] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.330504][ T2132] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1144.394635][ T2132] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1144.434526][ T2132] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1144.477676][ T2132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.545789][ T2132] usb 4-1: Product: syz [ 1144.570707][ T2132] usb 4-1: Manufacturer: syz [ 1144.575342][ T2132] usb 4-1: SerialNumber: syz [ 1146.990362][ T2132] cdc_ncm 4-1:1.1: bind() failure [ 1147.020822][ T2132] usb 4-1: USB disconnect, device number 57 [ 1147.086460][T14779] overlayfs: workdir and upperdir must reside under the same mount [ 1155.017823][T14876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2715'. [ 1155.347242][T14887] fuse: Invalid rootmode [ 1157.711483][T14911] loop4: detected capacity change from 0 to 512 [ 1157.797674][T14911] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1157.967708][T14911] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1159.602488][T14911] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.2726: bg 0: block 104: invalid block bitmap [ 1159.715182][T14911] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1160.267869][T14911] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2726: invalid indirect mapped block 1 (level 1) [ 1161.163651][T14911] EXT4-fs (loop4): 1 truncate cleaned up [ 1161.185267][T14911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.320164][T14932] loop3: detected capacity change from 0 to 2048 [ 1161.398732][T14932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.518273][T14932] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.690379][T13086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.839145][T13327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.646084][T14949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2730'. [ 1164.457709][T14969] fuse: Invalid rootmode [ 1167.177921][T14985] syz_tun: entered allmulticast mode [ 1167.213973][T14984] syz_tun: left allmulticast mode [ 1168.080535][T15003] loop4: detected capacity change from 0 to 512 [ 1169.357733][T15010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2745'. [ 1171.517666][T11519] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1171.768028][T11519] usb 5-1: Using ep0 maxpacket: 16 [ 1171.848632][T11519] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.880538][T11519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1171.920493][T11519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1171.947621][T11519] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1171.977051][T11519] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1172.019413][T11519] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1172.037605][T11519] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1172.059595][T11519] usb 5-1: Manufacturer: syz [ 1172.088697][T11519] usb 5-1: config 0 descriptor?? [ 1172.488136][T11519] rc_core: IR keymap rc-hauppauge not found [ 1172.508139][T11519] Registered IR keymap rc-empty [ 1172.513143][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1172.609844][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1172.668757][T11519] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1172.732430][T11519] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 1172.829007][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1172.849168][T15043] loop3: detected capacity change from 0 to 256 [ 1172.918122][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1172.964155][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1173.036386][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1173.114234][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1173.157636][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1173.248814][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1173.297732][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1173.343028][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1173.417761][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1173.489315][T11519] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1173.497348][T11519] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1173.564498][T11519] usb 5-1: USB disconnect, device number 4 [ 1173.816003][T15065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2756'. [ 1176.628446][T15109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2766'. [ 1176.877742][ T5808] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1177.159052][ T5808] usb 2-1: Using ep0 maxpacket: 16 [ 1177.202836][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.234265][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.274545][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.416106][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1177.487790][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1177.509967][ T5808] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1177.536005][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1177.625253][ T5808] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1177.707576][ T5808] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1177.715647][ T5808] usb 2-1: Manufacturer: syz [ 1177.772011][ T5808] usb 2-1: config 0 descriptor?? [ 1177.822929][T15124] loop5: detected capacity change from 0 to 2048 [ 1177.876672][T15124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1177.978022][T13861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.187762][ T5808] rc_core: IR keymap rc-hauppauge not found [ 1178.197747][ T5808] Registered IR keymap rc-empty [ 1178.202766][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.257855][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.319168][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1178.350270][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 