last executing test programs: 7m55.176360158s ago: executing program 4 (id=2233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@netfilter={0x2, 0x1, 0xc5d, 0x1}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbd) bind$alg(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x10000, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x7, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x10001, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x0, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x0, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}, 0x10) timer_create(0x4, 0x0, &(0x7f0000000000)) write$6lowpan_enable(r4, &(0x7f0000000140)='0', 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x90}}, 0x448d0) 7m51.755219598s ago: executing program 4 (id=2253): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001c40)=@newtfilter={0x24, 0x2c, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xc}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7m51.452998315s ago: executing program 4 (id=2255): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) recvfrom(r0, 0x0, 0x0, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) io_uring_enter(0xffffffffffffffff, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 7m49.471679207s ago: executing program 4 (id=2268): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0xb23091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m49.319840278s ago: executing program 4 (id=2270): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x40, 0x101000) ioctl$BLKRRPART(r0, 0x125f, 0x0) 7m48.979527103s ago: executing program 4 (id=2271): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffff76, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0xc000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7m48.946091457s ago: executing program 32 (id=2271): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffff76, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0xc000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13.630286165s ago: executing program 0 (id=3526): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xbabd}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 11.591826332s ago: executing program 0 (id=3532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x40003) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100"], 0x18}}, 0x0) 10.685316194s ago: executing program 0 (id=3536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x0, 0x40, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) mkdirat(0xffffffffffffffff, 0x0, 0x13) 10.424104032s ago: executing program 3 (id=3537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x40000}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0xfffffffe, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x6}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x2b}, 0xa, @in=@local, 0x0, 0x0, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 8.707704827s ago: executing program 0 (id=3538): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f00002b9000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) 8.410113597s ago: executing program 3 (id=3540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x1d000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c00078008000400040000000800010018000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0xa4500001}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004040) write$cgroup_pressure(r3, &(0x7f0000000440)={'full', 0x20, 0x2, 0x20, 0x100}, 0x2f) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r5 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80200c}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x140a, 0x300, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000009c0)='blkio.reset_stats\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r8) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0d0700f5", @ANYRES16=r9], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x4}, 0x38) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r11 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r11, &(0x7f0000001500)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x108}}], 0x2, 0x4048840) 7.944584317s ago: executing program 5 (id=3541): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r1, 0x0, 0x0) 7.743891574s ago: executing program 5 (id=3543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002a80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x13) 6.770423493s ago: executing program 3 (id=3547): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffc, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 5.860895993s ago: executing program 5 (id=3548): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x4000801) 5.729565464s ago: executing program 3 (id=3549): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, 0x0, 0x8) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x1040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) r1 = io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x100, 0xfffffffa, 0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3"], 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) unshare(0x62040200) exit(0xffff) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) 5.717035792s ago: executing program 2 (id=3550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x40000}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0xfffffffe, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x6}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x2b}, 0xa, @in=@local, 0x0, 0x0, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 5.555500652s ago: executing program 1 (id=3551): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 5.374335543s ago: executing program 2 (id=3552): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8, @ANYBLOB], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) timer_create(0x2, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) 5.275021275s ago: executing program 1 (id=3553): r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xd4\bj@5\x1dN\xe3\rf\xe5W\xcers\x04\x84)\xecq\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\xab\xfa\x032-{\x96{\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19n\xc7\xf2\vIR=T\x05)jIeR}\xecNg\x9b\a \x84\x93\x82\x1d1i\xf0\xa1\xe2\xf6L\xe84\xb6\n\x16\xc7\xa1\xf6\x7f\nl\x969\x99>\xf0\xdd\xfe\x06\xdd\xa5\f\xd3E\xdd\xae-\xf1\xfd\xc4@\x85L\x1e\xd2\x18\xc5TN\x0f\xe6@\xa0\xfd\xdaf\x9d<\xdb\xf1<\xff\xf4]\xd1K\xe1xj\x16\xaaQ(:\xa6'}], 0xa, "c3c7b2e1312e0841e5544d48428c89e0"}, 0xee) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000001c0)=0x8) read$watch_queue(r0, 0x0, 0x0) keyctl$revoke(0x3, r3) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000003b00010325bd7000fddbdf250a"], 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 4.12659419s ago: executing program 0 (id=3554): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r1, 0x0, 0x0) 3.8415207s ago: executing program 0 (id=3555): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x21a, 0x40000032, r1, 0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x34b6, &(0x7f0000000540)={0x0, 0x400849ee, 0xc00, 0x5, 0x50}, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r8, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c6572300000fce59e00ae3ebd5a29522b30dbc0b7bc8e702ed75942d429918b446abc345166e8458de219143fa615afc48a6dbfc8035ac55a8313df4de1bd7c824c164bc1541721e98d6626beb7307cd7cb78bfee0b4b6ba2d45f90934556c77926be95390d73b7523c343c497f1dd0df300353c692070b8e844961b17cc47b87f4193cc3d69a8410c93f91c7f81181e758bbbae0b7a78c707a46cb61ec1d3c8af027035ce0cb946d4750c936ff32cf41a7bdcb0b0d71af79011a72c36476ae2772e32dcb388ede5a31509fcd2769b35b42968c22bc72"], 0x38}}, 0x0) write(r6, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100"/58, 0x36) write(r6, &(0x7f0000000600)="ffffffffffff00000000000188ca4f4000282000000000000000010000010100000100"/58, 0x36) write(r6, &(0x7f0000000800)="ffffffffffff00000000000188ca4f4000280000000000000000010000", 0x1d) ioctl$KVM_SET_ONE_REG(r5, 0x4048aecb, &(0x7f0000000540)=@arm64_ccsidr={0x6020000000110005, 0x0}) 3.503418149s ago: executing program 5 (id=3556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x1ac, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_ACT={0x17c, 0x1, [@m_bpf={0x118, 0x11, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x60, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x0, 0xb6, 0x6, 0xfffffffa}, {0x7ff, 0x7, 0x2, 0x3}, {0x2, 0x6, 0x0, 0xedc}, {0x10, 0xb, 0x6, 0x9}]}]}, {0x11, 0x6, "5d3aee85a6264cff4a2163adae"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.448499672s ago: executing program 1 (id=3557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x1d000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c00078008000400040000000800010018000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0xa4500001}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004040) write$cgroup_pressure(r3, &(0x7f0000000440)={'full', 0x20, 0x2, 0x20, 0x100}, 0x2f) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r5 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80200c}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x140a, 0x300, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000009c0)='blkio.reset_stats\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r8) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0d0700f5", @ANYRES16=r9], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x4}, 0x38) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r11 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r11, &(0x7f0000001500)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x108}}], 0x2, 0x4048840) 3.319199322s ago: executing program 5 (id=3558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002a80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x13) 1.715386413s ago: executing program 5 (id=3559): openat$kvm(0xffffff9c, &(0x7f0000000000), 0x430081, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0xae) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='smaps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4066, 0xfe2}], 0x1, 0x2c0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x80000002) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc001001b, 0x0, 0x2}]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r2, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x40) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0xc02, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x14, &(0x7f0000000080), 0x75bb17c2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@dellinkprop={0x60, 0x6c, 0xc19, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5849e}, [@IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'nicvf0\x00'}, {0x14, 0x35, 'wg0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0xc0) 1.552164695s ago: executing program 3 (id=3560): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) io_uring_enter(0xffffffffffffffff, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 1.545446068s ago: executing program 2 (id=3561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x40003) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100"], 0x18}}, 0x0) 1.539149226s ago: executing program 1 (id=3562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x40000}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0xfffffffe, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x6}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x2b}, 0xa, @in=@local, 0x0, 0x0, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 707.934666ms ago: executing program 1 (id=3563): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x40800) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 628.382586ms ago: executing program 1 (id=3564): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0xd1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) 623.184877ms ago: executing program 2 (id=3565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 378.603413ms ago: executing program 2 (id=3566): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r1, 0x0, 0x0) 1.037242ms ago: executing program 2 (id=3567): r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xd4\bj@5\x1dN\xe3\rf\xe5W\xcers\x04\x84)\xecq\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\xab\xfa\x032-{\x96{\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19n\xc7\xf2\vIR=T\x05)jIeR}\xecNg\x9b\a \x84\x93\x82\x1d1i\xf0\xa1\xe2\xf6L\xe84\xb6\n\x16\xc7\xa1\xf6\x7f\nl\x969\x99>\xf0\xdd\xfe\x06\xdd\xa5\f\xd3E\xdd\xae-\xf1\xfd\xc4@\x85L\x1e\xd2\x18\xc5TN\x0f\xe6@\xa0\xfd\xdaf\x9d<\xdb\xf1<\xff\xf4]\xd1K\xe1xj\x16\xaaQ(:\xa6'}], 0xa, "c3c7b2e1312e0841e5544d48428c89e0"}, 0xee) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000001c0)=0x8) read$watch_queue(r0, 0x0, 0x0) keyctl$revoke(0x3, r3) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000003b00010325bd7000fddbdf250a"], 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 0s ago: executing program 3 (id=3568): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x1ac, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_ACT={0x17c, 0x1, [@m_bpf={0x118, 0x11, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x60, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x0, 0xb6, 0x6, 0xfffffffa}, {0x7ff, 0x7, 0x2, 0x3}, {0x2, 0x6, 0x0, 0xedc}, {0x10, 0xb, 0x6, 0x9}]}]}, {0x11, 0x6, "5d3aee85a6264cff4a2163adae"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): scriptor?? [ 645.600341][ T992] hub 4-1:0.132: bad descriptor, ignoring hub [ 645.600368][ T992] hub 4-1:0.132: probe with driver hub failed with error -5 [ 645.606445][ T992] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input107 [ 645.719850][T14594] netlink: Failed to add H helper -22 [ 645.719911][T14594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.950589][ T992] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 646.102017][ T992] usb 1-1: Using ep0 maxpacket: 8 [ 646.103630][ T992] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 646.105136][ T992] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 646.105188][ T992] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 646.105213][ T992] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 646.105239][ T992] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 646.105265][ T992] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.105307][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.405441][ T992] usb 1-1: usb_control_msg returned -32 [ 646.405490][ T992] usbtmc 1-1:16.0: can't read capabilities [ 646.567257][T14605] kvm: pic: non byte write [ 647.180736][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2876'. [ 651.510550][T14634] loop2: detected capacity change from 0 to 32768 [ 651.581351][T14634] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 651.652107][T14594] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 651.660258][T14634] XFS (loop2): Ending clean mount [ 651.672909][T14634] XFS (loop2): Quotacheck needed: Please wait. [ 651.743319][ T9877] usb 1-1: USB disconnect, device number 88 [ 651.888072][T14634] XFS (loop2): Quotacheck: Done. [ 652.556029][T14651] loop0: detected capacity change from 0 to 8192 [ 652.597501][ T5633] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 652.774400][ T32] usb 4-1: USB disconnect, device number 73 [ 652.814709][T14659] loop3: detected capacity change from 0 to 164 [ 653.991761][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2889'. [ 654.312513][ T5618] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 654.312543][ T5618] FAT-fs (loop0): Filesystem has been set read-only [ 656.063677][T14674] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2890'. [ 656.066889][T14674] netlink: 'syz.2.2890': attribute type 10 has an invalid length. [ 656.510336][ T32] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 656.682435][ T32] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 656.683768][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.683798][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.683836][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.694826][ T32] usb 4-1: config 0 descriptor?? [ 657.335449][T14697] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 657.338002][ T32] usbhid 4-1:0.0: can't add hid device: -32 [ 657.338100][ T32] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 658.215694][T14706] loop5: detected capacity change from 0 to 4096 [ 659.466085][ T32] usb 4-1: USB disconnect, device number 74 [ 