last executing test programs: 4.923419553s ago: executing program 1 (id=626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.995483702s ago: executing program 1 (id=631): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101200, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000ac0)={[0x8, 0xd, 0xe200, 0xffffffb4, 0x2, 0x6, 0xb, 0x2, 0x8, 0x3ff, 0x1, 0x100, 0xa, 0x5, 0x3, 0xffffffff, 0xb, 0x101, 0x8df, 0x2, 0xff, 0x7, 0x80000000, 0x6, 0x4, 0x7, 0x401, 0x6, 0x3, 0x51, 0x1000, 0xe, 0x81, 0x8000, 0xfffffff7, 0x5, 0x9, 0x8000, 0x6, 0xffff2ecd, 0x8, 0x75, 0xffff7b80, 0x1, 0x7, 0x173, 0x3, 0x2, 0xc, 0x6, 0x6, 0x2, 0x2, 0x3, 0x10000, 0x7, 0x3, 0x3, 0x53, 0x7fffffff, 0x8000, 0x47c, 0x2, 0x4, 0x401, 0x80000000, 0x9, 0xfffffff7, 0x400, 0x2, 0xaf7, 0x0, 0x5, 0xaa, 0x4, 0x80000000, 0x3, 0x0, 0x8, 0x2, 0x5, 0x10, 0x5, 0x8, 0x4, 0xc0ca, 0x6, 0x1, 0x3, 0x2, 0x57e8, 0x0, 0x4, 0xb7a, 0x1, 0x91, 0xe, 0x1, 0x6, 0x2, 0x4, 0xe3, 0x6, 0x81, 0x9, 0x7, 0xfff, 0x5, 0x98af, 0x0, 0xd, 0x10000, 0xfffffffa, 0x9, 0xfffffffb, 0x1, 0x6, 0x7f, 0xef36, 0xf374, 0x4, 0xcb, 0x3ffc, 0x0, 0x8, 0x2, 0x86b, 0x7, 0x9, 0x5, 0x3, 0x10, 0x2, 0x6, 0x7, 0x3, 0x0, 0x200, 0x4, 0x4, 0xfffffffd, 0x2, 0xfffffffd, 0x9, 0x7, 0x7ff, 0x401, 0x40, 0xa68, 0x9, 0x23d3, 0x5, 0x5, 0xc, 0x1, 0xfffffffd, 0x9, 0x3, 0x6a, 0xd, 0x4, 0x8, 0x8, 0x8000, 0x7, 0x7, 0x5, 0x3, 0x3, 0x0, 0x1, 0x5, 0x55, 0x4, 0x2, 0x6, 0x4, 0x8, 0x7fff, 0x0, 0xffffffff, 0x3, 0x3, 0xce9, 0xdbaf, 0x2, 0x7, 0x9, 0x0, 0x0, 0xfffffffb, 0x3, 0x4, 0x7, 0x1ff, 0x8, 0x2, 0x6, 0xfffffffe, 0x7, 0x6b8, 0x65bc, 0x2, 0xa89, 0x1, 0x2, 0x5, 0xd9dd, 0xffffffff, 0x2, 0x184a, 0x6, 0x7, 0x1, 0x2, 0xffff, 0x4, 0xb31, 0x7f, 0x1000, 0x2, 0x95, 0x7, 0x7, 0x3, 0x7d, 0x7fff, 0x3, 0x6, 0x100, 0x2, 0x7, 0x2, 0xfffffffb, 0x6, 0x4, 0xf, 0x8, 0x6cb5, 0x400, 0xc, 0x9, 0x84000000, 0x6, 0x6db9fddd, 0x62, 0x10, 0x7, 0x0, 0x16c1, 0x1ffc0000, 0x2, 0xffff0001, 0x6, 0x7d64, 0x3, 0x1, 0x9, 0x6, 0x7, 0x8, 0x6, 0x6, 0x4, 0x7ff, 0x0, 0x1, 0x5e, 0x78, 0x0, 0x300000, 0x2, 0x3, 0x146, 0x3, 0x5, 0xffffffff, 0x3, 0xe, 0x432f, 0x81, 0x906, 0x5, 0x5dae89fc, 0x1000, 0x0, 0x3, 0x45, 0xfffffff1, 0x75, 0xfffeffff, 0x6, 0x10000, 0xfffffffd, 0x2000, 0x8001, 0xfffffffc, 0x6, 0x45bc3970, 0x1, 0x0, 0xb, 0xed80, 0x7, 0x9, 0xa3, 0xb1d3, 0x75, 0xffff, 0xffffef61, 0x8786, 0x48, 0xffffffff, 0x1, 0xc, 0x3, 0x9, 0x5, 0x9b, 0xa11, 0x6000, 0x4, 0x0, 0x1, 0x3, 0x1, 0x2, 0x100, 0xa, 0x1, 0x113, 0x9d, 0x8, 0x3, 0xf, 0xe, 0x81, 0x40, 0x0, 0xfff, 0xffffffff, 0x6, 0x7fff, 0x7f, 0x7, 0x8000, 0x4, 0x6, 0x4, 0x7f, 0xd2, 0x7, 0x1, 0x1, 0x8, 0x10000, 0x2, 0x37, 0x1, 0x1, 0xffff, 0x5, 0x18fc, 0x9, 0x8, 0x7f1, 0x8, 0x7, 0x9, 0x4be, 0x9, 0x2, 0x2, 0x4, 0x7f, 0x4, 0x9, 0x9, 0x1, 0x1, 0x7, 0x8, 0x746a0e9b, 0x401, 0x5, 0x2, 0x6, 0x3, 0xf, 0xa, 0x2, 0x1, 0x6, 0x7, 0xf, 0xf3, 0xff, 0x8000, 0x9, 0x0, 0x7, 0x3ff, 0x3, 0xb14e, 0x5, 0x7ff, 0x9, 0x80000001, 0x3, 0x0, 0xebd00000, 0x3, 0x0, 0xca99, 0x80000000, 0x8, 0x1, 0x1, 0x1, 0xfffff9f7, 0x4, 0xfffffffd, 0xc0, 0x30c8, 0x9, 0x8, 0x101, 0xfffffff8, 0x0, 0xffff0001, 0x7, 0x800, 0x2, 0x4, 0xf8, 0xf429, 0x9, 0x5, 0x3, 0x10001, 0x6, 0x81, 0x7, 0x8, 0x5, 0x8000, 0x1ff, 0xb, 0x6, 0x5, 0x80, 0x5, 0x7fff, 0x9, 0x3, 0x0, 0x9, 0x5, 0x6, 0x800, 0xa, 0x8, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffff000, 0xffff, 0x2, 0x7, 0x4, 0x6, 0xa6, 0x1, 0x8, 0x91, 0xaee, 0x4, 0x31c, 0x401, 0x8, 0x3c9, 0xb, 0x800, 0xffff118c, 0x100, 0xf, 0x5, 0x9, 0x9, 0x2, 0x7161, 0x3, 0x2, 0x2, 0x9, 0x9, 0x800, 0x7, 0x3, 0xe0f60000, 0xcf6, 0x9, 0x2, 0x4628, 0x1, 0x4981, 0xfffffffd, 0x8d1a, 0x1ff, 0x35f, 0x200, 0x10, 0x9, 0x6, 0xd, 0x2, 0x6, 0xa, 0x45f6, 0xb4d, 0x80000001, 0x0, 0xfffffff4, 0x3, 0x33, 0x9, 0x0, 0x7fffffff, 0x1000, 0x10001, 0x400, 0xfffffff8, 0x40, 0x4, 0x8, 0x5, 0x3ff, 0x6, 0x401, 0x5, 0x3ff, 0x3, 0x0, 0xfffff79e, 0x5, 0x9, 0x6, 0x2, 0xa, 0xfffffbff, 0xb83b, 0x2b8, 0x602, 0x86a, 0x2a7486a7, 0x7fffffff, 0x6, 0x8000, 0x6, 0x7f, 0x400, 0xf, 0x0, 0x6, 0x7, 0x1c, 0xfffeffff, 0x6, 0x426, 0xf, 0x3ff, 0x5, 0x5, 0x6, 0x1, 