1178.383558][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.427727][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.476086][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.517672][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.568001][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.598174][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.637823][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.688061][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.727740][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.778245][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1178.811951][ T5808] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1178.837496][ T5808] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1178.861486][ T5808] usb 2-1: USB disconnect, device number 31 [ 1179.038323][T15151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2777'. [ 1181.994184][T15179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2788'. [ 1183.694332][ T172] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1184.839023][ T172] usb 4-1: Using ep0 maxpacket: 16 [ 1184.874999][ T172] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.897660][ T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.917906][ T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1184.945414][ T172] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1184.971844][ T172] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.000370][ T172] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1185.027747][ T172] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1185.035806][ T172] usb 4-1: Manufacturer: syz [ 1185.063704][ T172] usb 4-1: config 0 descriptor?? [ 1185.387824][ T172] rc_core: IR keymap rc-hauppauge not found [ 1185.393860][ T172] Registered IR keymap rc-empty [ 1185.404093][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1185.458140][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1185.510461][ T172] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1185.545434][ T172] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 1185.585099][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1185.633525][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1185.681469][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1185.737936][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1185.797927][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1185.951208][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1185.987681][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1186.034146][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.079946][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.157711][ T172] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1187.195664][ T172] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1187.242702][ T172] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1187.281138][ T172] usb 4-1: USB disconnect, device number 58 [ 1191.317704][ T5806] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1191.511697][ T5806] usb 4-1: Using ep0 maxpacket: 16 [ 1191.534446][ T5806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.555367][ T5806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1191.577862][ T5806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1191.594255][ T5806] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1192.927589][ T5806] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1192.968458][ T5806] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1192.987617][ T5806] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1192.996004][ T5806] usb 4-1: Manufacturer: syz [ 1193.029267][ T5806] usb 4-1: config 0 descriptor?? [ 1193.566803][ T5806] rc_core: IR keymap rc-hauppauge not found [ 1193.573093][ T5806] Registered IR keymap rc-empty [ 1193.581131][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1193.628632][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1193.736650][ T5806] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1193.957019][ T5806] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 1194.113158][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1194.260666][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1194.274707][T15260] tipc: Started in network mode [ 1194.279804][T15260] tipc: Node identity ac14140f, cluster identity 4711 [ 1194.289358][T15260] tipc: New replicast peer: 255.255.255.255 [ 1194.308490][T15260] tipc: Enabled bearer , priority 10 [ 1194.315902][T15258] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 1194.329607][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1194.367803][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1194.407783][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1194.462863][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1194.501838][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1194.548543][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1194.590123][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1196.007630][ T5808] tipc: Node number set to 2886997007 [ 1196.043965][ T5806] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1196.119265][ T5806] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1196.127317][ T5806] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1196.242632][ T5806] usb 4-1: USB disconnect, device number 59 [ 1200.762627][T15297] loop5: detected capacity change from 0 to 1024 [ 1200.775528][T15297] ext4: Unknown parameter 'smackfsroot' [ 1201.825651][T14310] blk_print_req_error: 10 callbacks suppressed [ 1201.825667][T14310] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1205.487730][T13089] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1206.667631][T13089] usb 2-1: Using ep0 maxpacket: 16 [ 