660.153817][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'. [ 660.482671][T14717] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2905'. [ 660.486688][T14717] netlink: 'syz.5.2905': attribute type 10 has an invalid length. [ 661.341050][T13862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 661.347179][T13862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 661.371548][T13862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 661.399907][T13862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 661.410355][T13862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 663.548731][T13862] Bluetooth: hci5: command tx timeout [ 663.558550][ T9856] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 663.731522][ T9856] usb 2-1: Using ep0 maxpacket: 8 [ 663.733689][ T9856] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 663.734872][ T9856] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 663.734908][ T9856] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 663.734949][ T9856] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 663.734979][ T9856] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 663.735006][ T9856] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 663.735034][ T9856] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 663.735062][ T9856] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 663.735090][ T9856] usb 2-1: config 168 interface 0 has no altsetting 0 [ 663.736033][ T9856] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 663.736066][ T9856] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 663.736104][ T9856] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 663.736132][ T9856] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 663.736159][ T9856] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 663.736186][ T9856] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 663.736214][ T9856] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 663.736242][ T9856] usb 2-1: config 168 interface 0 has no altsetting 0 [ 663.740016][ T9856] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 663.740049][ T9856] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 663.740086][ T9856] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 663.740114][ T9856] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 663.740139][ T9856] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 663.740165][ T9856] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 663.842098][ T9856] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 663.842124][ T9856] usb 2-1: config 168 interface 0 has no altsetting 0 [ 663.910666][ T9856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.910691][ T9856] usb 2-1: Product: syz [ 663.910705][ T9856] usb 2-1: Manufacturer: syz [ 663.910728][ T9856] usb 2-1: SerialNumber: syz [ 664.376322][T14746] loop2: detected capacity change from 0 to 32768 [ 664.459392][T14746] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 664.492433][ T9856] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 664.509992][ T9856] usb 2-1: USB disconnect, device number 99 [ 664.545196][T14746] XFS (loop2): Ending clean mount [ 664.552019][T14746] XFS (loop2): Quotacheck needed: Please wait. [ 664.739833][T14746] XFS (loop2): Quotacheck: Done. [ 665.328306][ T5633] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 665.570814][T13862] Bluetooth: hci5: command tx timeout [ 667.754530][T13862] Bluetooth: hci5: command tx timeout [ 667.758029][ T9869] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 667.787291][T14774] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2917'. [ 667.942241][ T9869] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 667.949105][ T9869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.949141][ T9869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.949181][ T9869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.970957][ T9869] usb 2-1: config 0 descriptor?? [ 668.117578][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.117727][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.117894][T14721] bridge_slave_0: entered allmulticast mode [ 668.124151][T14721] bridge_slave_0: entered promiscuous mode [ 668.140868][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.141374][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.141842][T14721] bridge_slave_1: entered allmulticast mode [ 668.149969][T14721] bridge_slave_1: entered promiscuous mode [ 669.937783][ T5624] Bluetooth: hci5: command tx timeout [ 670.063016][T14721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.082217][T14721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.087965][ T9869] usbhid 2-1:0.0: can't add hid device: -71 [ 670.088070][ T9869] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 670.116229][ T9869] usb 2-1: USB disconnect, device number 100 [ 670.217301][T14721] team0: Port device team_slave_0 added [ 670.220010][T14721] team0: Port device team_slave_1 added [ 670.280349][T14721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.280368][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.280397][T14721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.292485][T14721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.292503][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.292532][T14721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.470901][T14721] hsr_slave_0: entered promiscuous mode [ 670.474736][T14721] hsr_slave_1: entered promiscuous mode [ 670.475304][T14721] debugfs: 'hsr0' already exists in 'hsr' [ 670.475329][T14721] Cannot create hsr debugfs directory [ 671.065281][T14721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.388470][T14799] loop1: detected capacity change from 0 to 32768 [ 671.422531][T14721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.427139][T14799] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 671.516003][T14799] XFS (loop1): Ending clean mount [ 671.520410][T14799] XFS (loop1): Quotacheck needed: Please wait. [ 671.736220][T14799] XFS (loop1): Quotacheck: Done. [ 671.736440][T14721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.341405][T14818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.341862][T14818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.450094][T14721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.492146][ T5621] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 672.975210][T14826] syzkaller0: entered promiscuous mode [ 672.975232][T14826] syzkaller0: entered allmulticast mode [ 673.359211][T14721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 673.384010][T14721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.387039][T14721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 673.407621][T14721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.416135][T14721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 674.768614][T14721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.769875][T14721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 674.791073][T14721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.933047][T14843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.950627][T14843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.045016][T14721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.142354][T14721] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.152333][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.152412][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.188477][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.188583][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.260563][ T9869] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 675.420556][ T9869] usb 2-1: Using ep0 maxpacket: 16 [ 675.421338][ T9869] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 675.424605][ T9869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.424630][ T9869] usb 2-1: Product: syz [ 675.424646][ T9869] usb 2-1: Manufacturer: syz [ 675.424663][ T9869] usb 2-1: SerialNumber: syz [ 675.429495][ T9869] usb 2-1: config 0 descriptor?? [ 675.481782][ T9869] usb 2-1: selecting invalid altsetting 1 [ 675.481802][ T9869] technisat-usb2: could not set alternate setting to 0 [ 675.689330][ T9869] technisat-usb2: firmware version: 0.0 [ 675.689376][ T9869] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 675.908162][ T9869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 675.911157][ T9869] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 675.911210][ T9869] usb 2-1: media controller created [ 675.911494][ T9869] technisat-usb2: i2c-error: out failed 53 = -22 [ 675.911632][ T9869] dvb-usb: MAC address reading failed. [ 675.976463][ T9869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.978914][T14721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.117348][T14721] veth0_vlan: entered promiscuous mode [ 676.153244][T14721] veth1_vlan: entered promiscuous mode [ 676.174771][ T9869] DVB: Unable to find symbol stv090x_attach() [ 676.175152][ T9869] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 676.298429][T14870] loop2: detected capacity change from 0 to 8192 [ 676.299719][ T9869] rc_core: IR keymap rc-technisat-usb2 not found [ 676.299734][ T9869] Registered IR keymap rc-empty [ 676.320428][ T9869] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 676.325840][ T9869] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input108 [ 676.355056][ T9869] dvb-usb: schedule remote query interval to 100 msecs. [ 676.359295][ T9869] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 676.395079][ T9869] usb 2-1: USB disconnect, device number 101 [ 677.028210][T14721] veth0_macvtap: entered promiscuous mode [ 677.042864][T14721] veth1_macvtap: entered promiscuous mode [ 677.083705][ T9869] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 677.183734][T14721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.218386][T14874] syzkaller0: entered promiscuous mode [ 677.218408][T14874] syzkaller0: entered allmulticast mode [ 677.238033][T14721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.378178][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.378231][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.378269][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.522334][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.522355][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.614541][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.614564][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.630735][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.684954][ T5633] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 677.684972][ T5633] FAT-fs (loop2): Filesystem has been set read-only [ 678.010011][T14885] loop0: detected capacity change from 0 to 164 [ 678.121152][T14885] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 679.593881][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2942'. [ 682.614856][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 682.618582][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 682.620115][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 682.635942][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 682.650925][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 682.655620][T14906] syzkaller0: entered promiscuous mode [ 682.655639][T14906] syzkaller0: entered allmulticast mode [ 683.092748][T14917] loop0: detected capacity change from 0 to 256 [ 683.099504][T14917] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 683.099550][T14917] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 683.122007][T14917] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 683.126046][T14917] exFAT-fs (loop0): failed to load alloc-bitmap [ 683.126061][T14917] exFAT-fs (loop0): failed to recognize exfat type [ 683.525765][T14922] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[14721] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[14922] [ 684.349187][ T33] audit: type=1804 audit(1789108517.363:218): pid=14927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2956" name="/newroot/5/file1" dev="fuse" ino=1 res=1 errno=0 [ 684.427640][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.441149][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.610331][ T5729] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 684.690990][T13862] Bluetooth: hci1: command tx timeout [ 684.760307][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 684.765741][ T5729] usb 1-1: unable to get BOS descriptor or descriptor too short [ 684.765805][ T5729] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 684.769104][ T5729] usb 1-1: config 4 interface 0 has no altsetting 0 [ 684.832401][ T5729] usb 1-1: string descriptor 0 read error: -22 [ 684.832497][ T5729] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 684.873443][ T5729] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 684.893662][ T5729] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 684.894099][ T5729] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 684.894180][ T5729] usb 1-1: media controller created [ 684.971433][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 685.400857][T14907] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.401034][T14907] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.401450][T14907] bridge_slave_0: entered allmulticast mode [ 685.403494][T14907] bridge_slave_0: entered promiscuous mode [ 685.411245][T14907] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.411581][T14907] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.411839][T14907] bridge_slave_1: entered allmulticast mode [ 685.418100][T14907] bridge_slave_1: entered promiscuous mode [ 685.503610][T14907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.508149][T14907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.577938][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 685.578078][T14951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.578094][T14951] IPv6: NLM_F_CREATE should be set when creating new route [ 685.697646][T14907] team0: Port device team_slave_0 added [ 685.708288][T14907] team0: Port device team_slave_1 added [ 685.751226][T14907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.751244][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.751284][T14907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.755473][T14907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.755489][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.755519][T14907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.891621][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.891677][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.964115][T14907] hsr_slave_0: entered promiscuous mode [ 685.967303][T14907] hsr_slave_1: entered promiscuous mode [ 685.968028][T14907] debugfs: 'hsr0' already exists in 'hsr' [ 685.968047][T14907] Cannot create hsr debugfs directory [ 687.538855][T14927] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 687.538952][T14927] usb 1-1: dvb_usb_au6610: wlen=4100, aborting [ 687.539039][ T5729] zl10353_read_register: readreg error (reg=127, ret==0) [ 687.539339][T13862] Bluetooth: hci1: command tx timeout [ 687.654867][ T5729] usb 1-1: USB disconnect, device number 89 [ 688.096385][T14907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.193153][T14907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.210828][ T5729] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 688.371023][ T5729] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 688.372099][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 688.376045][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.376071][ T5729] usb 6-1: Product: syz [ 688.376086][ T5729] usb 6-1: Manufacturer: syz [ 688.376102][ T5729] usb 6-1: SerialNumber: syz [ 688.392689][ T5729] usb 6-1: config 0 descriptor?? [ 688.431450][T14963] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 688.441595][ T5729] hub 6-1:0.0: bad descriptor, ignoring hub [ 688.441619][ T5729] hub 6-1:0.0: probe with driver hub failed with error -5 [ 688.445719][ T5729] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input109 [ 688.495888][T14907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.175336][T14966] loop0: detected capacity change from 0 to 4096 [ 689.570299][T13862] Bluetooth: hci1: command tx timeout [ 690.278600][T14907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.332520][ T32] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 