0x7, 0x1, 0x1, 0x52, 0x3, 0x8, 0x8, 0x101, 0x5d8, 0x1e, 0x1c, 0xb9ee, 0xfffffff8, 0x52, 0xc, 0x2, 0x400, 0x4, 0xfff, 0x10, 0xa12c, 0x3, 0x8000, 0x5, 0xc, 0x800, 0x0, 0x7f, 0x7, 0x10001, 0x10000, 0x1cb, 0x2, 0x2ef, 0x0, 0x6, 0x78, 0x0, 0x3, 0x5, 0x80000000, 0x3ff, 0x2, 0x800, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffeff, 0x7, 0x4bfd, 0x5, 0xb9, 0x8000, 0x0, 0x5, 0x4, 0x7, 0x4, 0xfffffffd, 0xfffffffa, 0x68, 0x8, 0x1ff, 0x1, 0x47a5, 0x7, 0x8, 0x0, 0x2, 0x7, 0xa, 0xde6, 0x800, 0x8000, 0x8, 0x8, 0x9, 0x8, 0x6, 0x5c2, 0x1, 0x5, 0x3, 0x3, 0x2, 0x4, 0x4, 0x6, 0x6, 0x2, 0x6, 0xfffffffe, 0x1, 0x5, 0x5, 0x1a, 0x1cc, 0x6, 0x9, 0x7cf7b137, 0x5, 0x3, 0x1, 0xfffffffb, 0x400, 0x0, 0x0, 0x0, 0xffffffc0, 0x4a, 0xffff, 0x3, 0x40000000, 0x5, 0x688, 0x7, 0xb, 0xa5, 0xfffff801, 0x9b, 0x1000, 0x6, 0x81, 0x10000, 0x2, 0x2, 0x6, 0x7, 0xfffffffa, 0xb8, 0x9, 0x3, 0x80, 0x5e, 0x7, 0x4, 0xfb5d, 0xff, 0x8, 0x7, 0x1, 0x23, 0xf554, 0x1, 0x3, 0x9, 0xffffffff, 0x3, 0x4, 0x7, 0xaf1, 0xfffffffb, 0x9a57, 0x1, 0x1, 0x6, 0xffff04e9, 0x5, 0x100, 0xffffffff, 0x5, 0x5, 0x4, 0x401, 0xfffffffa, 0x10, 0x4, 0x9, 0x6, 0x101, 0x8, 0x7, 0x23a0b307, 0x4, 0x6, 0xbb79, 0x401, 0x80000000, 0x2, 0x1000, 0x7, 0x8, 0x9, 0x1, 0x200, 0x80000001, 0x1e, 0x7fff, 0x8000, 0x81, 0x6, 0x0, 0x6b42, 0x2, 0x8, 0x7, 0x6, 0xa, 0x9, 0xf92, 0xbb, 0x9, 0xff, 0x12, 0x1, 0x9, 0x100, 0xd4, 0x7fff, 0x7fff, 0x1, 0x1, 0x0, 0x7, 0x1, 0x3ff, 0x3ff, 0x2, 0xe, 0x9, 0x10, 0x7fffffff, 0x82, 0x4, 0xfffffe01, 0x4, 0xff, 0x3, 0x9, 0x6, 0x3, 0x3b, 0x9, 0x50b, 0x1, 0x3, 0xfffff600, 0xffffffff, 0xb, 0x8cd7, 0xe6, 0x800, 0x87f, 0xfffffeff, 0x2fe, 0xe, 0x2800000, 0x0, 0xf, 0xa62c, 0x7, 0x2, 0x2, 0x10, 0x6, 0x5f8, 0x0, 0x5, 0x83a, 0xfffffff9, 0x8001, 0x401, 0x5, 0xffffff94, 0x2, 0xfffff6cb, 0x8, 0xffffffff, 0x9, 0x4, 0x6, 0x2d8a, 0x3, 0x99f, 0x80000000, 0x80, 0x6, 0xffffffff, 0x9, 0x3, 0x8, 0x1, 0x161, 0x1, 0x3, 0xfffffffa, 0x816b, 0x7, 0x2, 0x0, 0xe7, 0x7d, 0x2, 0x7ff, 0x67f, 0x6, 0x5ae00000, 0x36, 0xa03, 0x7fffffff, 0xc, 0xf20, 0x2, 0x5, 0x8, 0x7, 0x378, 0x304, 0x7, 0x5, 0xa, 0x8db7, 0x8, 0x3ff, 0x7fffffff, 0x7, 0x0, 0x5, 0xd, 0x1000, 0x1, 0x4, 0x1000, 0x940c, 0x1, 0x0, 0x4, 0x10001, 0x1, 0x6a9d, 0x1, 0x6e6, 0x3, 0x1, 0x0, 0x5, 0xb, 0x0, 0x1000, 0x2, 0x4, 0x3, 0xbc1e, 0x8, 0x1, 0x8, 0xfffffff9, 0x800, 0x3, 0xe000000, 0x2, 0x3ff, 0xfb0, 0x5, 0xc, 0x7f, 0x7, 0x8, 0x6, 0x775b74de, 0x8, 0x10000, 0x8, 0x4, 0x3, 0xe, 0x100, 0x77c9, 0x2, 0x4, 0x9, 0x18000000, 0x1, 0x7, 0xa, 0x1000, 0x0, 0x7ff, 0xffffffcb, 0x6, 0xd, 0x4, 0x7, 0x9, 0x6, 0xca47, 0x8, 0x7, 0x1c00000, 0x2, 0x8, 0x7, 0x0, 0x7, 0x81, 0x8ee2, 0x1, 0x7fff, 0x5, 0xdefe, 0x1, 0x0, 0x7, 0x8, 0x0, 0x200, 0x1ff, 0x6, 0xffff, 0x5, 0x7, 0x3, 0x80, 0x8, 0x8, 0x7ff, 0x5170d261, 0x7, 0x2, 0x2, 0x1, 0xffff, 0x2, 0x9c, 0x7ff, 0x4, 0x9, 0x9, 0x7, 0x1f9e542f, 0x3, 0x6, 0x81, 0x7059e7b4, 0x3, 0x6, 0x7ff, 0x4, 0x1, 0x1ff, 0x81, 0x2, 0x7, 0x6, 0x8]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="2017f2"], 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 3.357047983s ago: executing program 3 (id=633): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x20, 0x15, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000001200)=ANY=[@ANYBLOB="001367"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.964210915s ago: executing program 4 (id=639): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x103000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0xd, {0x80000003, 0xffffffff, 0x2, 0xfff}}) 2.927313737s ago: executing program 4 (id=640): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x20000000, 0xa, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x884) 2.834421139s ago: executing program 4 (id=641): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 2.736287492s ago: executing program 4 (id=642): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f0000005680)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000056c0)={{{@in=@broadcast, @in=@empty}}, {{@in6=@remote}, 