1206.707598][T13089] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.741193][T13089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1206.772384][T13089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1206.807552][T13089] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1206.856035][T13089] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1206.893872][T13089] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1206.903305][T13089] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1206.956396][T13089] usb 2-1: Manufacturer: syz [ 1207.489853][T13089] usb 2-1: config 0 descriptor?? [ 1207.680955][T15338] syzkaller0: entered promiscuous mode [ 1207.686508][T15338] syzkaller0: entered allmulticast mode [ 1207.798137][T13089] rc_core: IR keymap rc-hauppauge not found [ 1207.815795][T13089] Registered IR keymap rc-empty [ 1207.836664][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1207.887810][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1207.990103][T13089] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1208.031232][T13089] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 1208.087711][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.117921][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.157800][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1208.227116][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.238313][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.291127][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.338122][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.378731][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.428205][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.478063][T13089] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1209.779656][T13089] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1210.917594][T13089] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1211.080251][T13089] usb 2-1: USB disconnect, device number 32 [ 1215.497613][T11496] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1215.523747][T15404] loop3: detected capacity change from 0 to 1024 [ 1215.653015][T15404] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1215.687611][T11496] usb 5-1: Using ep0 maxpacket: 16 [ 1215.741018][T11496] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.758491][T15404] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1215.792868][T11496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1215.821200][T15404] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2859: Failed to acquire dquot type 0 [ 1215.833279][T11496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1215.843849][T11496] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1215.989246][T11496] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.004891][T11496] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1216.014327][T15404] EXT4-fs (loop3): 1 truncate cleaned up [ 1216.022967][T11496] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1216.031889][T15404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1216.044375][T11496] usb 5-1: Manufacturer: syz [ 1216.055798][T11496] usb 5-1: config 0 descriptor?? [ 1216.487614][T11496] rc_core: IR keymap rc-hauppauge not found [ 1216.523595][T11496] Registered IR keymap rc-empty [ 1216.530893][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.608248][T15416] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1216.619271][T15416] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1216.628924][T15416] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2859: Failed to acquire dquot type 0 [ 1216.642049][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.687593][T11496] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1216.805842][T11496] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 1216.879047][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.938465][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.969306][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1216.997772][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.037679][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.087701][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.137699][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.187856][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.247753][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.287624][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1217.339310][T11496] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1217.367609][T11496] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1217.402163][T11496] usb 5-1: USB disconnect, device number 5 [ 1218.848558][T13327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.347752][T11856] Bluetooth: hci1: command 0x0406 tx timeout [ 1227.983837][T15519] overlayfs: overlapping lowerdir path [ 1238.634152][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.642961][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.164298][T15605] syzkaller0: entered promiscuous mode [ 1240.194066][T15605] syzkaller0: entered allmulticast mode [ 1244.124648][T15627] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1246.072002][T15634] syzkaller0: entered promiscuous mode [ 1246.100502][T15634] syzkaller0: entered allmulticast mode [ 1247.103104][T15641] loop1: detected capacity change from 0 to 256 [ 1247.433230][T14309] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1247.565286][T15641] overlayfs: missing 'lowerdir' [ 1247.690756][T15641] Bluetooth: MGMT ver 1.22 [ 1248.449294][T15655] loop1: detected capacity change from 0 to 8192 [ 1249.021255][T15662] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1249.184937][T15662] FAT-fs (loop1): Filesystem has been set read-only [ 1258.994867][T15708] syzkaller0: entered promiscuous mode [ 1259.007701][T15708] syzkaller0: entered