690.436440][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'. [ 690.483910][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 690.503911][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 690.503962][ T32] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 690.506567][ T32] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 690.506595][ T32] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 690.506617][ T32] usb 1-1: config 14 has no interface number 0 [ 690.506635][ T32] usb 1-1: config 14 has no interface number 1 [ 690.506697][ T32] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 690.506723][ T32] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 690.506750][ T32] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 690.506777][ T32] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 690.506805][ T32] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 690.506831][ T32] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.506858][ T32] usb 1-1: config 14 interface 57 has no altsetting 0 [ 690.506877][ T32] usb 1-1: config 14 interface 228 has no altsetting 0 [ 690.512687][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.512774][ T32] usb 1-1: Product: syz [ 690.512814][ T32] usb 1-1: Manufacturer: syz [ 690.512847][ T32] usb 1-1: SerialNumber: syz [ 691.031777][ T32] legousbtower 1-1:14.57: interrupt endpoints not found [ 691.053266][T14878] usb 6-1: USB disconnect, device number 12 [ 691.256312][T14907] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 691.270533][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.271777][T14907] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 691.309325][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.322037][T14907] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 691.339531][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.352295][T14907] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 691.374365][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.430817][ T32] legousbtower 1-1:14.228: get version request failed: -121 [ 691.431002][ T32] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 691.431914][ T33] audit: type=1800 audit(1789108524.453:219): pid=14998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2976" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 691.651045][T13862] Bluetooth: hci1: command tx timeout [ 691.729702][T14907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.796026][T14907] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.832152][T12619] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.832258][T12619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.854724][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2980'. [ 691.854831][T15008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 691.854845][T15008] IPv6: NLM_F_CREATE should be set when creating new route [ 691.891729][T12619] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.891841][T12619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.690772][ T992] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 692.863870][ T992] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 692.884741][ T992] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 692.884765][ T992] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 692.884783][ T992] usb 6-1: config 0 interface 0 has no altsetting 0 [ 692.922345][ T992] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 692.922367][ T992] usb 6-1: Product: syz [ 692.922379][ T992] usb 6-1: Manufacturer: syz [ 692.922390][ T992] usb 6-1: SerialNumber: syz [ 692.928249][ T992] usb 6-1: config 0 descriptor?? [ 692.994452][ T992] usb 6-1: selecting invalid altsetting 0 [ 693.059146][T15040] binder: 15039:15040 ioctl c0306201 0 returned -14 [ 693.120267][ T5729] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 693.154163][T14907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.198331][T15031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.214203][T15031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.235450][T14878] usb 1-1: USB disconnect, device number 90 [ 693.271264][ T5729] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 693.272721][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 693.317757][ T992] usb 6-1: USB disconnect, device number 13 [ 693.329352][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.329372][ T5729] usb 2-1: Product: syz [ 693.329382][ T5729] usb 2-1: Manufacturer: syz [ 693.329393][ T5729] usb 2-1: SerialNumber: syz [ 693.363332][ T5729] usb 2-1: config 0 descriptor?? [ 693.364797][T15038] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 693.388867][ T5729] hub 2-1:0.0: bad descriptor, ignoring hub [ 693.388895][ T5729] hub 2-1:0.0: probe with driver hub failed with error -5 [ 693.432436][ T5729] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input110 [ 693.502371][T14907] veth0_vlan: entered promiscuous mode [ 693.559222][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2992'. [ 693.559338][T15046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.559352][T15046] IPv6: NLM_F_CREATE should be set when creating new route [ 693.616012][T14233] udevd[14233]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.616402][T14907] veth1_vlan: entered promiscuous mode [ 693.642382][T15047] ./dev/sda1: Can't lookup blockdev [ 695.936856][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2993'. [ 696.052442][T14907] veth0_macvtap: entered promiscuous mode [ 696.069201][T14907] veth1_macvtap: entered promiscuous mode [ 696.392737][T14907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.420403][T14907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.532887][T12619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.534095][T12619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.534149][T12619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.617619][T12619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.703189][T14007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.703277][T14007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.797341][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.797364][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.061654][ T32] usb 2-1: USB disconnect, device number 102 [ 697.510278][ T5744] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 697.585545][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 697.600831][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 697.604224][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 697.607046][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 697.607741][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 697.671588][ T5744] usb 4-1: Using ep0 maxpacket: 16 [ 697.674556][ T5744] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 697.699235][ T5744] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 697.699260][ T5744] usb 4-1: config 0 has no interface number 0 [ 697.716447][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.716472][ T5744] usb 4-1: Product: syz [ 697.716487][ T5744] usb 4-1: Manufacturer: syz [ 697.716502][ T5744] usb 4-1: SerialNumber: syz [ 697.739449][ T5744] usb 4-1: config 0 descriptor?? [ 697.752161][T15043] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 697.754722][ T5744] hub 4-1:0.132: bad descriptor, ignoring hub [ 697.754749][ T5744] hub 4-1:0.132: probe with driver hub failed with error -5 [ 697.787166][ T5744] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input111 [ 697.920412][T15043] usb 6-1: Using ep0 maxpacket: 32 [ 697.928155][T15043] usb 6-1: unable to get BOS descriptor or descriptor too short [ 697.928202][T15043] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 697.942650][T15043] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 697.942722][T15043] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 697.942783][T15043] usb 6-1: config 14 has no interface number 0 [ 697.942833][T15043] usb 6-1: config 14 has no interface number 1 [ 697.943021][T15043] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 697.943095][T15043] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 697.943167][T15043] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 697.943236][T15043] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 697.943315][T15043] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 697.943426][T15043] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.943502][T15043] usb 6-1: config 14 interface 57 has no altsetting 0 [ 697.943532][T15043] usb 6-1: config 14 interface 228 has no altsetting 0 [ 697.967659][T15043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.967719][T15043] usb 6-1: Product: syz [ 697.967759][T15043] usb 6-1: Manufacturer: syz [ 697.967799][T15043] usb 6-1: SerialNumber: syz [ 698.440568][ T5744] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 698.603338][ T5744] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 698.607048][T15043] legousbtower 6-1:14.57: interrupt endpoints not found [ 698.645129][T14878] usb 4-1: USB disconnect, device number 75 [ 698.673870][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.674699][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.697077][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.018946][ T5744] usb 1-1: config 0 descriptor?? [ 699.206013][T15043] legousbtower 6-1:14.228: get version request failed: -121 [ 699.206193][T15043] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 699.733790][T13862] Bluetooth: hci2: command tx timeout [ 699.927055][ T5744] usbhid 1-1:0.0: can't add hid device: -32 [ 699.941370][ T5744] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 700.592213][ T5629] usb 6-1: USB disconnect, device number 14 [ 702.455840][T13862] Bluetooth: hci2: command tx timeout [ 702.556933][T15117] fuse: Unknown parameter 'grou00000000000000000000' [ 702.645371][ T5744] usb 1-1: USB disconnect, device number 91 [ 702.912188][T14878] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 703.071036][T14878] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 703.072277][T14878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 703.075151][T14878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.075177][T14878] usb 4-1: Product: syz [ 703.075193][T14878] usb 4-1: Manufacturer: syz [ 703.075210][T14878] usb 4-1: SerialNumber: syz [ 703.078424][T14878] usb 4-1: config 0 descriptor?? [ 703.084192][T15116] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 703.148000][T14878] hub 4-1:0.0: bad descriptor, ignoring hub [ 703.148035][T14878] hub 4-1:0.0: probe with driver hub failed with error -5 [ 703.183951][T14878] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input112 [ 703.223958][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 703.502909][T15130] loop1: detected capacity change from 0 to 164 [ 703.566318][T15130] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 703.815050][T15079] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.815867][T15079] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.816119][T15079] bridge_slave_0: entered allmulticast mode [ 703.852326][T15079] bridge_slave_0: entered promiscuous mode [ 704.843483][T13862] Bluetooth: hci2: command tx timeout [ 705.930592][T15079] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.930696][T15079] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.930863][T15079] bridge_slave_1: entered allmulticast mode [ 705.937790][T15079] bridge_slave_1: entered promiscuous mode [ 706.145440][T15079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.164119][T15079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.855764][T13862] Bluetooth: hci2: command tx timeout [ 708.081118][ T5629] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 708.264135][T15079] team0: Port device team_slave_0 added [ 708.358086][ T5629] usb 1-1: Using ep0 maxpacket: 32 [ 708.375052][T14878] usb 4-1: USB disconnect, device number 76 [ 708.381392][ T5629] usb 1-1: unable to get BOS descriptor or descriptor too short [ 708.381516][ T5629] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 708.384409][ T5629] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 708.384471][ T5629] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 708.384583][ T5629] usb 1-1: config 14 has no interface number 0 [ 708.384631][ T5629] usb 1-1: config 14 has no interface number 1 [ 708.384797][ T5629] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 708.384859][ T5629] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 708.384928][ T5629] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 708.384997][ T5629] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 708.385076][ T5629] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 708.385139][ T5629] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.385213][ T5629] usb 1-1: config 14 interface 57 has no altsetting 0 [ 708.385275][ T5629] usb 1-1: config 14 interface 228 has no altsetting 0 [ 708.388501][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.388581][ T5629] usb 1-1: Product: syz [ 708.388624][ T5629] usb 1-1: Manufacturer: syz [ 708.388671][ T5629] usb 1-1: SerialNumber: syz [ 708.560973][T15079] team0: Port device team_slave_1 added [ 708.630080][T15155] loop5: detected capacity change from 0 to 4096 [ 708.692012][T15079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.692029][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.692057][T15079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.699801][T15079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.699816][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.699855][T15079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.788876][T14878] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 708.846811][ T5629] legousbtower 1-1:14.57: interrupt endpoints not found [ 708.940683][T14878] usb 4-1: device descriptor read/64, error -32 [ 709.059454][T15079] hsr_slave_0: entered promiscuous mode [ 709.079795][T15079] hsr_slave_1: entered promiscuous mode [ 709.085821][T15079] debugfs: 'hsr0' already exists in 'hsr' [ 709.085844][T15079] Cannot create hsr debugfs directory [ 710.907891][ T5629] legousbtower 1-1:14.228: get version request failed: -110 [ 710.908065][ T5629] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -110 [ 711.054423][ T992] usb 1-1: USB disconnect, device number 92 [ 711.572013][T15079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.580848][ T992] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 711.734321][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 711.737824][ T992] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 711.749116][ T992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.768267][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.768292][ T992] usb 1-1: Product: syz [ 711.768306][ T992] usb 1-1: Manufacturer: syz [ 711.768321][ T992] usb 1-1: SerialNumber: syz [ 711.787017][ T992] usb 1-1: config 0 descriptor?? [ 712.038742][T15170] overlay: ./sys/module/kvm/parameters/nx_huge_pages is not a directory [ 712.822105][T15079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.953299][T15079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.739953][T15079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.321688][ T992] usb 1-1: USB disconnect, device number 93 [ 715.678365][T15079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 715.699758][T15079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.702236][T15079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 715.713148][T15079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.714787][T15079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 715.758928][T15079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.764670][T15079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 715.787666][T15079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.810879][T15197] netlink: Failed to add H helper -22 [ 715.810928][T15197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.014424][T14878] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 716.460412][T14878] usb 1-1: Using ep0 maxpacket: 8 [ 716.902641][ T992] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 717.051944][ T992] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 717.053242][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 717.059108][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.059134][ T992] usb 4-1: Product: syz [ 717.059151][ T992] usb 4-1: Manufacturer: syz [ 717.059167][ T992] usb 4-1: SerialNumber: syz [ 717.108394][ T992] usb 4-1: config 0 descriptor?? [ 717.110720][T15195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 717.129980][ T992] hub 4-1:0.0: bad descriptor, ignoring hub [ 717.130009][ T992] hub 4-1:0.0: probe with driver hub failed with error -5 [ 717.156336][ T992] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input113 [ 717.181315][T15045] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 717.350713][T15045] usb 2-1: Using ep0 maxpacket: 32 [ 717.369852][T15045] usb 2-1: unable to get BOS descriptor or descriptor too short [ 717.369924][T15045] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 717.392174][T15045] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 717.392210][T15045] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 717.392232][T15045] usb 2-1: config 14 has no interface number 0 [ 717.392251][T15045] usb 2-1: config 14 has no interface number 1 [ 717.392389][T15045] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 717.392416][T15045] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 717.392444][T15045] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 717.392543][T15045] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 717.392576][T15045] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 717.392605][T15045] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.392635][T15045] usb 2-1: config 14 interface 57 has no altsetting 0 [ 717.392727][T15045] usb 2-1: config 14 interface 228 has no altsetting 0 [ 717.399772][T15045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.399813][T15045] usb 2-1: Product: syz [ 717.399900][T15045] usb 2-1: Manufacturer: syz [ 717.399918][T15045] usb 2-1: SerialNumber: syz [ 717.624202][T14878] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 717.626912][T14878] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 717.626963][T14878] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 717.626987][T14878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 717.627013][T14878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 717.627038][T14878] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.627080][T14878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.000671][T15045] legousbtower 2-1:14.57: interrupt endpoints not found [ 718.158963][T14878] usb 1-1: usb_control_msg returned -32 [ 718.159015][T14878] usbtmc 1-1:16.0: can't read capabilities [ 718.388122][T15079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.426129][T15045] legousbtower 2-1:14.228: get version request failed: -121 [ 718.426501][T15045] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121 [ 718.726549][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 718.741843][T14878] usb 4-1: USB disconnect, device number 79 [ 718.835815][T15079] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.917083][T15222] loop5: detected capacity change from 0 to 4096 [ 718.964110][T14323] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.964220][T14323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.996276][T14323] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.996393][T14323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.847544][T15235] loop3: detected capacity change from 0 to 4096 [ 720.080265][T15045] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 720.762859][T15045] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 721.002508][T15045] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 721.002547][T15045] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 721.002617][T15045] usb 6-1: config 0 interface 0 has no altsetting 0 [ 721.165781][ T5744] usb 2-1: USB disconnect, device number 103 [ 721.509099][T15045] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 721.509163][T15045] usb 6-1: Product: syz [ 721.509182][T15045] usb 6-1: Manufacturer: syz [ 721.509199][T15045] usb 6-1: SerialNumber: syz [ 722.306268][T15045] usb 6-1: config 0 descriptor?? [ 722.433602][T15045] usb 6-1: can't set config #0, error -71 [ 722.435020][T15045] usb 6-1: USB disconnect, device number 15 [ 722.736140][T15079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.825655][T15079] veth0_vlan: entered promiscuous mode [ 722.839684][T15079] veth1_vlan: entered promiscuous mode [ 722.872458][T15079] veth0_macvtap: entered promiscuous mode [ 722.878069][T15079] veth1_macvtap: entered promiscuous mode [ 722.905799][T15079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.910071][T15079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.025609][T12887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.026914][T12887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.026960][T12887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.026998][T12887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.775926][T15197] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 723.853442][T12887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.853468][T12887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.998145][ T5744] usb 1-1: USB disconnect, device number 94 [ 724.117619][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.117642][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.619387][T15267] loop2: detected capacity change from 0 to 4096 [ 726.696313][T15274] loop3: detected capacity change from 0 to 256 [ 726.727658][T15274] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 726.727677][T15274] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 726.817373][T15274] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 726.819610][T15274] exFAT-fs (loop3): failed to load alloc-bitmap [ 726.819625][T15274] exFAT-fs (loop3): failed to recognize exfat type [ 726.952990][ T33] audit: type=1804 audit(1789108559.973:220): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3047" name="/newroot/583/file1" dev="fuse" ino=1 res=1 errno=0 [ 727.046112][T15274] loop3: detected capacity change from 0 to 512 [ 727.046989][T15274] EXT4-fs: Ignoring removed orlov option [ 727.085709][T15274] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 727.085734][T15274] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 727.085753][T15274] EXT4-fs (loop3): group descriptors corrupted! [ 727.362392][T15275] loop5: detected capacity change from 0 to 4096 [ 727.380349][T15043] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 727.464551][T15282] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[14907] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[15282] [ 727.491844][ T5744] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 727.710744][ T5744] usb 3-1: Using ep0 maxpacket: 32 [ 727.769790][ T5744] usb 3-1: unable to get BOS descriptor or descriptor too short [ 727.780641][ T5744] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 727.818698][ T5744] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 727.818784][ T5744] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 727.818918][ T5744] usb 3-1: config 14 has no interface number 0 [ 727.819092][ T5744] usb 3-1: config 14 has no interface number 1 [ 727.845698][ T5744] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 727.845787][ T5744] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 727.845835][ T5744] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 727.845884][ T5744] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 727.845951][ T5744] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 727.846003][ T5744] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.846065][ T5744] usb 3-1: config 14 interface 57 has no altsetting 0 [ 727.847038][ T5744] usb 3-1: config 14 interface 228 has no altsetting 0 [ 727.983540][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.983741][ T5744] usb 3-1: Product: syz [ 727.983925][ T5744] usb 3-1: Manufacturer: syz [ 727.983965][ T5744] usb 3-1: SerialNumber: syz [ 728.153467][T15043] usb 2-1: Using ep0 maxpacket: 8 [ 728.155645][T15043] usb 2-1: unable to get BOS descriptor or descriptor too short [ 728.155694][T15043] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 728.156708][T15043] usb 2-1: config 4 interface 0 has no altsetting 0 [ 728.161463][T15043] usb 2-1: string descriptor 0 read error: -22 [ 728.161671][T15043] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 728.190897][T15043] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 728.208666][T15043] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 728.209518][T15043] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 728.215575][T15043] usb 2-1: media controller created [ 728.327611][T15043] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 728.364799][T15286] netlink: Failed to add H helper -22 [ 728.364850][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.416642][T15272] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 728.416728][T15272] usb 2-1: dvb_usb_au6610: wlen=4100, aborting [ 728.487318][T15043] zl10353_read_register: readreg error (reg=127, ret==0) [ 728.501221][ T5744] legousbtower 3-1:14.57: interrupt endpoints not found [ 730.662667][ T5744] legousbtower 3-1:14.228: get version request failed: -71 [ 730.662874][ T5744] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 730.750475][ T5744] usb 3-1: USB disconnect, device number 43 [ 731.147315][T15043] usb 2-1: USB disconnect, device number 104 [ 731.268950][ T33] audit: type=1800 audit(1789108564.283:221): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3060" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 731.880541][T14878] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 731.936219][T15325] netlink: Failed to add helper -22 [ 731.936274][T15325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.032322][T14878] usb 3-1: Using ep0 maxpacket: 16 [ 732.034950][T14878] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 732.036142][T14878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.036198][T14878] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.039746][T14878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.039771][T14878] usb 3-1: Product: syz [ 732.039786][T14878] usb 3-1: Manufacturer: syz [ 732.039801][T14878] usb 3-1: SerialNumber: syz [ 732.106118][T14878] usb 3-1: config 0 descriptor?? [ 732.500247][T14878] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 732.550299][T15043] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 732.672627][T14878] usb 4-1: Using ep0 maxpacket: 32 [ 732.674740][T14878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 732.674787][T14878] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 732.675716][T14878] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 732.675740][T14878] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 732.675761][T14878] usb 4-1: config 14 has no interface number 0 [ 732.675778][T14878] usb 4-1: config 14 has no interface number 1 [ 732.675867][T14878] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 732.675892][T14878] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 732.675918][T14878] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 732.675945][T14878] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 732.675972][T14878] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 732.675999][T14878] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.676025][T14878] usb 4-1: config 14 interface 57 has no altsetting 0 [ 732.676044][T14878] usb 4-1: config 14 interface 228 has no altsetting 0 [ 732.680059][T14878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.680085][T14878] usb 4-1: Product: syz [ 732.680101][T14878] usb 4-1: Manufacturer: syz [ 732.680117][T14878] usb 4-1: SerialNumber: syz [ 732.701697][T15043] usb 1-1: Using ep0 maxpacket: 16 [ 732.705198][T15043] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 732.713133][T15043] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.713207][T15043] usb 1-1: config 0 has no interface number 0 [ 732.733536][T15043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.733599][T15043] usb 1-1: Product: syz [ 732.733646][T15043] usb 1-1: Manufacturer: syz [ 732.733687][T15043] usb 1-1: SerialNumber: syz [ 732.769697][T15043] usb 1-1: config 0 descriptor?? [ 732.859606][T15043] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 733.374690][T14878] legousbtower 4-1:14.57: interrupt endpoints not found [ 733.807497][T14878] legousbtower 4-1:14.228: get version request failed: -121 [ 733.809285][T14878] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -121 [ 734.733462][T15043] gspca_spca1528: reg_w err -110 [ 734.750312][T15043] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 734.784759][T15043] usb 1-1: USB disconnect, device number 95 [ 734.910324][ T32] usb 3-1: USB disconnect, device number 44 [ 735.088783][T15362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3076'. [ 735.783943][ T32] usb 4-1: USB disconnect, device number 80 [ 736.077109][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 736.236387][ T9877] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 736.552990][ T9877] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 736.556427][ T9877] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 736.556466][ T9877] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 736.556508][ T9877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 736.740940][ T9877] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 736.741010][ T9877] usb 3-1: Product: syz [ 736.741065][ T9877] usb 3-1: Manufacturer: syz [ 736.741121][ T9877] usb 3-1: SerialNumber: syz [ 736.828338][T15381] loop3: detected capacity change from 0 to 4096 [ 737.963753][ T9877] usb 3-1: config 0 descriptor?? [ 738.228600][ T9877] usb 3-1: selecting invalid altsetting 0 [ 740.212297][ T173] pim6reg: left allmulticast mode [ 740.250505][ T9851] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 740.290023][ T9877] usb 3-1: USB disconnect, device number 45 [ 740.396656][T14446] udevd[14446]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.420399][ T9851] usb 4-1: Using ep0 maxpacket: 16 [ 740.424073][ T9851] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 740.425382][ T9851] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 740.439063][ T9851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.439126][ T9851] usb 4-1: Product: syz [ 740.439172][ T9851] usb 4-1: Manufacturer: syz [ 740.439225][ T9851] usb 4-1: SerialNumber: syz [ 740.493509][ T9851] usb 4-1: config 0 descriptor?? [ 740.581588][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3089'. [ 740.903159][ T173] .