0x0, @in6=@remote}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000005a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x20000000) r2 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x4) add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000001400)={'fscrypt:', @desc3}, &(0x7f0000001440)={0x0, "b6d5ee378a3cfc9279fa2bd96f453cd1f5721be989298ba2f29f0ba43f54155429b1a232c8b3dec0fbe93d7ee6d94a29974f512eeb75403e642e448a9696917b", 0x3f}, 0x48, r2) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000002580)={&(0x7f0000001540)={'crct10dif\x00'}, &(0x7f0000001580)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.574152817s ago: executing program 4 (id=644): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2101, 0x0) pwritev(r2, &(0x7f00000018c0)=[{&(0x7f0000000440)="b6", 0x1}, {0x0}], 0x2, 0x0, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141100001600128009000900626f6e64000000000c00028005000e00060000005a030813edd61487bcfc4e4506060000005b986e77a042dfcddab103669cf24dafdaf9f8b870e09f17c1"], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000540)={r5}) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000040)) 1.898749519s ago: executing program 0 (id=647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x200048d0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.710610035s ago: executing program 0 (id=648): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x9, 0x1, 0x2, 0x0, 0x1}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.505885502s ago: executing program 0 (id=649): socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 1.465429753s ago: executing program 0 (id=650): openat$kvm(0xffffffffffffff9c, 0x0, 0xd40, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b0, 0x0, 0x40003}]}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c"], 0x28}}, 0x0) 1.364644906s ago: executing program 0 (id=651): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x884) 1.112190564s ago: executing program 0 (id=653): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc9, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400082, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth1_to_team\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x0, 0x200, 0xfe, &(0x7f0000000040)="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"}], 0x1}) 922.81997ms ago: executing program 1 (id=655): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 809.970444ms ago: executing program 2 (id=656): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 683.421278ms ago: executing program 2 (id=657): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000003940)) 588.349391ms ago: executing program 2 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 588.218231ms ago: executing program 3 (id=659): socket(0x26, 0x5, 0x41) 528.883413ms ago: executing program 3 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 493.568714ms ago: executing program 2 (id=661): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 443.044125ms ago: executing program 1 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 426.631406ms ago: executing program 4 (id=663): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 328.307509ms ago: executing program 2 (id=664): mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x3}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0x33333000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x2}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x1, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) 264.289181ms ago: executing program 2 (id=665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r4], 0x44}}, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 219.178483ms ago: executing program 3 (id=666): io_setup(0x2, &(0x7f0000000a00)=0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x48000) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x7, 0x7, r1, 0x0, 0x0, 0x9}]) 188.688633ms ago: executing program 1 (id=667): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 