allmulticast mode [ 1259.177583][T11519] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1259.389578][T11519] usb 5-1: Using ep0 maxpacket: 16 [ 1259.409415][T11519] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1259.422662][T11519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1259.454247][T11519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1259.484498][T11519] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1259.556323][T11519] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.582185][T11519] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1259.610272][T11519] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1259.627606][T11519] usb 5-1: Manufacturer: syz [ 1259.638720][T11519] usb 5-1: config 0 descriptor?? [ 1260.017970][T11519] rc_core: IR keymap rc-hauppauge not found [ 1260.031228][T11519] Registered IR keymap rc-empty [ 1260.050558][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1260.097679][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1260.138672][T11519] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1260.189257][T11519] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 1260.260947][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1260.308214][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1260.559602][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1262.264688][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1262.307648][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1262.337642][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1262.556632][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1264.047642][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1265.487750][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1265.543412][T11519] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1265.604924][T11519] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1265.637565][T11519] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1265.677974][T11519] usb 5-1: USB disconnect, device number 6 [ 1267.887979][T15758] syzkaller0: entered promiscuous mode [ 1267.907627][T15758] syzkaller0: entered allmulticast mode [ 1268.147636][T13089] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1271.139549][T13089] usb 2-1: Using ep0 maxpacket: 16 [ 1271.231835][T13089] usb 2-1: device descriptor read/all, error -71 [ 1271.730971][T15780] loop1: detected capacity change from 0 to 256 [ 1273.995260][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2973'. [ 1274.878802][T15797] syzkaller0: entered promiscuous mode [ 1274.884664][T15797] syzkaller0: entered allmulticast mode [ 1274.892558][T15800] loop1: detected capacity change from 0 to 8 [ 1274.960600][T15800] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1274.977771][T15800] SQUASHFS error: Failed to read block 0x9b: -5 [ 1274.990565][T15800] SQUASHFS error: Unable to read metadata cache entry [99] [ 1275.010063][T15800] SQUASHFS error: Unable to read inode 0x127 [ 1275.256656][T15806] loop5: detected capacity change from 0 to 256 [ 1275.296676][T15811] loop4: detected capacity change from 0 to 256 [ 1275.323837][T15811] overlayfs: missing 'lowerdir' [ 1275.350264][T15810] syzkaller0: entered promiscuous mode [ 1275.358503][T15810] syzkaller0: entered allmulticast mode [ 1275.557714][ T172] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1275.847611][ T172] usb 2-1: Using ep0 maxpacket: 16 [ 1276.625752][ T172] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1276.637955][ T172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1276.660707][ T172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1276.695799][ T172] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1276.725927][ T172] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1276.759199][ T172] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1276.797627][ T172] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1276.805694][ T172] usb 2-1: Manufacturer: syz [ 1276.850628][ T172] usb 2-1: config 0 descriptor?? [ 1278.281470][ T172] rc_core: IR keymap rc-hauppauge not found [ 1278.396834][ T172] Registered IR keymap rc-empty [ 1278.401983][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.442734][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.491216][ T172] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1278.527045][ T172] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 1278.569100][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.607736][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.637775][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.688076][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.727863][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.767741][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.785526][T15848] loop4: detected capacity change from 0 to 8192 [ 1278.806462][T15848] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1278.817921][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.873622][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.917790][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1278.967852][ T172] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1279.021663][ T172] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1279.086652][ T172] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1279.184828][ T172] usb 2-1: USB disconnect, device number 35 [ 1279.185822][T15853] loop5: detected capacity change from 0 to 256 [ 1279.625237][T15853] overlayfs: missing 'lowerdir' [ 1286.553523][T11496] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1288.201308][T15897] loop3: detected capacity change from 0 to 256 [ 1288.217607][T11496] usb 5-1: Using ep0 maxpacket: 16 [ 