` (unregistering): Released all slaves [ 741.015253][ T173] tipc: Left network mode [ 741.159034][T15409] netlink: 'syz.1.3091': attribute type 10 has an invalid length. [ 741.159061][T15409] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3091'. [ 741.543507][ T32] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 741.700256][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 741.703841][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 741.703891][ T32] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 741.704893][ T32] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 741.704917][ T32] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 741.704938][ T32] usb 1-1: config 14 has no interface number 0 [ 741.704963][ T32] usb 1-1: config 14 has no interface number 1 [ 741.705025][ T32] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 741.705055][ T32] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 741.705082][ T32] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 741.705110][ T32] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 741.705156][ T32] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 741.705184][ T32] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.705214][ T32] usb 1-1: config 14 interface 57 has no altsetting 0 [ 741.705233][ T32] usb 1-1: config 14 interface 228 has no altsetting 0 [ 741.707457][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.707485][ T32] usb 1-1: Product: syz [ 741.707502][ T32] usb 1-1: Manufacturer: syz [ 741.707519][ T32] usb 1-1: SerialNumber: syz [ 742.320764][ T32] legousbtower 1-1:14.57: interrupt endpoints not found [ 742.347560][T15426] loop5: detected capacity change from 0 to 164 [ 742.409297][T15426] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 742.791849][ T32] legousbtower 1-1:14.228: get version request failed: -121 [ 742.793267][ T32] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 743.047161][T15430] loop1: detected capacity change from 0 to 4096 [ 744.524348][T14878] usb 4-1: USB disconnect, device number 81 [ 745.608398][ T5744] usb 1-1: USB disconnect, device number 96 [ 745.982533][T15441] loop0: detected capacity change from 0 to 8192 [ 746.117564][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3101'. [ 746.117617][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3101'. [ 746.508685][ T173] hsr_slave_0: left promiscuous mode [ 746.520775][ T173] hsr_slave_1: left promiscuous mode [ 746.577461][T14721] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 746.577486][T14721] FAT-fs (loop0): Filesystem has been set read-only [ 746.579757][ T173] veth1_macvtap: left promiscuous mode [ 746.579826][ T173] veth0_macvtap: left promiscuous mode [ 746.579975][ T173] veth1_vlan: left promiscuous mode [ 746.580076][ T173] veth0_vlan: left promiscuous mode [ 747.332122][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.332185][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.384755][T15463] loop0: detected capacity change from 0 to 4096 [ 748.534823][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3109'. [ 750.843599][T15475] loop0: detected capacity change from 0 to 4096 [ 752.353158][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3112'. [ 752.593303][ T33] audit: type=1804 audit(1789108585.613:222): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3113" name="/newroot/33/file1" dev="fuse" ino=1 res=1 errno=0 [ 752.750215][T15449] tipc: Started in network mode [ 752.750247][T15449] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 752.750407][T15449] tipc: Enabled bearer , priority 0 [ 752.751256][T15461] netlink: 'syz.3.3104': attribute type 11 has an invalid length. [ 752.752019][T15457] tipc: Resetting bearer [ 752.810336][T15457] tipc: Disabling bearer [ 752.860862][T15045] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 753.014970][T15045] usb 1-1: Using ep0 maxpacket: 8 [ 753.034174][T15045] usb 1-1: unable to get BOS descriptor or descriptor too short [ 753.034220][T15045] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 753.035498][T15045] usb 1-1: config 4 interface 0 has no altsetting 0 [ 753.066182][T15045] usb 1-1: string descriptor 0 read error: -22 [ 753.066277][T15045] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 753.103113][T15045] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 753.120717][T15045] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 753.121044][T15045] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 753.121089][T15045] usb 1-1: media controller created [ 753.156799][T15045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 753.263692][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3115'. [ 753.263754][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3115'. [ 753.444255][ T9851] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 753.590247][ T9851] usb 2-1: Using ep0 maxpacket: 32 [ 753.592842][ T9851] usb 2-1: unable to get BOS descriptor or descriptor too short [ 753.592894][ T9851] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 753.594263][ T9851] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 753.594290][ T9851] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 753.594312][ T9851] usb 2-1: config 14 has no interface number 0 [ 753.594330][ T9851] usb 2-1: config 14 has no interface number 1 [ 753.594425][ T9851] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 753.594450][ T9851] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 753.594477][ T9851] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 753.594529][ T9851] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 753.594558][ T9851] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 753.594585][ T9851] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.594612][ T9851] usb 2-1: config 14 interface 57 has no altsetting 0 [ 753.594631][ T9851] usb 2-1: config 14 interface 228 has no altsetting 0 [ 753.597332][ T9851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.597356][ T9851] usb 2-1: Product: syz [ 753.597372][ T9851] usb 2-1: Manufacturer: syz [ 753.597423][ T9851] usb 2-1: SerialNumber: syz [ 755.463840][T15045] zl10353_read_register: readreg error (reg=127, ret==0) [ 755.497208][T15481] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 755.497272][T15481] usb 1-1: dvb_usb_au6610: wlen=4100, aborting [ 756.313219][ T9851] legousbtower 2-1:14.57: interrupt endpoints not found [ 756.329494][T15045] usb 1-1: USB disconnect, device number 97 [ 756.345945][ T9851] legousbtower 2-1:14.228: get version request failed: -71 [ 756.346144][ T9851] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 756.389611][ T9851] usb 2-1: USB disconnect, device number 105 [ 756.527859][T15512] loop3: detected capacity change from 0 to 164 [ 757.788569][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3127'. [ 758.364298][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 758.381488][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 758.382333][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 758.384052][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 758.384724][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 761.064326][ T173] .` (unregistering): Released all slaves [ 761.140013][T15566] MPI: mpi too large (110216 bits) [ 762.034656][T13862] Bluetooth: hci4: command tx timeout [ 762.085089][ T173] tipc: Left network mode [ 762.581609][T15582] loop5: detected capacity change from 0 to 164 [ 763.803552][T15588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3129'. [ 763.803615][T15588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3129'. [ 765.367831][T13862] Bluetooth: hci4: command tx timeout [ 765.811193][ T173] hsr_slave_0: left promiscuous mode [ 765.814387][ T173] hsr_slave_1: left promiscuous mode [ 765.820123][ T173] veth1_macvtap: left promiscuous mode [ 765.827744][ T173] veth0_macvtap: left promiscuous mode [ 765.828663][ T173] veth1_vlan: left promiscuous mode [ 765.828919][ T173] veth0_vlan: left promiscuous mode [ 766.384217][T15610] loop5: detected capacity change from 0 to 4096 [ 767.410426][T13862] Bluetooth: hci4: command tx timeout [ 768.596838][T15627] loop0: detected capacity change from 0 to 8192 [ 769.439123][T15530] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.439291][T15530] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.439424][T15530] bridge_slave_0: entered allmulticast mode [ 769.458762][T15530] bridge_slave_0: entered promiscuous mode [ 769.490285][T13862] Bluetooth: hci4: command tx timeout [ 769.492203][T15530] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.492295][T15530] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.492411][T15530] bridge_slave_1: entered allmulticast mode [ 769.502902][T15530] bridge_slave_1: entered promiscuous mode [ 769.636412][T14721] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 769.636437][T14721] FAT-fs (loop0): Filesystem has been set read-only [ 769.717787][ T173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.879266][T15530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.897877][T15530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.086595][ T173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.208820][T15530] team0: Port device team_slave_0 added [ 770.641911][T15652] loop0: detected capacity change from 0 to 32768 [ 771.402196][ T173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.983568][T15652] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 772.046973][T15652] XFS (loop0): Ending clean mount [ 772.053164][T15652] XFS (loop0): Quotacheck needed: Please wait. [ 772.088222][T15530] team0: Port device team_slave_1 added [ 772.287174][T15656] loop3: detected capacity change from 0 to 8192 [ 772.306464][T15652] XFS (loop0): Quotacheck: Done. [ 772.569858][ T173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.622589][T15530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.622627][T15530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.622656][T15530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.680648][T15530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.680666][T15530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.680693][T15530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.856690][T14907] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 772.856716][T14907] FAT-fs (loop3): Filesystem has been set read-only [ 773.017321][T15530] hsr_slave_0: entered promiscuous mode [ 773.018409][T15530] hsr_slave_1: entered promiscuous mode [ 773.787104][T14721] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 773.912006][T15677] loop3: detected capacity change from 0 to 164 [ 773.957648][T15677] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 774.045480][ T173] .` (unregistering): Released all slaves [ 774.695944][ T173] tipc: Left network mode [ 775.251639][ T32] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 775.577092][ T32] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 775.578346][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.578380][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.578420][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.661776][ T32] usb 4-1: config 0 descriptor?? [ 776.638912][T15712] netlink: 'syz.0.3170': attribute type 10 has an invalid length. [ 776.638940][T15712] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3170'. [ 776.678446][ T32] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 776.678485][ T32] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 776.678514][ T32] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 776.707839][ T32] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 776.707873][ T32] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 776.707902][ T32] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 776.707932][ T32] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 776.749217][ T32] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 776.871497][ T32] cp2112 0003:10C4:EA90.0017: error requesting version [ 776.878548][ T32] cp2112 0003:10C4:EA90.0017: probe with driver cp2112 failed with error -32 [ 777.854930][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 778.151582][T15725] loop5: detected capacity change from 0 to 32768 [ 778.194920][T15725] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 778.198931][ T5744] usb 4-1: USB disconnect, device number 82 [ 778.275682][T15725] XFS (loop5): Ending clean mount [ 778.288963][T15725] XFS (loop5): Quotacheck needed: Please wait. [ 778.303559][T15737] loop2: detected capacity change from 0 to 164 [ 778.347111][T15737] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 779.896301][T15725] XFS (loop5): Quotacheck: Done. [ 779.927568][ T173] hsr_slave_0: left promiscuous mode [ 779.936649][ T173] hsr_slave_1: left promiscuous mode [ 780.001176][ T173] veth1_macvtap: left promiscuous mode [ 780.001218][ T173] veth0_macvtap: left promiscuous mode [ 780.741573][T12518] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 781.401924][T15753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3181'. [ 783.302498][T15766] loop0: detected capacity change from 0 to 4096 [ 784.838640][ T173] IPVS: stop unused estimator thread 0... [ 784.866727][T15530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 784.903639][T15530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.904524][T15530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 784.955762][T15530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.959735][T15530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 785.026642][T15530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.028723][T15530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 785.098427][T15530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 786.603899][T13862] Bluetooth: hci5: command 0x0406 tx timeout [ 786.805806][T15793] tipc: Started in network mode [ 786.805830][T15793] tipc: Node identity 4, cluster identity 4711 [ 786.805844][T15793] tipc: Node number set to 4 [ 786.852957][T15793] tipc: Enabled bearer , priority 0 [ 786.863507][T15793] tipc: Resetting bearer [ 786.926358][T15797] netlink: 'syz.0.3187': attribute type 11 has an invalid length. [ 787.040027][T15793] tipc: Disabling bearer [ 787.112637][T15530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.167257][T15530] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.187856][T15142] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.187944][T15142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.205646][T15142] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.205747][T15142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.213416][ T32] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 787.382362][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 787.385264][ T32] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 787.386497][ T32] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 787.386524][ T32] usb 4-1: config 0 has no interface number 0 [ 787.424672][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.424701][ T32] usb 4-1: Product: syz [ 787.424716][ T32] usb 4-1: Manufacturer: syz [ 787.424733][ T32] usb 4-1: SerialNumber: syz [ 787.455809][ T32] usb 4-1: config 0 descriptor?? [ 787.476670][ T32] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 787.559353][T15802] loop2: detected capacity change from 0 to 32768 [ 787.613476][T15802] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 787.654267][T15802] XFS (loop2): Ending clean mount [ 787.659818][T15802] XFS (loop2): Quotacheck needed: Please wait. [ 787.815055][T15802] XFS (loop2): Quotacheck: Done. [ 788.087648][T15799] tipc: Cannot configure node identity twice [ 788.094635][T15799] tipc: Enabled bearer , priority 1 [ 788.108812][T15798] tipc: Disabling bearer [ 788.327437][ T32] gspca_spca1528: reg_w err -110 [ 788.348931][T15079] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 788.361733][ T32] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 788.415369][T15045] usb 4-1: USB disconnect, device number 83 [ 788.675700][T15821] loop0: detected capacity change from 0 to 8192 [ 788.893929][T15530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.032982][T15530] veth0_vlan: entered promiscuous mode [ 789.071348][T15530] veth1_vlan: entered promiscuous mode [ 789.192419][T15530] veth0_macvtap: entered promiscuous mode [ 789.233013][T15829] loop2: detected capacity change from 0 to 8192 [ 789.362806][T15530] veth1_macvtap: entered promiscuous mode [ 789.792765][T15530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.819459][T15530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.833620][ T84] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.833883][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.834075][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.884579][ T5744] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 789.940771][T15103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.958829][T14721] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 789.958898][T14721] FAT-fs (loop0): Filesystem has been set read-only [ 790.051023][ T5744] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 790.052054][ T5744] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.052088][ T5744] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 790.052118][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0 [ 790.052152][ T5744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.111088][ T5744] usb 6-1: config 0 descriptor?? [ 790.329505][T15142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.329540][T15142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.491579][T15142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.491615][T15142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.535191][T15079] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 790.535244][T15079] FAT-fs (loop2): Filesystem has been set read-only [ 790.771161][ T5744] usbhid 6-1:0.0: can't add hid device: -71 [ 790.771267][ T5744] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 790.774714][ T5744] usb 6-1: USB disconnect, device number 16 [ 790.848054][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 793.267227][T15860] loop5: detected capacity change from 0 to 4096 [ 794.465825][ T33] audit: type=1804 audit(1789108627.483:223): pid=15872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3208" name="/newroot/207/file1" dev="fuse" ino=1 