76.612607ms ago: executing program 1 (id=668): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) 274.95µs ago: executing program 3 (id=669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1000000}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 0s ago: executing program 3 (id=670): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) kernel console output (not intermixed with test programs): s mode [ 71.164209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.172785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.189914][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.196417][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.212003][ T4192] device veth1_macvtap entered promiscuous mode [ 71.223227][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.233447][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.259594][ T4193] device veth1_vlan entered promiscuous mode [ 71.276346][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.287920][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.300911][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.311931][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.323303][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.341891][ T4198] device veth0_vlan entered promiscuous mode [ 71.356225][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.366577][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.374970][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.383755][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.394078][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.402006][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.435921][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.448476][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.462555][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.473248][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.484564][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.497019][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.506277][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.515718][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.524645][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.550055][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.558066][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.576776][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.586118][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.595400][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.606201][ T4198] device veth1_vlan entered promiscuous mode [ 71.645276][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.649245][ T4193] device veth0_macvtap entered promiscuous mode [ 71.659630][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.685719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.704755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.713955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.722750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.733144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.742680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.755944][ T4193] device veth1_macvtap entered promiscuous mode [ 71.812569][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.828213][ T4198] device veth0_macvtap entered promiscuous mode [ 71.831588][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.843095][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.851569][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.859357][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.871159][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.881330][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.892654][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 71.898826][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 