last executing test programs: 11.776617379s ago: executing program 0 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000780)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 10.720656409s ago: executing program 0 (id=581): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r2, 0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x100) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 10.035536033s ago: executing program 2 (id=586): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$can_j1939(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/126, 0x7e}], 0x1}, 0x22) 9.331235204s ago: executing program 0 (id=589): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x7f, 0x4, 0xfffff01c}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) 8.412108543s ago: executing program 2 (id=590): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f", 0x2}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[], 0x14) close(0x3) 8.287582505s ago: executing program 0 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 6.616352068s ago: executing program 4 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.599484215s ago: executing program 2 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x66, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) getpgid(r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kcmp(0x0, r0, 0x6, r2, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80202, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) 5.549959756s ago: executing program 3 (id=600): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.50764386s ago: executing program 4 (id=602): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}]}, 0x28}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 5.348014643s ago: executing program 0 (id=603): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) listen(0xffffffffffffffff, 0x1) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x28a441, 0x143) 4.827286576s ago: executing program 2 (id=604): socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x10001, 0x1}, &(0x7f0000002280)=0x18) 4.61894005s ago: executing program 3 (id=606): r0 = syz_open_dev$vim2m(0x0, 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) 4.546335303s ago: executing program 1 (id=607): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1c000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf16f2eca04dda80}, 0x4015) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.41531881s ago: executing program 3 (id=608): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x2) r2 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) ftruncate(r2, 0x2007ffd) sendfile(0xffffffffffffffff, r1, 0x0, 0x1000a3) 4.207642469s ago: executing program 2 (id=609): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 3.797526552s ago: executing program 1 (id=610): set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4c8e578c63de6b9, 0x0, 0x0, 0x0, 0x3, 0x81, &(0x7f0000000440)=""/129, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000b00)=[{0x0, 0x3, 0x7, 0x1}], 0x10, 0x81}, 0x94) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0500"/16], 0x10}, 0x0, 0x8010, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xd, 0x3, 0x0, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) 3.321012853s ago: executing program 4 (id=611): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 2.177441107s ago: executing program 1 (id=612): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) mmap(&(0x7f0000025000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) 2.176875863s ago: executing program 3 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1.739212883s ago: executing program 4 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x66, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) getpgid(r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kcmp(0x0, r0, 0x6, r2, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80202, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) 1.690297271s ago: executing program 3 (id=615): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r2, 0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x100) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 1.610059094s ago: executing program 1 (id=616): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.609579565s ago: executing program 2 (id=617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 1.18137381s ago: executing program 4 (id=618): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 1.057939656s ago: executing program 3 (id=619): socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x10001, 0x1}, &(0x7f0000002280)=0x18) 1.031206445s ago: executing program 1 (id=620): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1c000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf16f2eca04dda80}, 0x4015) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 170.016445ms ago: executing program 32 (id=619): socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x10001, 0x1}, &(0x7f0000002280)=0x18) 125.193065ms ago: executing program 0 (id=622): set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4c8e578c63de6b9, 0x0, 0x0, 0x0, 0x3, 0x81, &(0x7f0000000440)=""/129, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000b00)=[{0x0, 0x3, 0x7, 0x1}], 0x10, 0x81}, 0x94) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0500"/16], 0x10}, 0x0, 0x8010, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xd, 0x3, 0x0, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) 16.027202ms ago: executing program 33 (id=622): set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4c8e578c63de6b9, 0x0, 0x0, 0x0, 0x3, 0x81, &(0x7f0000000440)=""/129, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000b00)=[{0x0, 0x3, 0x7, 0x1}], 0x10, 0x81}, 0x94) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0500"/16], 0x10}, 0x0, 0x8010, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xd, 0x3, 0x0, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) 523.864µs ago: executing program 1 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f00001f1000/0x2000)=nil, &(0x7f0000ecc000/0x10000)=nil, 0x2000, 0x1}) 0s ago: executing program 4 (id=624): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 65.158177][ T5824] cgroup: Unknown subsys name 'net' [ 65.269168][ T5824] cgroup: Unknown subsys name 'cpuset' [ 65.277324][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.624382][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.209673][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.210796][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.226797][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.234319][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.243815][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.251476][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.260938][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.270085][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.280578][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.288094][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.290215][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.295844][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.302980][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.312903][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.325745][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.332979][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.333906][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.349148][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.349421][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.357046][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.365250][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.371020][ T5162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.379137][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.389576][ T5162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.400005][ T5162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.899357][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 71.115242][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 71.210216][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.224700][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.232928][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.244524][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.252720][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.260143][ T5849] bridge_slave_0: entered allmulticast mode [ 71.267542][ T5849] bridge_slave_0: entered promiscuous mode [ 71.300828][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 71.332456][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.339750][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.347199][ T5849] bridge_slave_1: entered allmulticast mode [ 71.354393][ T5849] bridge_slave_1: entered promiscuous mode [ 71.408915][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 71.487867][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.538292][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.557124][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.564737][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.572266][ T5836] bridge_slave_0: entered allmulticast mode [ 71.579562][ T5836] bridge_slave_0: entered promiscuous mode [ 71.592716][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.600015][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.607439][ T5837] bridge_slave_0: entered allmulticast mode [ 71.614614][ T5837] bridge_slave_0: entered promiscuous mode [ 71.643002][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.650678][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.658242][ T5836] bridge_slave_1: entered allmulticast mode [ 71.665452][ T5836] bridge_slave_1: entered promiscuous mode [ 71.681742][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.689181][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.696534][ T5837] bridge_slave_1: entered allmulticast mode [ 71.703897][ T5837] bridge_slave_1: entered promiscuous mode [ 71.757605][ T5849] team0: Port device team_slave_0 added [ 71.783861][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.791170][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.798701][ T5851] bridge_slave_0: entered allmulticast mode [ 71.805883][ T5851] bridge_slave_0: entered promiscuous mode [ 71.825687][ T5849] team0: Port device team_slave_1 added [ 71.845654][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.855233][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.863019][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.870215][ T5851] bridge_slave_1: entered allmulticast mode [ 71.877810][ T5851] bridge_slave_1: entered promiscuous mode [ 71.888371][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.907295][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.914519][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.921824][ T5843] bridge_slave_0: entered allmulticast mode [ 71.929101][ T5843] bridge_slave_0: entered promiscuous mode [ 71.939838][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.965717][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.984446][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.991811][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.999353][ T5843] bridge_slave_1: entered allmulticast mode [ 72.006645][ T5843] bridge_slave_1: entered promiscuous mode [ 72.045361][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.052333][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.078257][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.119006][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.140175][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.147205][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.173129][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.196638][ T5836] team0: Port device team_slave_0 added [ 72.205480][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.227459][ T5837] team0: Port device team_slave_0 added [ 72.246419][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.258654][ T5836] team0: Port device team_slave_1 added [ 72.278261][ T5837] team0: Port device team_slave_1 added [ 72.297413][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.332932][ T5851] team0: Port device team_slave_0 added [ 72.338937][ T5845] Bluetooth: hci0: command tx timeout [ 72.386041][ T5851] team0: Port device team_slave_1 added [ 72.403486][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.410654][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.416764][ T5845] Bluetooth: hci1: command tx timeout [ 72.436868][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.456546][ T5843] team0: Port device team_slave_0 added [ 72.463465][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.470489][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.497320][ T5845] Bluetooth: hci2: command tx timeout [ 72.502840][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.506274][ T5845] Bluetooth: hci3: command tx timeout [ 72.516112][ T5162] Bluetooth: hci4: command tx timeout [ 72.537606][ T5849] hsr_slave_0: entered promiscuous mode [ 72.544474][ T5849] hsr_slave_1: entered promiscuous mode [ 72.552647][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.559863][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.585977][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.599949][ T5843] team0: Port device team_slave_1 added [ 72.606962][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.613914][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.639828][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.664314][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.671299][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.697247][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.743359][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.750329][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.776608][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.821963][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.828973][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.854914][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.904965][ T5837] hsr_slave_0: entered promiscuous mode [ 72.911939][ T5837] hsr_slave_1: entered promiscuous mode [ 72.919200][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 72.924989][ T5837] Cannot create hsr debugfs directory [ 72.931970][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.938933][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.964929][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.074012][ T5836] hsr_slave_0: entered promiscuous mode [ 73.081989][ T5836] hsr_slave_1: entered promiscuous mode [ 73.088622][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 73.094350][ T5836] Cannot create hsr debugfs directory [ 73.165026][ T5851] hsr_slave_0: entered promiscuous mode [ 73.171779][ T5851] hsr_slave_1: entered promiscuous mode [ 73.178316][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 73.184069][ T5851] Cannot create hsr debugfs directory [ 73.255898][ T5843] hsr_slave_0: entered promiscuous mode [ 73.263063][ T5843] hsr_slave_1: entered promiscuous mode [ 73.269577][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 73.275302][ T5843] Cannot create hsr debugfs directory [ 