res=1 errno=0 [ 794.536040][T14878] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 794.691526][T14878] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 794.694058][T14878] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 794.694092][T14878] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 794.694121][T14878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 794.703904][T14878] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 794.703988][T14878] usb 4-1: Product: syz [ 794.704031][T14878] usb 4-1: Manufacturer: syz [ 794.704073][T14878] usb 4-1: SerialNumber: syz [ 794.759399][T14878] usb 4-1: config 0 descriptor?? [ 794.797753][T14878] usb 4-1: selecting invalid altsetting 0 [ 794.870410][ T9877] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 795.020261][ T9877] usb 6-1: Using ep0 maxpacket: 8 [ 795.027821][ T9877] usb 6-1: unable to get BOS descriptor or descriptor too short [ 795.027858][ T9877] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 795.030957][ T9877] usb 6-1: config 4 interface 0 has no altsetting 0 [ 795.046643][ T9877] usb 6-1: string descriptor 0 read error: -22 [ 795.046872][ T9877] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 795.105341][T15862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.105649][T15862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.158032][ T9877] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 795.181518][ T9877] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 795.181894][ T9877] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 795.181978][ T9877] usb 6-1: media controller created [ 795.267722][ T9877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 795.295553][ T5744] usb 4-1: USB disconnect, device number 84 [ 795.371272][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 796.584766][ T9877] zl10353_read_register: readreg error (reg=127, ret==0) [ 796.632637][T15873] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 796.735319][T15873] usb 6-1: dvb_usb_au6610: wlen=4100, aborting [ 797.306289][ T5629] usb 6-1: USB disconnect, device number 17 [ 797.728698][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3219'. [ 798.794602][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 799.496895][T15932] loop0: detected capacity change from 0 to 32768 [ 799.547178][T15932] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 799.588655][T15932] XFS (loop0): Ending clean mount [ 799.611370][T15932] XFS (loop0): Quotacheck needed: Please wait. [ 800.006102][T15932] XFS (loop0): Quotacheck: Done. [ 800.441146][T14721] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 800.947710][T15957] TC_ACT_REPEAT abuse ? [ 801.407524][T15970] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3241'. [ 801.420259][ T5629] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 801.605560][ T5629] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 801.616401][ T5629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 801.616617][T15975] overlay: ./sys/module/kvm/parameters/nx_huge_pages is not a directory [ 801.680432][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.680472][ T5629] usb 4-1: Product: syz [ 801.680561][ T5629] usb 4-1: Manufacturer: syz [ 801.680610][ T5629] usb 4-1: SerialNumber: syz [ 801.809743][ T5629] usb 4-1: config 0 descriptor?? [ 801.824537][T15964] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 801.884486][ T5629] hub 4-1:0.0: bad descriptor, ignoring hub [ 801.884642][ T5629] hub 4-1:0.0: probe with driver hub failed with error -5 [ 802.345696][ T5629] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input114 [ 805.260930][T15985] loop1: detected capacity change from 0 to 32768 [ 805.299620][T15985] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 805.361579][T15985] XFS (loop1): Ending clean mount [ 805.368167][T15985] XFS (loop1): Quotacheck needed: Please wait. [ 805.400333][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 805.597753][T15985] XFS (loop1): Quotacheck: Done. [ 805.740567][T13862] Bluetooth: hci1: command 0x0406 tx timeout [ 806.285613][T15530] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 806.683041][ T9877] usb 4-1: USB disconnect, device number 85 [ 807.143984][T16030] fuse: Invalid rootmode [ 808.850809][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.850876][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.950272][ T9851] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 810.101749][ T9851] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 810.102985][ T9851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 810.106244][ T9851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.106261][ T9851] usb 1-1: Product: syz [ 810.106271][ T9851] usb 1-1: Manufacturer: syz [ 810.106282][ T9851] usb 1-1: SerialNumber: syz [ 810.171576][ T9851] usb 1-1: config 0 descriptor?? [ 810.172296][T16049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 810.173601][ T9851] hub 1-1:0.0: bad descriptor, ignoring hub [ 810.173619][ T9851] hub 1-1:0.0: probe with driver hub failed with error -5 [ 810.212139][ T9851] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input115 [ 810.478250][T16058] loop2: detected capacity change from 0 to 256 [ 810.497127][T16058] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 810.497145][T16058] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 810.569608][T16058] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 810.576458][T16058] exFAT-fs (loop2): failed to load alloc-bitmap [ 810.576498][T16058] exFAT-fs (loop2): failed to recognize exfat type [ 811.048023][T16068] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[15079] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[16068] [ 812.055789][ T9877] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 812.200348][ T9877] usb 6-1: Using ep0 maxpacket: 16 [ 812.201489][ T9877] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 812.202934][ T9877] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 812.202968][ T9877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 812.210021][ T9877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.210044][ T9877] usb 6-1: Product: syz [ 812.210058][ T9877] usb 6-1: Manufacturer: syz [ 812.210072][ T9877] usb 6-1: SerialNumber: syz [ 812.323308][ T9877] usb 6-1: config 0 descriptor?? [ 812.352387][ T9877] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 812.352412][ T9877] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 812.451371][T16071] fuse: Bad value for 'rootmode' [ 812.952299][ T9877] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 812.953155][ T9877] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 813.548480][T16082] loop1: detected capacity change from 0 to 32768 [ 813.598226][T16082] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 813.670744][T16082] XFS (loop1): Ending clean mount [ 813.677158][T16082] XFS (loop1): Quotacheck needed: Please wait. [ 813.733230][ T32] usb 1-1: USB disconnect, device number 98 [ 813.780257][ T9877] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 813.780359][ T9877] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 813.826941][T16082] XFS (loop1): Quotacheck: Done. [ 814.486305][T15530] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 814.531093][T16063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.538991][T16063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.560305][ T9877] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 814.582245][ T9877] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 814.582646][ T9877] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 814.583040][ T9877] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 814.583431][ T9877] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 814.622457][ T9877] usb 6-1: USB disconnect, device number 18 [ 814.679197][T14241] udevd[14241]: setting owner of /dev/bus/usb/006/018 to uid=0, gid=0 failed: No such file or directory [ 815.107166][T16111] fuse: Bad value for 'rootmode' [ 816.090350][T16138] overlay: ./sys/module/kvm/parameters/nx_huge_pages is not a directory [ 816.291511][ T5629] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 816.452000][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 816.455151][ T5629] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 816.476871][ T5629] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 816.477211][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 816.560677][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.561164][ T5629] usb 3-1: Product: syz [ 816.561483][ T5629] usb 3-1: Manufacturer: syz [ 816.561718][ T5629] usb 3-1: SerialNumber: syz [ 816.761333][ T5629] usb 3-1: config 0 descriptor?? [ 816.933832][ T5629] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 816.934048][ T5629] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 817.406214][T16152] loop1: detected capacity change from 0 to 8192 [ 817.497817][ T5629] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 817.498961][ T5629] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 818.140264][ T5629] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 818.140292][ T5629] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 818.367769][ T5629] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 818.386493][T16137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.387193][T16137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.944202][ T5629] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 819.944864][ T5629] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 819.945229][ T5629] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 819.945603][ T5629] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 819.994241][T15043] usb 3-1: USB disconnect, device number 46 [ 820.688705][T15530] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 820.688733][T15530] FAT-fs (loop1): Filesystem has been set read-only [ 821.173438][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 822.450903][T16201] loop5: detected capacity change from 0 to 32768 [ 822.493921][T16201] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 822.532390][T16201] XFS (loop5): Ending clean mount [ 822.537473][T16201] XFS (loop5): Quotacheck needed: Please wait. [ 822.693466][T16201] XFS (loop5): Quotacheck: Done. [ 822.948698][T12518] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 823.000278][ T5744] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 823.150333][ T5744] usb 3-1: Using ep0 maxpacket: 16 [ 823.151218][ T5744] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 823.153001][ T5744] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 823.153034][ T5744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 823.156382][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.156412][ T5744] usb 3-1: Product: syz [ 823.156429][ T5744] usb 3-1: Manufacturer: syz [ 823.156446][ T5744] usb 3-1: SerialNumber: syz [ 823.226833][ T5744] usb 3-1: config 0 descriptor?? [ 823.248899][ T5744] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 823.248934][ T5744] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 825.137494][ T5744] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 825.180191][ T5744] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 825.860209][ T5744] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 825.860236][ T5744] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 826.931678][ T5744] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 826.932063][ T5744] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 826.932426][ T5744] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 826.932815][ T5744] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 826.933219][ T5744] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 827.919491][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3326'. [ 828.494720][T15043] usb 3-1: USB disconnect, device number 47 [ 829.132503][T16259] loop3: detected capacity change from 0 to 32768 [ 829.164769][T16259] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 829.259082][T16259] XFS (loop3): Ending clean mount [ 829.266071][T16259] XFS (loop3): Quotacheck needed: Please wait. [ 829.396399][T16259] XFS (loop3): Quotacheck: Done. [ 829.734305][T14907] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 831.443034][T16283] loop2: detected capacity change from 0 to 4096 [ 832.813802][T16291] netlink: 'syz.1.3336': attribute type 10 has an invalid length. [ 832.813839][T16291] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3336'. [ 834.340268][T15043] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 834.495733][T16307] loop2: detected capacity change from 0 to 4096 [ 834.535998][T15043] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 834.548068][T15043] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 834.548103][T15043] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 834.548132][T15043] usb 1-1: config 0 interface 0 has no altsetting 0 [ 834.605670][T15043] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 834.605709][T15043] usb 1-1: Product: syz [ 834.605720][T15043] usb 1-1: Manufacturer: syz [ 834.605731][T15043] usb 1-1: SerialNumber: syz [ 834.644443][T15043] usb 1-1: config 0 descriptor?? [ 834.702842][T15043] usb 1-1: selecting invalid altsetting 0 [ 834.873769][T16304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.874133][T16304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.230683][ T9872] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 835.454438][T16318] loop3: detected capacity change from 0 to 32768 [ 835.520896][T16318] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 835.573110][ T9872] usb 2-1: Using ep0 maxpacket: 8 [ 835.574744][T16318] XFS (loop3): Ending clean mount [ 835.575034][ T9872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 835.604660][T16318] XFS (loop3): Quotacheck needed: Please wait. [ 835.617752][ T9872] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 835.617790][ T9872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 835.617806][ T9872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 835.617824][ T9872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.617842][ T9872] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.617884][ T9872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.886145][T16318] XFS (loop3): Quotacheck: Done. [ 835.965865][T14907] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 835.988922][ T9872] usb 2-1: usb_control_msg returned -32 [ 835.988969][ T9872] usbtmc 2-1:16.0: can't read capabilities [ 836.409757][T15043] usb 2-1: USB disconnect, device number 106 [ 836.417405][T16310] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 837.386679][T15043] usb 1-1: USB disconnect, device number 99 [ 842.220260][T15045] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 842.371866][T15045] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 842.373096][T15045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.373158][T15045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.373200][T15045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.424163][T15045] usb 6-1: config 0 descriptor?? [ 843.416205][T15045] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 843.416314][T15045] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 843.416475][T15045] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 843.418267][T15045] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 843.418412][T15045] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 843.418516][T15045] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 843.418585][T15045] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 843.802576][T15045] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 843.863603][T15045] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 844.160418][ T5744] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 846.040883][ T5744] usb 2-1: Using ep0 maxpacket: 8 [ 846.043968][ T5744] usb 2-1: unable to get BOS descriptor or descriptor too short [ 846.044019][ T5744] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 846.046480][ T5744] usb 2-1: config 4 interface 0 has no altsetting 0 [ 846.066352][ T5744] usb 2-1: string descriptor 0 read error: -22 [ 846.066609][ T5744] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 846.126265][ T5744] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 