1288.239545][T11496] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1288.250780][T11496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1288.261781][T11496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1288.271881][T11496] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1288.281597][T11496] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1288.308216][T11496] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1288.319940][T15897] overlayfs: missing 'lowerdir' [ 1288.331260][T11496] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1288.339440][T11496] usb 5-1: Manufacturer: syz [ 1288.356585][T11496] usb 5-1: config 0 descriptor?? [ 1288.827542][T11496] rc_core: IR keymap rc-hauppauge not found [ 1288.833531][T11496] Registered IR keymap rc-empty [ 1288.847631][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1288.897929][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1288.963510][T11496] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1289.006041][T11496] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 1290.018469][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1290.117331][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1290.150892][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1290.301737][T15918] fuseblk: Bad value for 'fd' [ 1290.727638][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1290.767585][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1290.813233][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1290.867840][T15923] loop4: detected capacity change from 0 to 256 [ 1290.878002][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1290.915133][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1290.941973][T15923] overlayfs: missing 'lowerdir' [ 1290.971699][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1291.031227][T11496] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1291.073268][T11496] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1291.272301][T11496] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1291.286322][T11496] usb 5-1: USB disconnect, device number 7 [ 1291.424195][T15931] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1292.205599][T15936] loop1: detected capacity change from 0 to 4096 [ 1292.218731][T15936] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1292.294965][T15936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.317238][T13569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.795336][T15959] loop5: detected capacity change from 0 to 256 [ 1294.013744][T15959] overlayfs: missing 'lowerdir' [ 1294.501732][T15964] loop3: detected capacity change from 0 to 8192 [ 1294.590381][T15972] loop4: detected capacity change from 0 to 1024 [ 1294.609149][T15972] EXT4-fs: Ignoring removed bh option [ 1294.619058][T15964] loop3: p2 p3 p4 [ 1294.619058][T15964] p4: [ 1294.638239][T15964] loop3: p2 size 588341 extends beyond EOD, truncated [ 1294.666351][T15972] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1294.685795][T15964] loop3: p3 start 65280 is beyond EOD, truncated [ 1294.710687][T15964] loop3: p4 size 50331648 extends beyond EOD, truncated [ 1294.801787][T15964] loop3: p6 size 50331648 extends beyond EOD, truncated [ 1294.879092][T15972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1414.237592][ C0] ------------[ cut here ]------------ [ 1414.244645][ C0] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 1414.254986][ C0] Modules linked in: [ 1414.258933][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1414.265985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1414.276097][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1414.282495][ C0] Code: ff ff ff 48 c7 c7 a0 04 33 97 be 04 00 00 00 e8 0a 11 6e 00 48 89 df b8 01 00 00 00 87 05 6c b6 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 dc 9f 8c 8e 48 c1 e8 03 [ 1414.302182][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 1414.308312][ C0] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff81714e26 [ 1414.316334][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 1414.324351][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 1414.332365][ C0] R10: dffffc0000000000 R11: fffffbfff2e66094 R12: 0000000000002904 [ 1414.340374][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 1414.348382][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1414.357343][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1414.363959][ C0] CR2: 00007ff2e836c000 CR3: 000000001c304000 CR4: 00000000003506f0 [ 1414.371975][ C0] Call Trace: [ 1414.375304][ C0] [ 1414.378187][ C0] rcu_core+0x5ec/0x17f0 [ 1414.382482][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1414.387830][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1414.393841][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 1414.399080][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1414.404349][ C0] ? sched_clock+0x3f/0x60 [ 1414.408837][ C0] ? sched_clock_cpu+0x75/0x430 [ 1414.413745][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1414.419771][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 1414.425100][ C0] ? lock_chain_count+0x20/0x20 [ 1414.430001][ C0] handle_softirqs+0x27d/0x820 [ 1414.434802][ C0] ? read_tsc+0x9/0x20 [ 1414.438901][ C0] ? ktime_get+0x24b/0x280 [ 1414.443361][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1414.448175][ C0] ? do_softirq+0x1a0/0x1a0 [ 1414.452733][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1414.457988][ C0] __irq_exit_rcu+0xd3/0x190 [ 1414.462628][ C0] ? irq_exit_rcu+0x20/0x20 [ 1414.467181][ C0] irq_exit_rcu+0x9/0x20 [ 1414.471454][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1414.477138][ C0] [ 1414.480097][ C0] [ 1414.483075][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1414.489110][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1414.494779][ C0] Code: 4c 1d 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 77 3c 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 