73.746615][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.763349][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.775202][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.787525][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.862767][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.873854][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.884604][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.899061][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.991976][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.002806][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.021278][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.038454][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.134089][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.162392][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.190852][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.201177][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.295580][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.309406][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.322651][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.334485][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.345199][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.414140][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.420872][ T5162] Bluetooth: hci0: command tx timeout [ 74.464659][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.472065][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.486902][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.496731][ T5162] Bluetooth: hci1: command tx timeout [ 74.518507][ T737] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.525613][ T737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.576706][ T5162] Bluetooth: hci4: command tx timeout [ 74.582804][ T5845] Bluetooth: hci3: command tx timeout [ 74.582816][ T5848] Bluetooth: hci2: command tx timeout [ 74.594962][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.632364][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.659143][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.666318][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.699893][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.707135][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.723022][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.791760][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.801206][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.808410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.839720][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.846964][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.903846][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.963563][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.008891][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.020310][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.027433][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.064101][ T737] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.071242][ T737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.105198][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.112406][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.162254][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.200651][ T737] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.207860][ T737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.559395][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.603378][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.834080][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.848640][ T5836] veth0_vlan: entered promiscuous mode [ 75.854952][ T5849] veth0_vlan: entered promiscuous mode [ 75.883893][ T5837] veth0_vlan: entered promiscuous mode [ 75.903204][ T5836] veth1_vlan: entered promiscuous mode [ 75.915013][ T5849] veth1_vlan: entered promiscuous mode [ 75.944705][ T5837] veth1_vlan: entered promiscuous mode [ 75.968688][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.049192][ T5843] veth0_vlan: entered promiscuous mode [ 76.075208][ T5836] veth0_macvtap: entered promiscuous mode [ 76.104796][ T5843] veth1_vlan: entered promiscuous mode [ 76.118275][ T5849] veth0_macvtap: entered promiscuous mode [ 76.127760][ T5836] veth1_macvtap: entered promiscuous mode [ 76.154777][ T5837] veth0_macvtap: entered promiscuous mode [ 76.171540][ T5849] veth1_macvtap: entered promiscuous mode [ 76.206167][ T5837] veth1_macvtap: entered promiscuous mode [ 76.228052][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.243702][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.252942][ T5851] veth0_vlan: entered promiscuous mode [ 76.278550][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.302664][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.334700][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.344565][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.364306][ T5851] veth1_vlan: entered promiscuous mode [ 76.388708][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.399866][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.440465][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.450448][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.461533][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.488819][ T5843] veth0_macvtap: entered promiscuous mode [ 76.496722][ T5845] Bluetooth: hci0: command tx timeout [ 76.520159][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.544382][ T5843] veth1_macvtap: entered promiscuous mode [ 76.572267][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.582925][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.586476][ T5845] Bluetooth: hci1: command tx timeout [ 76.624683][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.656485][ T5162] Bluetooth: hci4: command tx timeout [ 76.657686][ T5848] Bluetooth: hci2: command tx timeout [ 76.661927][ T5845] Bluetooth: hci3: command tx timeout [ 76.687750][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.698453][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.733166][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.778037][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.788009][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.834849][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.843699][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.844380][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.882313][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.919919][ T737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.928226][ T737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.944536][ T5851] veth0_macvtap: entered promiscuous mode [ 76.974178][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.982695][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.990466][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.994875][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.013612][ T5851] veth1_macvtap: entered promiscuous mode [ 77.039418][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.061677][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.073191][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.099033][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.124649][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.266362][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.284448][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.311855][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.355505][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.370543][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.430516][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.513473][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.587441][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.665891][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.872557][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.025856][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.041091][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.576561][ T5848] Bluetooth: hci0: command tx timeout [ 78.601365][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.691267][ T5848] Bluetooth: hci1: command tx timeout [ 78.738576][ T5848] Bluetooth: hci2: command tx timeout [ 78.739200][ T5162] Bluetooth: hci4: command tx timeout [ 78.744079][ T5848] Bluetooth: hci3: command tx timeout [ 78.778272][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.198785][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.214252][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.438099][ T1223] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.364996][ T1223] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 80.445798][ T1223] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 80.483601][ T1223] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 80.532202][ T1223] usb 5-1: config 220 has no interface number 2 [ 80.560697][ T1223] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 80.604238][ T1223] usb 5-1: config 220 interface 0 has no altsetting 0 [ 80.628204][ T1223] usb 5-1: config 220 interface 76 has no altsetting 0 [ 80.635422][ T1223] usb 5-1: config 220 interface 1 has no altsetting 0 [ 81.063368][ T1223] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 81.110039][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.155886][ T1223] usb 5-1: Product: syz [ 81.180179][ T1223] usb 5-1: Manufacturer: syz [ 81.206717][ T1223] usb 5-1: SerialNumber: syz [ 81.426021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 81.523629][ T24] cfg80211: failed to load regulatory.db [ 81.574988][ T1223] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 81.632124][ T1223] uvcvideo 5-1:220.0: No valid video chain found. [ 81.665656][ T1223] usb 5-1: selecting invalid altsetting 0 [ 81.748830][ T1223] usb 5-1: selecting invalid altsetting 0 [ 81.822830][ T1223] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 81.930453][ T1223] usb 5-1: USB disconnect, device number 2 [ 85.692584][ T6048] o2cb: This node has not been configured. [ 85.704706][ T6048] o2cb: Cluster check failed. Fix errors before retrying. [ 85.721561][ T6048] (syz.3.25,6048,1):user_dlm_register:674 ERROR: status = -22 [ 85.738494][ T6048] (syz.3.25,6048,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 86.027358][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.598986][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 86.621699][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 86.671543][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 86.698031][ T10] usb 5-1: config 220 has no interface number 2 [ 86.716351][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 86.739253][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 86.984940][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 87.020879][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 87.051699][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 87.061960][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.075502][ T10] usb 5-1: Product: syz [ 87.081716][ T10] usb 5-1: Manufacturer: syz [ 87.089024][ T10] usb 5-1: SerialNumber: syz [ 87.521372][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 87.543866][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 87.572824][ T10] usb 5-1: selecting invalid altsetting 0 [ 87.625281][ T10] usb 5-1: selecting invalid altsetting 0 [ 87.654763][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 87.728265][ T10] usb 5-1: USB disconnect, device number 3 [ 89.496559][ T6093] o2cb: This node has not been configured. [ 89.537936][ T6093] o2cb: Cluster check failed. Fix errors before retrying. [ 89.683065][ T6093] (syz.3.38,6093,1):user_dlm_register:674 ERROR: status = -22 [ 89.706978][ T6093] (syz.3.38,6093,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 89.773215][ T6089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.929494][ T6099] mkiss: ax0: crc mode is auto. [ 90.896702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 91.077397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.147143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.147463][ T6145] capability: warning: `syz.2.49' uses 32-bit capabilities (legacy support in use) [ 93.815822][ T6146] o2cb: This node has not been configured. [ 93.849175][ T6146] o2cb: Cluster check failed. Fix errors before retrying. [ 93.892874][ T6146] (syz.4.52,6146,0):user_dlm_register:674 ERROR: status = -22 [ 94.161660][ T6146] (syz.4.52,6146,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 94.641956][ T6154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.087234][ T6190] o2cb: This node has not been configured. [ 97.347213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.393628][ T6190] o2cb: Cluster check failed. Fix errors before retrying. [ 97.430691][ T6190] (syz.3.67,6190,1):user_dlm_register:674 ERROR: status = -22 [ 97.477238][ T6190] (syz.3.67,6190,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 97.838734][ T6198] bond1: option mode: unable to set because the bond device is up [ 98.098024][ T6204] mkiss: ax0: crc mode is auto. [ 101.772646][ T6240] o2cb: This node has not been configured. [ 101.789252][ T6240] o2cb: Cluster check failed. Fix errors before retrying. [ 101.833676][ T6240] (syz.1.80,6240,0):user_dlm_register:674 ERROR: status = -22 [ 101.884428][ T6240] (syz.1.80,6240,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 103.599011][ T6247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.878210][ T6289] o2cb: This node has not been configured. [ 105.926234][ T6289] o2cb: Cluster check failed. Fix errors before retrying. [ 105.962491][ T6289] (syz.1.96,6289,0):user_dlm_register:674 ERROR: status = -22 [ 106.021858][ T6289] (syz.1.96,6289,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 106.912776][ T6299] bond1: option mode: unable to set because the bond device is up [ 108.402906][ T5955] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.961884][ T5955] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 109.018697][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.067319][ T5955] usb 1-1: config 0 descriptor?? [ 109.116428][ T5955] cp210x 1-1:0.0: cp210x converter detected [ 109.333798][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.380277][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.544089][ T5955] usb 1-1: cp210x converter now attached to ttyUSB0 [ 110.755909][ T6339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.621384][ T5920] usb 1-1: USB disconnect, device number 2 [ 111.684947][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.786989][ T5920] cp210x 1-1:0.0: device disconnected [ 112.486301][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.678436][ T5920] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 112.712878][ T5920] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 112.740787][ T5920] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 112.776113][ T5920] usb 1-1: config 220 has no interface number 2 [ 112.801340][ T5920] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 112.841460][ T5920] usb 1-1: config 220 interface 0 has no altsetting 0 [ 112.881543][ T5920] usb 1-1: config 220 interface 76 has no altsetting 0 [ 112.903871][ T5920] usb 1-1: config 220 interface 1 has no altsetting 0 [ 112.941208][ T5920] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 112.963976][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.988191][ T5920] usb 1-1: Product: syz [ 112.996100][ T5920] usb 1-1: Manufacturer: syz [ 113.007809][ T5920] usb 1-1: SerialNumber: syz [ 113.305835][ T5920] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 113.339196][ T5920] uvcvideo 1-1:220.0: No valid video chain found. [ 113.362043][ T5920] usb 1-1: selecting invalid altsetting 0 [ 113.417097][ T5920] usb 1-1: selecting invalid altsetting 0 [ 113.443049][ T5920] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 113.534082][ T5920] usb 1-1: USB disconnect, device number 3 [ 114.636145][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.389667][ T5920] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.406455][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.434304][ T5920] usb 3-1: config 0 descriptor?? [ 115.443633][ T5920] cp210x 3-1:0.0: cp210x converter detected [ 115.649540][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.674818][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.736731][ T5920] usb 3-1: cp210x converter now attached to ttyUSB0 [ 116.693606][ T6404] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.023048][ T6404] kvm: kvm [6403]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb30000337a [ 117.053479][ T6404] kvm_intel: kvm [6403]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1915 [ 117.083790][ T6404] kvm: kvm [6403]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1915 [ 117.095052][ T6404] kvm: kvm [6403]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 117.151011][ T6404] kvm: kvm [6403]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x31f7 [ 117.166338][ T6404] kvm: kvm [6403]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 117.260477][ T6404] kvm: kvm [6403]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5341 [ 117.303460][ T6404] kvm_intel: kvm [6403]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3803 [ 117.737735][ T6416] mkiss: ax0: crc mode is auto. [ 117.871618][ T5900] usb 3-1: USB disconnect, device number 2 [ 117.913051][ T5900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 117.953795][ T5900] cp210x 3-1:0.0: device disconnected [ 118.688172][ T6414] QAT: failed to copy from user cfg_data. [ 121.620611][ T5920] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.837399][ T5920] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.870005][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.917224][ T5920] usb 5-1: config 0 descriptor?? [ 121.947474][ T5920] cp210x 5-1:0.0: cp210x converter detected [ 122.170353][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.217010][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.259326][ T5920] usb 5-1: cp210x converter now attached to ttyUSB0 [ 125.438740][ T5920] usb 5-1: USB disconnect, device number 4 [ 125.473694][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.524355][ T5920] cp210x 5-1:0.0: device disconnected [ 131.623163][ T6553] Zero length message leads to an empty skb [ 132.939724][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947140][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.103406][ T6596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'. [ 138.437333][ T6631] bond1: option mode: unable to set because the bond device is up [ 140.018352][ T6650] random: crng reseeded on system resumption [ 141.216338][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.226794][ T6688] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 142.252101][ T6688] VFS: Can't find a romfs filesystem on dev nullb0. [ 142.252101][ T6688] [ 143.296858][ T6699] random: crng reseeded on system resumption [ 144.527465][ T6714] mkiss: ax0: crc mode is auto. [ 145.111616][ T6718] bond1: option mode: unable to set because the bond device is up [ 147.918866][ T6751] random: crng reseeded on system resumption [ 149.185132][ T6758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.388624][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.247'. [ 149.776433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 150.186092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 151.341426][ T6794] random: crng reseeded on system resumption [ 152.345407][ T6806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.392058][ T6815] syzkaller0: entered promiscuous mode [ 152.426586][ T6815] syzkaller0: entered allmulticast mode [ 154.126576][ T6840] random: crng reseeded on system resumption [ 158.121042][ T6879] mkiss: ax0: crc mode is auto. [ 158.518596][ T6882] random: crng reseeded on system resumption [ 161.452522][ T6900] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 162.897901][ T6919] random: crng reseeded on system resumption [ 165.285684][ T6940] kvm: kvm [6939]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 165.352744][ T6940] kvm: kvm [6939]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb200004928 [ 165.447646][ T6940] kvm: kvm [6939]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2865 [ 165.502339][ T6940] kvm_intel: kvm [6939]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x113f [ 168.618090][ T6972] random: crng reseeded on system resumption [ 169.937568][ T9] IPVS: starting estimator thread 0... [ 170.046259][ T6996] IPVS: using max 57 ests per chain, 136800 per kthread [ 171.799881][ T7027] random: crng reseeded on system resumption [ 172.137577][ T7031] ======================================================= [ 172.137577][ T7031] WARNING: The mand mount option has been deprecated and [ 172.137577][ T7031] and is ignored by this kernel. Remove the mand [ 172.137577][ T7031] option from the mount to silence this warning. [ 172.137577][ T7031] ======================================================= [ 172.448178][ T5848] Bluetooth: hci0: command tx timeout [ 175.257980][ T7062] random: crng reseeded on system resumption [ 176.137228][ T7070] kAFS: unable to lookup cell '(' [ 176.338602][ T7071] kAFS: unable to lookup cell '(,c¾ûL' [ 176.705444][ T7082] PKCS8: Unsupported PKCS#8 version [ 176.994577][ T7058] mkiss: ax0: crc mode is auto. [ 177.426220][ T5995] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 177.756730][ T5995] usb 2-1: Using ep0 maxpacket: 16 [ 177.804594][ T5995] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 177.834765][ T5995] usb 2-1: config 251 has no interface number 0 [ 177.862306][ T5995] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 177.906176][ T5995] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 177.932674][ T5995] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 177.969175][ T5995] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 178.005110][ T5995] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 12150, setting to 1024 [ 178.079935][ T5995] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 178.132949][ T5995] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.200670][ T5995] usb 2-1: config 251 interface 202 has no altsetting 0 [ 178.283817][ T5995] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 178.330357][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.393289][ T5995] usb 2-1: Product: syz [ 178.435757][ T5995] usb 2-1: Manufacturer: syz [ 178.470267][ T5995] usb 2-1: SerialNumber: syz [ 178.570047][ T7086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 178.586431][ T7086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 179.479252][ T5995] cxacru 2-1:251.202: send of cm 0x90 failed (-71) [ 179.501220][ T5995] cxacru 2-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 179.546194][ T5995] cxacru 2-1:251.202: probe with driver cxacru failed with error -22 [ 179.645106][ T5995] usb 2-1: USB disconnect, device number 2 [ 179.765267][ T7112] ªªªªªª: renamed from vlan0 (while UP) [ 181.895158][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 182.948665][ T7153] mkiss: ax0: crc mode is auto. [ 188.595276][ T7218] ALSA: seq fatal error: cannot create timer (-16) [ 189.771642][ T7224] binder: BINDER_SET_CONTEXT_MGR already set [ 189.820945][ T7224] binder: 7223:7224 ioctl 4018620d 200000004a80 returned -16 [ 189.850217][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 191.875111][ T7252] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 191.900526][ T7252] qnx6: wrong signature (magic) in superblock #1. [ 191.910454][ T7252] qnx6: unable to read the first superblock [ 194.082128][ T7281] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 194.164523][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.700014][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.185823][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.191989][ T5162] Bluetooth: hci0: command 0x0406 tx timeout [ 196.259405][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 196.259429][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 201.208392][ T5920] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 201.687689][ T5920] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 201.708910][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.744971][ T5920] usb 1-1: config 0 descriptor?? [ 201.764712][ T5920] cp210x 1-1:0.0: cp210x converter detected [ 202.003662][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.090767][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.553732][ T5920] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 202.566678][ T5920] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 202.586159][ T5920] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 202.703972][ T5920] usb 1-1: cp210x converter now attached to ttyUSB0 [ 202.713429][ T5920] usb 1-1: USB disconnect, device number 4 [ 202.732042][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.746864][ T5920] cp210x 1-1:0.0: device disconnected [ 203.358534][ T7373] syz.3.433 uses obsolete (PF_INET,SOCK_PACKET) [ 206.426066][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 206.620036][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 206.630575][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 206.643372][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 206.655357][ T10] usb 5-1: config 220 has no interface number 2 [ 206.665797][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 206.692779][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 206.713613][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 206.740180][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 206.777757][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 206.790106][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.809001][ T10] usb 5-1: Product: syz [ 206.847804][ T10] usb 5-1: Manufacturer: syz [ 206.868821][ T10] usb 5-1: SerialNumber: syz [ 207.129686][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 207.172893][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 207.754190][ T10] usb 5-1: selecting invalid altsetting 0 [ 207.825506][ T10] usb 5-1: selecting invalid altsetting 0 [ 207.849108][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 208.021816][ T10] usb 5-1: USB disconnect, device number 5 [ 210.396568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 210.418710][ T7421] syz.3.449 (7421): drop_caches: 2 [ 210.928665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 214.380184][ T7452] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 214.401598][ T7452] qnx6: wrong signature (magic) in superblock #1. [ 214.425052][ T7455] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 214.439930][ T7455] /dev/nullb0: Can't open blockdev [ 214.441716][ T7452] qnx6: unable to read the first superblock [ 214.736174][ T5954] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 215.424628][ T5954] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 215.691410][ T5954] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 215.812869][ T5954] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 215.825607][ T5954] usb 1-1: config 220 has no interface number 2 [ 215.843044][ T5954] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 215.962011][ T5954] usb 1-1: config 220 interface 0 has no altsetting 0 [ 216.014097][ T5954] usb 1-1: config 220 interface 76 has no altsetting 0 [ 216.051047][ T5954] usb 1-1: config 220 interface 1 has no altsetting 0 [ 216.085641][ T5954] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 216.114458][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.169229][ T5954] usb 1-1: Product: syz [ 216.189315][ T5954] usb 1-1: Manufacturer: syz [ 216.211009][ T5954] usb 1-1: SerialNumber: syz [ 216.512699][ T5954] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 216.540314][ T5954] uvcvideo 1-1:220.0: No valid video chain found. [ 216.582676][ T5954] usb 1-1: selecting invalid altsetting 0 [ 216.669291][ T5954] usb 1-1: selecting invalid altsetting 0 [ 216.690120][ T5954] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 216.749128][ T5954] usb 1-1: USB disconnect, device number 5 [ 217.607005][ T7524] random: crng reseeded on system resumption [ 217.662811][ T7493] mkiss: ax0: crc mode is auto. [ 219.033613][ T7536] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 219.054850][ T7536] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 220.101214][ T7553] random: crng reseeded on system resumption [ 222.486180][ T5995] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 222.648819][ T5995] usb 4-1: Using ep0 maxpacket: 8 [ 222.661570][ T5995] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 222.695554][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.726940][ T5995] usb 4-1: Product: syz [ 222.737318][ T5995] usb 4-1: Manufacturer: syz [ 222.746597][ T5995] usb 4-1: SerialNumber: syz [ 222.784691][ T5995] usb 4-1: config 0 descriptor?? [ 223.005502][ T5995] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 224.454909][ T5995] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 224.499010][ T5995] usb 4-1: USB disconnect, device number 2 [ 225.100096][ T7595] random: crng reseeded on system resumption [ 226.856613][ T7627] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 226.876547][ T7627] qnx6: wrong signature (magic) in superblock #1. [ 226.892998][ T7627] qnx6: unable to read the first superblock [ 228.052315][ T7639] random: crng reseeded on system resumption [ 228.174531][ T7644] warning: `syz.0.508' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 228.189007][ T7644] overlayfs: failed to resolve './file0/file0': -2 [ 229.249669][ T7652] binder: 7650:7652 ioctl c0306201 0 returned -14 [ 229.624405][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 230.065700][ T7669] serio: Serial port ptm0 [ 230.909772][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.927029][ T9] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 230.951186][ T9] usb 2-1: config 63 has an invalid descriptor of length 170, skipping remainder of the config [ 231.086255][ T9] usb 2-1: config 63 has no interface number 0 [ 231.092494][ T9] usb 2-1: config 63 interface 66 has no altsetting 0 [ 231.103066][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 231.150525][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.159856][ T9] usb 2-1: Product: syz [ 231.169576][ T9] usb 2-1: Manufacturer: syz [ 231.174491][ T9] usb 2-1: SerialNumber: syz [ 231.400263][ T7675] random: crng reseeded on system resumption [ 231.425813][ T9] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 231.459813][ T9] usb 2-1: USB disconnect, device number 3 [ 232.748415][ T7695] binder: 7693:7695 ioctl c0306201 0 returned -14 [ 233.398458][ T7703] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 233.410343][ T7703] qnx6: wrong signature (magic) in superblock #1. [ 