846.145291][ T5744] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 846.145627][ T5744] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 846.145685][ T5744] usb 2-1: media controller created [ 846.271270][ T5744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.414906][ T5744] zl10353_read_register: readreg error (reg=127, ret==0) [ 846.625448][ T5744] usb 2-1: USB disconnect, device number 107 [ 846.930656][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3375'. [ 847.063064][T15045] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 847.068164][T15045] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -71 [ 847.110530][T15045] usb 6-1: USB disconnect, device number 19 [ 848.901238][ T5744] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 849.050430][ T5744] usb 1-1: Using ep0 maxpacket: 8 [ 849.051183][ T5744] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 849.052387][ T5744] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 849.052439][ T5744] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 849.052465][ T5744] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 849.052491][ T5744] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 849.052517][ T5744] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.052561][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.275625][ T5744] usb 1-1: usb_control_msg returned -32 [ 849.275678][ T5744] usbtmc 1-1:16.0: can't read capabilities [ 849.440299][ T9877] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 849.590295][ T9877] usb 4-1: Using ep0 maxpacket: 16 [ 849.591081][ T9877] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 849.592639][ T9877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.592690][ T9877] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 849.592761][ T9877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.599202][ T9877] usb 4-1: config 0 descriptor?? [ 849.665211][ T9877] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 849.867247][T15043] usb 4-1: USB disconnect, device number 86 [ 850.007208][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3387'. [ 850.637983][T16473] kvm [16472]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa0 [ 851.678542][T16497] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3398'. [ 852.304331][T16503] loop3: detected capacity change from 0 to 4096 [ 853.447638][T16502] tipc: Started in network mode [ 853.447777][T16502] tipc: Node identity 4, cluster identity 4711 [ 853.447827][T16502] tipc: Node number set to 4 [ 853.681610][T16502] tipc: Enabled bearer , priority 0 [ 853.725452][T16502] tipc: Resetting bearer [ 853.774312][T16505] netlink: 'syz.1.3399': attribute type 11 has an invalid length. [ 853.829520][T16502] tipc: Disabling bearer [ 854.543297][T16432] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 854.637689][ T9851] usb 1-1: USB disconnect, device number 100 [ 855.191031][T16541] kvm [16539]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa0 [ 855.564332][T16553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3411'. [ 857.610702][ T5744] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 858.444729][ T5744] usb 3-1: Using ep0 maxpacket: 8 [ 858.469165][ T5744] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 858.547048][ T5744] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 858.547126][ T5744] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.547151][ T5744] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 858.547194][ T5744] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 858.547219][ T5744] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.547263][ T5744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.295844][ T5744] usb 3-1: usb_control_msg returned -32 [ 859.295896][ T5744] usbtmc 3-1:16.0: can't read capabilities [ 859.558527][T16589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3424'. [ 859.640784][ T5744] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 859.827181][ T5744] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 859.839545][ T5744] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 859.839950][ T5744] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 859.839972][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0 [ 859.879186][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 859.879289][ T5744] usb 6-1: Product: syz [ 859.879308][ T5744] usb 6-1: Manufacturer: syz [ 859.883789][ T5744] usb 6-1: SerialNumber: syz [ 859.972784][ T5744] usb 6-1: config 0 descriptor?? [ 860.127571][ T5744] usb 6-1: selecting invalid altsetting 0 [ 860.398261][T16585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.419881][T16585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.076168][T16598] loop0: detected capacity change from 0 to 4096 [ 862.940991][ T5744] usb 6-1: USB disconnect, device number 20 [ 863.456311][T16618] kvm [16617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa0 [ 863.597709][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 863.778415][T16630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3436'. [ 864.218705][T16636] overlayfs: missing 'lowerdir' [ 864.635964][T16567] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 865.254255][ T9851] usb 3-1: USB disconnect, device number 48 [ 866.160292][ T9851] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 866.313329][T16656] loop0: detected capacity change from 0 to 4096 [ 866.339894][ T9851] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 866.411985][ T9851] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 866.412037][ T9851] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.412092][ T9851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 866.412729][ T9851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.576956][ T9851] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 866.576997][ T9851] usb 2-1: Product: syz [ 866.577091][ T9851] usb 2-1: Manufacturer: syz [ 866.966095][ T9851] cdc_wdm 2-1:1.0: skipping garbage [ 866.966201][ T9851] cdc_wdm 2-1:1.0: skipping garbage [ 866.966826][ T9851] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 867.725658][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3448'. [ 868.337421][T16651] loop3: detected capacity change from 0 to 32768 [ 868.519977][T16671] loop0: detected capacity change from 0 to 4096 [ 869.616980][T16651] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop3": -EINTR [ 869.725214][ T9851] usb 2-1: USB disconnect, device number 108 [ 870.258590][T16687] overlayfs: missing 'lowerdir' [ 870.261899][ T5744] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 870.286392][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.286486][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.433672][ T5744] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 870.498160][ T5744] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 870.498244][ T5744] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 870.498315][ T5744] usb 4-1: config 0 interface 0 has no altsetting 0 [ 870.616733][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 870.616826][ T5744] usb 4-1: Product: syz [ 870.616874][ T5744] usb 4-1: Manufacturer: syz [ 870.616934][ T5744] usb 4-1: SerialNumber: syz [ 870.886172][ T5744] usb 4-1: config 0 descriptor?? [ 871.260850][ T5744] usb 4-1: selecting invalid altsetting 0 [ 871.292978][T16681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.293792][T16681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.488368][ T5744] usb 4-1: USB disconnect, device number 87 [ 871.591255][T15201] udevd[15201]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.910355][ T9869] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 872.071914][ T9869] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 872.076209][ T9869] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 872.076242][ T9869] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 872.076269][ T9869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 872.129116][ T9869] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 872.129143][ T9869] usb 2-1: Product: syz [ 872.129159][ T9869] usb 2-1: Manufacturer: syz [ 872.129175][ T9869] usb 2-1: SerialNumber: syz [ 872.158253][ T9869] usb 2-1: config 0 descriptor?? [ 872.199520][ T9869] usb 2-1: selecting invalid altsetting 0 [ 872.459206][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.484688][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.601256][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3466'. [ 874.128330][T16730] tipc: Cannot configure node identity twice [ 874.143806][T16730] tipc: Enabling of bearer rejected, failed to enable media [ 874.145140][T16730] netlink: 'syz.3.3471': attribute type 11 has an invalid length. [ 874.980350][T15043] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 875.042498][ T9851] usb 2-1: USB disconnect, device number 109 [ 875.141456][T15043] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 875.145574][T15043] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 875.145611][T15043] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 875.145642][T15043] usb 3-1: config 0 interface 0 has no altsetting 0 [ 875.204051][T15043] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 875.204082][T15043] usb 3-1: Product: syz [ 875.204099][T15043] usb 3-1: Manufacturer: syz [ 875.204115][T15043] usb 3-1: SerialNumber: syz [ 875.302479][T15043] usb 3-1: config 0 descriptor?? [ 875.328774][T15043] usb 3-1: selecting invalid altsetting 0 [ 875.750437][T15043] usb 3-1: USB disconnect, device number 49 [ 875.821001][T14446] udevd[14446]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.846182][ T9851] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 876.011151][ T9851] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 876.012315][ T9851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 876.012338][ T9851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 876.014387][ T9851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.014407][ T9851] usb 2-1: Product: syz [ 876.014419][ T9851] usb 2-1: Manufacturer: syz [ 876.014430][ T9851] usb 2-1: SerialNumber: syz [ 876.017794][ T9851] usb 2-1: config 0 descriptor?? [ 876.081527][ T9851] hub 2-1:0.0: bad descriptor, ignoring hub [ 876.081556][ T9851] hub 2-1:0.0: probe with driver hub failed with error -5 [ 876.114272][ T9851] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input116 [ 876.794790][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3481'. [ 877.439655][ T9869] usb 2-1: USB disconnect, device number 110 [ 879.951772][ T9851] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 880.210662][ T9851] usb 1-1: Using ep0 maxpacket: 32 [ 880.274898][ T9851] usb 1-1: unable to get BOS descriptor or descriptor too short [ 880.276410][ T9851] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 880.373454][ T9851] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 880.373498][ T9851] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 880.373616][ T9851] usb 1-1: config 14 has no interface number 0 [ 880.374049][ T9851] usb 1-1: config 14 has no interface number 1 [ 880.376793][ T9851] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 880.377840][ T9851] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 880.378170][ T9851] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 880.378842][ T9851] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 880.378886][ T9851] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 880.378927][ T9851] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 880.379728][ T9851] usb 1-1: config 14 interface 57 has no altsetting 0 [ 880.379996][ T9851] usb 1-1: config 14 interface 228 has no altsetting 0 [ 880.645286][ T9851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.645793][ T9851] usb 1-1: Product: syz [ 880.646976][ T9851] usb 1-1: Manufacturer: syz [ 880.647192][ T9851] usb 1-1: SerialNumber: syz [ 881.512682][ T9851] legousbtower 1-1:14.57: interrupt endpoints not found [ 881.552802][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3492'. [ 881.917145][ T9851] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 881.933066][ T9851] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 882.487009][T16825] usb 1-1: LEGO USB Tower reset control request failed [ 882.491096][ T9877] usb 1-1: USB disconnect, device number 101 [ 882.547038][ T9877] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 882.690277][ T9851] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 882.690322][T13862] Bluetooth: hci4: command 0x0406 tx timeout [ 882.760265][ T9869] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 882.842176][ T9851] usb 6-1: Using ep0 maxpacket: 16 [ 882.845143][ T9851] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 882.846219][ T9851] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 882.846237][ T9851] usb 6-1: config 0 has no interface number 0 [ 882.847967][ T9851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.847986][ T9851] usb 6-1: Product: syz [ 882.847997][ T9851] usb 6-1: Manufacturer: syz [ 882.848008][ T9851] usb 6-1: SerialNumber: syz [ 882.887758][T15043] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 882.902002][ T9851] usb 6-1: config 0 descriptor?? [ 882.910202][ T9869] usb 2-1: Using ep0 maxpacket: 16 [ 882.912445][ T9869] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 882.916253][ T9869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.916383][ T9869] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 882.916486][ T9869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.937504][ T9869] usb 2-1: config 0 descriptor?? [ 882.972922][ T9851] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 882.979303][ T9869] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 883.082012][T15043] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 883.083478][T15043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 883.083513][T15043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 883.086290][T15043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.086316][T15043] usb 4-1: Product: syz [ 883.086332][T15043] usb 4-1: Manufacturer: syz [ 883.086348][T15043] usb 4-1: SerialNumber: syz [ 883.150334][T15043] usb 4-1: config 0 descriptor?? [ 883.155989][T15043] hub 4-1:0.0: bad descriptor, ignoring hub [ 883.156018][T15043] hub 4-1:0.0: probe with driver hub failed with error -5 [ 883.185211][T15043] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input117 [ 883.244874][ T9877] usb 2-1: USB disconnect, device number 111 [ 883.496066][T16822] tipc: Started in network mode [ 883.496090][T16822] tipc: Node identity 1000001, cluster identity 4711 [ 883.496105][T16822] tipc: Node number set to 16777217 [ 883.507247][T16822] tipc: Enabled bearer , priority 1 [ 883.551551][T16821] tipc: Resetting bearer [ 883.626031][T16821] tipc: Disabling bearer [ 883.682033][ T9851] gspca_spca1528: reg_w err -110 [ 883.760258][ T9851] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 884.480978][ T9851] usb 6-1: USB disconnect, device number 21 [ 884.961475][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3505'. [ 885.659945][T16854] loop2: detected capacity change from 0 to 4096 [ 888.312114][T15043] usb 4-1: USB disconnect, device number 88 [ 888.655316][T16869] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3510'. [ 890.540347][T16869] netlink: 'syz.3.3510': attribute type 10 has an invalid length. [ 890.626529][T16869] team0: Port device dummy0 added [ 890.956672][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3518'. [ 892.416016][T16924] loop2: detected capacity change from 0 to 4096 [ 894.189005][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3526'. [ 894.611771][ T9851] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 894.715023][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3532'. [ 894.761018][ T9851] usb 3-1: Using ep0 maxpacket: 16 [ 894.769992][ T9851] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 894.784269][ T9851] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 894.784291][ T9851] usb 3-1: config 0 has no interface number 0 [ 894.788981][ T9851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.789001][ T9851] usb 3-1: Product: syz [ 894.789013][ T9851] usb 3-1: Manufacturer: syz [ 894.789024][ T9851] usb 3-1: SerialNumber: syz [ 894.840463][ T9851] usb 3-1: config 0 descriptor?? [ 894.856840][ T9851] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 