1414.514412][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 1414.520528][ C0] RAX: d8c69d7f61f23e00 RBX: ffffffff81628b01 RCX: d8c69d7f61f23e00 [ 1414.528541][ C0] RDX: 0000000000000001 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 1414.536552][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 1414.544565][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 1414.552621][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1414.560648][ C0] ? do_idle+0x221/0x5c0 [ 1414.564957][ C0] default_idle+0x13/0x20 [ 1414.569374][ C0] default_idle_call+0x6c/0xa0 [ 1414.574205][ C0] do_idle+0x221/0x5c0 [ 1414.578325][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1414.583668][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1414.589380][ C0] cpu_startup_entry+0x43/0x60 [ 1414.594183][ C0] rest_init+0x2e2/0x300 [ 1414.598465][ C0] ? time_init+0x40/0x40 [ 1414.602826][ C0] arch_call_rest_init+0xe/0x10 [ 1414.607793][ C0] start_kernel+0x461/0x4e0 [ 1414.612351][ C0] x86_64_start_reservations+0x2a/0x30 [ 1414.617851][ C0] x86_64_start_kernel+0x60/0x60 [ 1414.622838][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1414.628972][ C0] [ 1414.632017][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1414.639322][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1414.646374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1414.656461][ C0] Call Trace: [ 1414.659772][ C0] [ 1414.662643][ C0] dump_stack_lvl+0x18c/0x250 [ 1414.667375][ C0] ? show_regs_print_info+0x20/0x20 [ 1414.672618][ C0] ? load_image+0x420/0x420 [ 1414.677214][ C0] panic+0x2ca/0x720 [ 1414.681151][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1414.685710][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 1414.692011][ C0] __warn+0x2e0/0x470 [ 1414.696047][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1414.701820][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1414.707607][ C0] report_bug+0x2be/0x4f0 [ 1414.711989][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1414.717752][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1414.723527][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 1414.729298][ C0] handle_bug+0xcf/0x120 [ 1414.733584][ C0] exc_invalid_op+0x1a/0x50 [ 1414.738131][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1414.743024][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1414.749407][ C0] Code: ff ff ff 48 c7 c7 a0 04 33 97 be 04 00 00 00 e8 0a 11 6e 00 48 89 df b8 01 00 00 00 87 05 6c b6 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 dc 9f 8c 8e 48 c1 e8 03 [ 1414.769044][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 1414.775140][ C0] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff81714e26 [ 1414.783150][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 1414.791159][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 1414.799159][ C0] R10: dffffc0000000000 R11: fffffbfff2e66094 R12: 0000000000002904 [ 1414.807162][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 1414.815181][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1414.820945][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1414.826705][ C0] rcu_core+0x5ec/0x17f0 [ 1414.830972][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1414.836205][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1414.842160][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 1414.847407][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1414.852653][ C0] ? sched_clock+0x3f/0x60 [ 1414.857129][ C0] ? sched_clock_cpu+0x75/0x430 [ 1414.862020][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1414.868041][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 1414.873360][ C0] ? lock_chain_count+0x20/0x20 [ 1414.878269][ C0] handle_softirqs+0x27d/0x820 [ 1414.883083][ C0] ? read_tsc+0x9/0x20 [ 1414.887192][ C0] ? ktime_get+0x24b/0x280 [ 1414.891652][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1414.896447][ C0] ? do_softirq+0x1a0/0x1a0 [ 1414.900995][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1414.906235][ C0] __irq_exit_rcu+0xd3/0x190 [ 1414.910855][ C0] ? irq_exit_rcu+0x20/0x20 [ 1414.915444][ C0] irq_exit_rcu+0x9/0x20 [ 1414.919722][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1414.925409][ C0] [ 1414.928387][ C0] [ 1414.931345][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1414.937363][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1414.943034][ C0] Code: 4c 1d 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 77 3c 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 1414.962687][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 1414.968796][ C0] RAX: d8c69d7f61f23e00 RBX: ffffffff81628b01 RCX: d8c69d7f61f23e00 [ 1414.976813][ C0] RDX: 0000000000000001 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 1414.984835][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 1414.992849][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 1415.000857][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1415.008872][ C0] ? do_idle+0x221/0x5c0 [ 1415.013175][ C0] default_idle+0x13/0x20 [ 1415.017550][ C0] default_idle_call+0x6c/0xa0 [ 1415.022370][ C0] do_idle+0x221/0x5c0 [ 1415.026481][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1415.031710][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1415.037401][ C0] cpu_startup_entry+0x43/0x60 [ 1415.042205][ C0] rest_init+0x2e2/0x300 [ 1415.046484][ C0] ? time_init+0x40/0x40 [ 1415.050761][ C0] arch_call_rest_init+0xe/0x10 [ 1415.055675][ C0] start_kernel+0x461/0x4e0 [ 1415.060217][ C0] x86_64_start_reservations+0x2a/0x30 [ 1415.065715][ C0] x86_64_start_kernel+0x60/0x60 [ 1415.070687][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1415.076808][ C0] [ 1415.080399][ C0] Kernel Offset: disabled [ 1415.085306][ C0] Rebooting in 86400 seconds..