233.417055][ T7703] qnx6: unable to read the first superblock [ 234.666711][ T7715] random: crng reseeded on system resumption [ 234.825595][ T7719] No control pipe specified [ 238.243237][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.543'. [ 238.736564][ T5955] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.836079][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 238.858209][ T7749] random: crng reseeded on system resumption [ 238.932840][ T5955] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 238.944744][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.964513][ T5955] usb 4-1: config 0 descriptor?? [ 238.985103][ T5955] cp210x 4-1:0.0: cp210x converter detected [ 238.999447][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.006077][ T5954] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 239.018162][ T7751] No control pipe specified [ 239.043453][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.074319][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 239.109626][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.189946][ T9] usb 2-1: config 0 descriptor?? [ 239.209563][ T9] hub 2-1:0.0: USB hub found [ 239.210300][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.585002][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.604516][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 239.829810][ T9] hub 2-1:0.0: 1 port detected [ 240.060401][ T5954] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 240.068760][ T5954] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 240.077012][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.087512][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 240.096883][ T5954] usb 3-1: config 0 has no interface number 0 [ 240.103113][ T5954] usb 3-1: config 0 interface 104 has no altsetting 1 [ 240.119775][ T5954] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 240.131466][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.141363][ T5954] usb 3-1: Product: syz [ 240.146358][ T5954] usb 3-1: Manufacturer: syz [ 240.151567][ T5954] usb 3-1: SerialNumber: syz [ 240.208247][ T5954] usb 3-1: config 0 descriptor?? [ 240.218999][ T5954] asix 3-1:0.104: probe with driver asix failed with error -22 [ 240.647142][ T5955] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 240.668366][ T5955] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 240.677515][ T5954] usb 3-1: USB disconnect, device number 3 [ 240.713160][ T5955] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 240.763635][ T5955] usb 4-1: cp210x converter now attached to ttyUSB0 [ 240.839172][ T1587] hub 2-1:0.0: activate --> -90 [ 241.060110][ T5954] usb 4-1: USB disconnect, device number 3 [ 241.345200][ T5954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 241.346091][ T1587] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 241.364678][ T5900] usb 2-1: USB disconnect, device number 4 [ 241.390750][ T1587] usb 2-1-port1: connect-debounce failed [ 241.392338][ T5954] cp210x 4-1:0.0: device disconnected [ 241.529767][ T7767] lo: entered allmulticast mode [ 241.763410][ T7769] vcan0: entered allmulticast mode [ 241.771884][ T7769] vcan0: left allmulticast mode [ 242.357036][ T7766] lo: left allmulticast mode [ 243.049369][ T7783] No control pipe specified [ 243.196064][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 244.000252][ T5900] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 244.009348][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.018453][ T5900] usb 4-1: Product: syz [ 244.022739][ T5900] usb 4-1: Manufacturer: syz [ 244.041932][ T5900] usb 4-1: SerialNumber: syz [ 244.051664][ T5900] usb 4-1: config 0 descriptor?? [ 244.517448][ T5900] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 244.559392][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.591887][ T5900] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 244.654169][ T5900] usb 4-1: media controller created [ 244.916495][ T1587] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 245.261461][ T1587] usb 5-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 245.344164][ T1587] usb 5-1: config 0 interface 0 has no altsetting 0 [ 245.371844][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.469360][ T1587] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 245.546179][ T1587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.593418][ T1587] usb 5-1: Product: syz [ 245.628335][ T1587] usb 5-1: Manufacturer: syz [ 245.647721][ T1587] usb 5-1: SerialNumber: syz [ 245.707830][ T1587] usb 5-1: config 0 descriptor?? [ 245.762971][ T1587] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 245.771180][ T5900] DVB: Unable to find symbol mt352_attach() [ 245.799928][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 245.825727][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 245.861552][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 245.875574][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 245.909765][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 245.924848][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 246.121292][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 246.232769][ T7810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.567'. [ 246.324112][ T10] IPVS: starting estimator thread 0... [ 246.337344][ T1587] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 246.355058][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 246.383230][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 246.749806][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 246.805241][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 246.816075][ T7811] IPVS: using max 57 ests per chain, 136800 per kthread [ 246.833330][ T1587] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 247.056381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 247.423098][ T5900] DVB: Unable to find symbol nxt6000_attach() [ 247.435025][ T1587] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 247.463556][ T5900] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 247.484773][ T1587] usb 5-1: USB disconnect, device number 6 [ 247.515498][ T5900] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 247.553484][ T1587] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 247.575273][ T5900] dvb-usb: schedule remote query interval to 1000 msecs. [ 247.704490][ T5900] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 247.716537][ T1587] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 247.754378][ T1587] keyspan 5-1:0.0: device disconnected [ 247.762153][ T5900] dvb-usb: bulk message failed: -22 (7/0) [ 247.794474][ T5900] dvb-usb: bulk message failed: -22 (7/0) [ 247.832580][ T5900] usb 4-1: USB disconnect, device number 4 [ 248.858320][ T5900] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 251.474798][ T7857] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 251.487850][ T7857] qnx6: wrong signature (magic) in superblock #1. [ 251.494324][ T7857] qnx6: unable to read the first superblock [ 255.590492][ T7917] hub 9-0:1.0: USB hub found [ 255.603253][ T7917] hub 9-0:1.0: 1 port detected [ 256.277242][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.481724][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.154716][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 257.319231][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 257.333868][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 257.364520][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 257.395796][ T10] usb 5-1: config 220 has no interface number 2 [ 257.429571][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 257.497661][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 257.541624][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 257.580291][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 257.608980][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 257.631666][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.776114][ T10] usb 5-1: Product: syz [ 257.786054][ T10] usb 5-1: Manufacturer: syz [ 257.796044][ T10] usb 5-1: SerialNumber: syz [ 258.626970][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 258.680722][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 258.798519][ T10] usb 5-1: selecting invalid altsetting 0 [ 258.953871][ T10] usb 5-1: selecting invalid altsetting 0 [ 259.532300][ T7953] binder: 7947:7953 ioctl c0306201 0 returned -14 [ 259.852794][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 259.875947][ T10] usb 5-1: USB disconnect, device number 7 [ 262.152049][ T7979] node ffff8880357e3c80 offset 0 parent ffff8880357e39c0 shift 0 count 1 values 0 array ffff88802a985920 list ffff8880357e3c98 ffff8880357e3c98 marks 0 0 0 [ 262.186207][ T7979] ------------[ cut here ]------------ [ 262.191725][ T7979] kernel BUG at ./include/linux/xarray.h:1441! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 262.227652][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.240816][ T7979] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 262.247103][ T7979] CPU: 1 UID: 0 PID: 7979 Comm: syz.1.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.257860][ T7979] Tainted: [L]=SOFTLOCKUP [ 262.262161][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.272191][ T7979] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 262.278157][ T7979] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 262.297742][ T7979] RSP: 0018:ffffc90005bfee20 EFLAGS: 00010246 [ 262.303790][ T7979] RAX: 0000000000000000 RBX: ffff8880357e3c80 RCX: e3c7f0ff0599e900 [ 262.311737][ T7979] RDX: ffffc9000d4d1000 RSI: 00000000000075df RDI: 00000000000075e0 [ 262.319689][ T7979] RBP: ffffc90005bff130 R08: ffffc90005bfeba7 R09: 1ffff92000b7fd74 [ 262.327665][ T7979] R10: dffffc0000000000 R11: fffff52000b7fd75 R12: ffffea0001a4a0f0 [ 262.335621][ T7979] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90005bff010 [ 262.343575][ T7979] FS: 00007f72f39f66c0(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 262.352491][ T7979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.359057][ T7979] CR2: 00007f1ab5b47e20 CR3: 0000000029b46000 CR4: 00000000003526f0 [ 262.367022][ T7979] Call Trace: [ 262.370333][ T7979] [ 262.373268][ T7979] ? collapse_scan_file+0x1c1/0x5230 [ 262.378542][ T7979] ? __pfx___schedule+0x10/0x10 [ 262.383375][ T7979] ? __pfx_collapse_scan_file+0x10/0x10 [ 262.388907][ T7979] ? __lock_acquire+0x6b5/0x2cf0 [ 262.393834][ T7979] ? schedule+0x16e/0x360 [ 262.398162][ T7979] ? __up_read+0x291/0x6b0 [ 262.402584][ T7979] ? __pfx___up_read+0x10/0x10 [ 262.407333][ T7979] collapse_single_pmd+0x22b/0x4510 [ 262.412519][ T7979] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.417705][ T7979] ? debug_object_free+0x2d7/0x490 [ 262.422823][ T7979] ? __flush_work+0xa26/0xc50 [ 262.427482][ T7979] ? __pfx_collapse_single_pmd+0x10/0x10 [ 262.433101][ T7979] ? __flush_work+0x100/0xc50 [ 262.437763][ T7979] ? madvise_collapse+0x18c/0x820 [ 262.442771][ T7979] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 262.448390][ T7979] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.454366][ T7979] madvise_collapse+0x34c/0x820 [ 262.459201][ T7979] madvise_vma_behavior+0x1094/0x4460 [ 262.464554][ T7979] ? do_raw_spin_lock+0x12b/0x2f0 [ 262.469597][ T7979] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 262.475299][ T7979] ? do_raw_spin_lock+0x12b/0x2f0 [ 262.480305][ T7979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 262.485660][ T7979] ? debug_object_assert_init+0x209/0x370 [ 262.491368][ T7979] ? rcu_is_watching+0x15/0xb0 [ 262.496117][ T7979] ? trace_hrtimer_start+0x82/0x230 [ 262.501304][ T7979] ? finish_task_switch+0x41f/0xbe0 [ 262.506489][ T7979] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.511702][ T7979] ? finish_task_switch+0x41f/0xbe0 [ 262.516889][ T7979] ? rcu_is_watching+0x15/0xb0 [ 262.521655][ T7979] ? trace_sched_exit_tp+0x3a/0x150 [ 262.526842][ T7979] ? __schedule+0x167b/0x5590 [ 262.531512][ T7979] ? mas_prev_slot+0xb7b/0xbf0 [ 262.536262][ T7979] ? find_vma_prev+0x123/0x1b0 [ 262.541012][ T7979] ? __pfx_find_vma_prev+0x10/0x10 [ 262.546117][ T7979] ? futex_unqueue+0x22/0x240 [ 262.550781][ T7979] ? __futex_wait+0x371/0x420 [ 262.555440][ T7979] madvise_walk_vmas+0x573/0xae0 [ 262.560365][ T7979] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 262.565809][ T7979] ? blk_start_plug+0x6e/0x1b0 [ 262.570556][ T7979] madvise_do_behavior+0x386/0x540 [ 262.575659][ T7979] ? __pfx_madvise_do_behavior+0x10/0x10 [ 262.581276][ T7979] ? down_read+0x270/0x2e0 [ 262.585676][ T7979] ? madvise_lock+0x146/0x2e0 [ 262.590333][ T7979] do_madvise+0x1fa/0x2e0 [ 262.594697][ T7979] ? __pfx_do_madvise+0x10/0x10 [ 262.599560][ T7979] ? __se_sys_futex+0x3a8/0x450 [ 262.604396][ T7979] ? rcu_is_watching+0x15/0xb0 [ 262.609140][ T7979] __x64_sys_madvise+0xa6/0xc0 [ 262.613886][ T7979] do_syscall_64+0x14d/0xf80 [ 262.618458][ T7979] ? trace_irq_disable+0x3b/0x150 [ 262.623467][ T7979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.629518][ T7979] ? clear_bhb_loop+0x40/0x90 [ 262.634182][ T7979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.640054][ T7979] RIP: 0033:0x7f72f579c799 [ 262.644462][ T7979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.664047][ T7979] RSP: 002b:00007f72f39f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 262.672448][ T7979] RAX: ffffffffffffffda RBX: 00007f72f5a15fa0 RCX: 00007f72f579c799 [ 262.680413][ T7979] RDX: 0000000000000019 RSI: 0000000000600722 RDI: 0000200000000000 [ 262.688371][ T7979] RBP: 00007f72f5832c99 R08: 0000000000000000 R09: 0000000000000000 [ 262.696327][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.704284][ T7979] R13: 00007f72f5a16038 R14: 00007f72f5a15fa0 R15: 00007fff5b8fbc98 [ 262.712249][ T7979] [ 262.715252][ T7979] Modules linked in: [ 262.720419][ T7979] ---[ end trace 0000000000000000 ]--- [ 262.739724][ T7979] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 262.745800][ T7979] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 262.765550][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.775578][ T7979] RSP: 0018:ffffc90005bfee20 EFLAGS: 00010246 [ 262.781761][ T7979] RAX: 0000000000000000 RBX: ffff8880357e3c80 RCX: e3c7f0ff0599e900 [ 262.791775][ T7979] RDX: ffffc9000d4d1000 RSI: 00000000000075df RDI: 00000000000075e0 [ 262.860140][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.860145][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.882466][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.889682][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.889836][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.904181][ T7979] RBP: ffffc90005bff130 R08: ffffc90005bfeba7 R09: 1ffff92000b7fd74 [ 262.904416][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.912788][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.926733][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.936347][ T7979] R10: dffffc0000000000 R11: fffff52000b7fd75 R12: ffffea0001a4a0f0 [ 262.968445][ T7979] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90005bff010 [ 262.977411][ T7979] FS: 00007f72f39f66c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 262.986430][ T7979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.993173][ T7979] CR2: 00007f74ce7e7420 CR3: 0000000029b46000 CR4: 00000000003526f0 [ 263.001230][ T7979] Kernel panic - not syncing: Fatal exception [ 263.007536][ T7979] Kernel Offset: disabled [ 263.011867][ T7979] Rebooting in 86400 seconds..