895.402500][T16937] tipc: Started in network mode [ 895.402526][T16937] tipc: Node identity 1000001, cluster identity 4711 [ 895.402536][T16937] tipc: Node number set to 16777217 [ 895.405037][T16937] tipc: Enabled bearer , priority 1 [ 895.444323][T16935] tipc: Resetting bearer [ 895.590483][ T9851] gspca_spca1528: reg_w err -110 [ 895.610315][ T9851] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 897.115486][T16935] tipc: Disabling bearer [ 897.308370][ T5744] usb 3-1: USB disconnect, device number 50 [ 898.166623][ T33] audit: type=1800 audit(1789108731.183:224): pid=16972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3541" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 899.693376][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3546'. [ 900.551546][T16999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'. [ 900.780296][ T5629] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 900.890226][ T5744] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 900.935657][ T5629] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 900.937194][ T5629] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 900.937228][ T5629] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 900.937248][ T5629] usb 4-1: config 0 interface 0 has no altsetting 0 [ 900.991754][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 900.991785][ T5629] usb 4-1: Product: syz [ 900.991796][ T5629] usb 4-1: Manufacturer: syz [ 900.991808][ T5629] usb 4-1: SerialNumber: syz [ 901.005861][ T5629] usb 4-1: config 0 descriptor?? [ 901.050766][ T5629] usb 4-1: selecting invalid altsetting 0 [ 901.067068][ T5744] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 901.082294][ T5744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 901.082328][ T5744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 901.086441][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.086468][ T5744] usb 3-1: Product: syz [ 901.086499][ T5744] usb 3-1: Manufacturer: syz [ 901.086515][ T5744] usb 3-1: SerialNumber: syz [ 901.155646][ T5744] usb 3-1: config 0 descriptor?? [ 901.167790][ T5744] hub 3-1:0.0: bad descriptor, ignoring hub [ 901.167819][ T5744] hub 3-1:0.0: probe with driver hub failed with error -5 [ 901.193948][ T5744] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input118 [ 901.307788][ T5629] usb 4-1: USB disconnect, device number 89 [ 902.017110][ T33] audit: type=1800 audit(1789108735.033:225): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3554" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 902.523351][ T5744] usb 3-1: USB disconnect, device number 51 [ 902.530997][ T9851] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 902.690322][ T9851] usb 1-1: Using ep0 maxpacket: 16 [ 902.691109][ T9851] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 902.831980][ T9851] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 902.832013][ T9851] usb 1-1: config 0 has no interface number 0 [ 902.836743][ T9851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.836773][ T9851] usb 1-1: Product: syz [ 902.836790][ T9851] usb 1-1: Manufacturer: syz [ 902.836807][ T9851] usb 1-1: SerialNumber: syz [ 904.263651][ T9851] usb 1-1: config 0 descriptor?? [ 904.283089][ T9851] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 904.837518][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 905.000448][ T9851] gspca_spca1528: reg_w err -110 [ 905.031593][ T9851] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 905.129645][T17042] tipc: Enabled bearer , priority 1 [ 905.181397][T17013] tipc: Resetting bearer [ 905.225683][T17013] tipc: Disabling bearer [ 905.415245][ T9851] usb 1-1: USB disconnect, device number 102 [ 905.719862][ T33] audit: type=1800 audit(1789108738.733:226): pid=17052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3566" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 906.051889][ C0] ------------[ cut here ]------------ [ 906.051902][ C0] Looking for class "&ht->mutex" with key xfrm_policy_init.__key.84, but found a different class "key" with the same key [ 906.052061][ C0] WARNING: kernel/locking/lockdep.c:958 at look_up_lock_class+0x8c/0x110, CPU#0: syz.5.3559/17054 [ 906.080780][ C0] Modules linked in: [ 906.084687][ C0] CPU: 0 UID: 0 PID: 17054 Comm: syz.5.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.095627][ C0] Tainted: [L]=SOFTLOCKUP [ 906.099952][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.110012][ C0] RIP: 0010:look_up_lock_class+0x9a/0x110 [ 906.115796][ C0] Code: 00 00 49 3b 46 18 0f 84 82 00 00 00 49 81 3e d0 44 58 94 74 79 48 8d 3d 44 f2 94 04 49 8b 16 49 8b 76 18 48 8b 8b b8 00 00 00 <67> 48 0f b9 3a eb 5d 90 89 f3 e8 67 0a f4 f8 e8 32 5c be f5 48 c7 [ 906.135438][ C0] RSP: 0018:ffffc900000075d0 EFLAGS: 00010002 [ 906.141531][ C0] RAX: ffffffff8c6bb940 RBX: ffffffff9448da70 RCX: ffffffff8c6bb940 [ 906.149510][ C0] RDX: ffffffff9af23440 RSI: ffffffff8c6bb900 RDI: ffffffff907ddb20 [ 906.157495][ C0] RBP: 00000000ffffffff R08: 0000000000000100 R09: 0000000000000004 [ 906.165481][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: 0000000000000246 [ 906.173459][ C0] R13: ffff88802ff25dc0 R14: ffffffff9af232c8 R15: ffffffff9af23440 [ 906.181458][ C0] FS: 00007efd6c5456c0(0000) GS:ffff888124cb7000(0000) knlGS:0000000000000000 [ 906.190406][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 906.197019][ C0] CR2: 0000001b3371aff8 CR3: 000000005b164000 CR4: 00000000003526f0 [ 906.205000][ C0] Call Trace: [ 906.208286][ C0] [ 906.211136][ C0] match_held_lock+0x9a/0x120 [ 906.215827][ C0] lock_is_held_type+0x89/0x150 [ 906.220683][ C0] xfrm_policy_inexact_lookup_rcu+0x60/0x750 [ 906.226765][ C0] xfrm_policy_lookup_bytype+0xb35/0x1840 [ 906.232491][ C0] ? irq_exit_rcu+0x9/0x30 [ 906.236926][ C0] ? xfrm_policy_lookup_bytype+0x147/0x1840 [ 906.242832][ C0] ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10 [ 906.249002][ C0] xfrm_lookup_with_ifid+0x416/0x1db0 [ 906.254440][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 906.260271][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 906.265572][ C0] ? icmp6_dst_alloc+0x39b/0x430 [ 906.270572][ C0] ? icmp6_dst_alloc+0x39b/0x430 [ 906.275516][ C0] ndisc_send_skb+0x42f/0x1650 [ 906.280339][ C0] ? ndisc_send_skb+0x203/0x1650 [ 906.285294][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 906.290509][ C0] ? ndisc_alloc_skb+0x1a6/0x480 [ 906.295492][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 906.300488][ C0] ? lock_acquire+0x115/0x350 [ 906.305203][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 906.310678][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 906.316075][ C0] call_timer_fn+0x18d/0x5f0 [ 906.320715][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 906.326201][ C0] ? call_timer_fn+0xd5/0x5f0 [ 906.330890][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 906.336020][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 906.341260][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 906.346740][ C0] __run_timer_base+0x652/0x8b0 [ 906.351608][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 906.357093][ C0] ? lapic_next_event+0x11/0x20 [ 906.361957][ C0] ? clockevents_program_event+0x491/0x630 [ 906.367806][ C0] run_timer_softirq+0xb7/0x170 [ 906.372672][ C0] handle_softirqs+0x223/0x840 [ 906.377452][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 906.382260][ C0] __irq_exit_rcu+0xcb/0x220 [ 906.386865][ C0] irq_exit_rcu+0x9/0x30 [ 906.391118][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 906.396785][ C0] [ 906.399730][ C0] [ 906.402667][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 906.408694][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x75/0x80 [ 906.414893][ C0] Code: 10 17 00 00 83 fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 8d 7e 01 8b 89 14 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 906.434506][ C0] RSP: 0018:ffffc90003ac7ad8 EFLAGS: 00000283 [ 906.440603][ C0] RAX: ffffffff8be1455a RBX: ffffc90003ac7c40 RCX: 0000000000080000 [ 906.448608][ C0] RDX: ffffc9001f5f3000 RSI: 00000000000012cc RDI: 00000000000012cd [ 906.456621][ C0] RBP: 0000000000000000 R08: ffff88802ff25dc0 R09: 0000000000000006 [ 906.464612][ C0] R10: 0000000000000007 R11: 0000000000000002 R12: ffffffffffffffff [ 906.472590][ C0] R13: dffffc0000000000 R14: ffffffffffffffff R15: dffffc0000000000 [ 906.480579][ C0] ? mas_next_slot+0x2a/0xd70 [ 906.485358][ C0] mas_next_slot+0x2a/0xd70 [ 906.489876][ C0] mas_find+0x6d6/0xcb0 [ 906.494041][ C0] mm_drop_all_locks+0x423/0x520 [ 906.499006][ C0] ? __pfx_mm_drop_all_locks+0x10/0x10 [ 906.504503][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 906.509635][ C0] __mmu_notifier_register+0x4b2/0x5f0 [ 906.515135][ C0] mmu_notifier_register+0x70/0x1d0 [ 906.520356][ C0] kvm_dev_ioctl+0x12fe/0x1770 [ 906.525152][ C0] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 906.530267][ C0] ? __fget_files+0x2a/0x420 [ 906.534889][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 906.539839][ C0] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 906.544955][ C0] __se_sys_ioctl+0xfc/0x170 [ 906.549561][ C0] do_syscall_64+0x166/0x520 [ 906.554160][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.560233][ C0] ? clear_bhb_loop+0x70/0xc0 [ 906.564919][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.570819][ C0] RIP: 0033:0x7efd6b59e159 [ 906.575253][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.594864][ C0] RSP: 002b:00007efd6c545028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 906.603288][ C0] RAX: ffffffffffffffda RBX: 00007efd6b825fa0 RCX: 00007efd6b59e159 [ 906.611268][ C0] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 906.619280][ C0] RBP: 00007efd6b63503b R08: 0000000000000000 R09: 0000000000000000 [ 906.627261][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.635244][ C0] R13: 00007efd6b826038 R14: 00007efd6b825fa0 R15: 00007fffa2bc2cd8 [ 906.643263][ C0] [ 906.646305][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 906.653596][ C0] CPU: 0 UID: 0 PID: 17054 Comm: syz.5.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.664536][ C0] Tainted: [L]=SOFTLOCKUP [ 906.668865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.678929][ C0] Call Trace: [ 906.682218][ C0] [ 906.685078][ C0] vpanic+0x56d/0xa70 [ 906.689109][ C0] ? __pfx__printk+0x10/0x10 [ 906.693734][ C0] ? __pfx_vpanic+0x10/0x10 [ 906.698251][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 906.703551][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 906.708782][ C0] panic+0xc5/0xd0 [ 906.712521][ C0] ? __pfx_panic+0x10/0x10 [ 906.716961][ C0] __warn+0x315/0x4c0 [ 906.720976][ C0] ? look_up_lock_class+0x8c/0x110 [ 906.726100][ C0] ? look_up_lock_class+0x8c/0x110 [ 906.731223][ C0] __report_bug+0x276/0x570 [ 906.735799][ C0] ? look_up_lock_class+0x8c/0x110 [ 906.740918][ C0] ? __pfx___report_bug+0x10/0x10 [ 906.745981][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 906.751218][ C0] report_bug_entry+0x19b/0x290 [ 906.756101][ C0] ? look_up_lock_class+0x9a/0x110 [ 906.761235][ C0] ? look_up_lock_class+0x9f/0x110 [ 906.766349][ C0] handle_bug+0xce/0x200 [ 906.770605][ C0] exc_invalid_op+0x1a/0x50 [ 906.775158][ C0] asm_exc_invalid_op+0x1a/0x20 [ 906.780015][ C0] RIP: 0010:look_up_lock_class+0x9a/0x110 [ 906.785740][ C0] Code: 00 00 49 3b 46 18 0f 84 82 00 00 00 49 81 3e d0 44 58 94 74 79 48 8d 3d 44 f2 94 04 49 8b 16 49 8b 76 18 48 8b 8b b8 00 00 00 <67> 48 0f b9 3a eb 5d 90 89 f3 e8 67 0a f4 f8 e8 32 5c be f5 48 c7 [ 906.805351][ C0] RSP: 0018:ffffc900000075d0 EFLAGS: 00010002 [ 906.811432][ C0] RAX: ffffffff8c6bb940 RBX: ffffffff9448da70 RCX: ffffffff8c6bb940 [ 906.819428][ C0] RDX: ffffffff9af23440 RSI: ffffffff8c6bb900 RDI: ffffffff907ddb20 [ 906.827406][ C0] RBP: 00000000ffffffff R08: 0000000000000100 R09: 0000000000000004 [ 906.835382][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: 0000000000000246 [ 906.843362][ C0] R13: ffff88802ff25dc0 R14: ffffffff9af232c8 R15: ffffffff9af23440 [ 906.851358][ C0] match_held_lock+0x9a/0x120 [ 906.856050][ C0] lock_is_held_type+0x89/0x150 [ 906.860913][ C0] xfrm_policy_inexact_lookup_rcu+0x60/0x750 [ 906.866909][ C0] xfrm_policy_lookup_bytype+0xb35/0x1840 [ 906.872639][ C0] ? irq_exit_rcu+0x9/0x30 [ 906.877075][ C0] ? xfrm_policy_lookup_bytype+0x147/0x1840 [ 906.882986][ C0] ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10 [ 906.889154][ C0] xfrm_lookup_with_ifid+0x416/0x1db0 [ 906.894547][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 906.900367][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 906.905710][ C0] ? icmp6_dst_alloc+0x39b/0x430 [ 906.910681][ C0] ? icmp6_dst_alloc+0x39b/0x430 [ 906.915630][ C0] ndisc_send_skb+0x42f/0x1650 [ 906.920406][ C0] ? ndisc_send_skb+0x203/0x1650 [ 906.925362][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 906.930602][ C0] ? ndisc_alloc_skb+0x1a6/0x480 [ 906.935560][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 906.940507][ C0] ? lock_acquire+0x115/0x350 [ 906.945200][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 906.950676][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 906.956093][ C0] call_timer_fn+0x18d/0x5f0 [ 906.960706][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 906.966178][ C0] ? call_timer_fn+0xd5/0x5f0 [ 906.970870][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 906.975993][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 906.981208][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 906.986678][ C0] __run_timer_base+0x652/0x8b0 [ 906.991550][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 906.996936][ C0] ? lapic_next_event+0x11/0x20 [ 907.001793][ C0] ? clockevents_program_event+0x491/0x630 [ 907.007630][ C0] run_timer_softirq+0xb7/0x170 [ 907.012553][ C0] handle_softirqs+0x223/0x840 [ 907.017340][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 907.022125][ C0] __irq_exit_rcu+0xcb/0x220 [ 907.026727][ C0] irq_exit_rcu+0x9/0x30 [ 907.031004][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 907.036644][ C0] [ 907.039592][ C0] [ 907.042527][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 907.048515][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x75/0x80 [ 907.054681][ C0] Code: 10 17 00 00 83 fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 8d 7e 01 8b 89 14 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 907.074312][ C0] RSP: 0018:ffffc90003ac7ad8 EFLAGS: 00000283 [ 907.080388][ C0] RAX: ffffffff8be1455a RBX: ffffc90003ac7c40 RCX: 0000000000080000 [ 907.088366][ C0] RDX: ffffc9001f5f3000 RSI: 00000000000012cc RDI: 00000000000012cd [ 907.096340][ C0] RBP: 0000000000000000 R08: ffff88802ff25dc0 R09: 0000000000000006 [ 907.104340][ C0] R10: 0000000000000007 R11: 0000000000000002 R12: ffffffffffffffff [ 907.112332][ C0] R13: dffffc0000000000 R14: ffffffffffffffff R15: dffffc0000000000 [ 907.120340][ C0] ? mas_next_slot+0x2a/0xd70 [ 907.125050][ C0] mas_next_slot+0x2a/0xd70 [ 907.129576][ C0] mas_find+0x6d6/0xcb0 [ 907.133771][ C0] mm_drop_all_locks+0x423/0x520 [ 907.138732][ C0] ? __pfx_mm_drop_all_locks+0x10/0x10 [ 907.144207][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 907.149330][ C0] __mmu_notifier_register+0x4b2/0x5f0 [ 907.154800][ C0] mmu_notifier_register+0x70/0x1d0 [ 907.160034][ C0] kvm_dev_ioctl+0x12fe/0x1770 [ 907.164831][ C0] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 907.169961][ C0] ? __fget_files+0x2a/0x420 [ 907.174564][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 907.179517][ C0] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 907.184640][ C0] __se_sys_ioctl+0xfc/0x170 [ 907.189251][ C0] do_syscall_64+0x166/0x520 [ 907.193853][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.199950][ C0] ? clear_bhb_loop+0x70/0xc0 [ 907.204683][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.210602][ C0] RIP: 0033:0x7efd6b59e159 [ 907.215020][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.234648][ C0] RSP: 002b:00007efd6c545028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.243081][ C0] RAX: ffffffffffffffda RBX: 00007efd6b825fa0 RCX: 00007efd6b59e159 [ 907.251068][ C0] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 907.259054][ C0] RBP: 00007efd6b63503b R08: 0000000000000000 R09: 0000000000000000 [ 907.267036][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.275022][ C0] R13: 00007efd6b826038 R14: 00007efd6b825fa0 R15: 00007fffa2bc2cd8 [ 907.283016][ C0] [ 907.286657][ C0] Kernel Offset: disabled [ 907.291041][ C0] Rebooting in 86400 seconds..