71.905178][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.915369][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.915542][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 71.932092][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 71.938160][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 71.941428][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.958397][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.967085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.975601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.986177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.994269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.002907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.011726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.020759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.030430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.050342][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.058181][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.070400][ T4198] device veth1_macvtap entered promiscuous mode [ 72.077366][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.086940][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.097469][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.113475][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.123687][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.135025][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.145478][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.156691][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.168078][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.214281][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.226712][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.245644][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.255206][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.264470][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.274510][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.287666][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.300315][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.310605][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.322555][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.332625][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.343948][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.354002][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.364792][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.377403][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.399561][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.407485][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.426905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.461859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.493269][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.505524][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.516034][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.526944][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.537545][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.548769][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.561348][ T4275] syz.1.2: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 72.561811][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.587282][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.592941][ T4275] CPU: 0 PID: 4275 Comm: syz.1.2 Not tainted syzkaller #0 [ 72.601436][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.604208][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.621513][ T4275] Call Trace: [ 72.624809][ T4275] [ 72.627786][ T4275] dump_stack_lvl+0x188/0x250 [ 72.632511][ T4275] ? rcu_lock_release+0x5/0x20 [ 72.637308][ T4275] ? show_regs_print_info+0x20/0x20 [ 72.642543][ T4275] ? load_image+0x400/0x400 [ 72.647102][ T4275] warn_alloc+0x243/0x320 [ 72.651462][ T4275] ? zone_watermark_ok_safe+0x240/0x240 [ 72.657024][ T4275] ? __mutex_lock_common+0x465/0x2400 [ 72.662444][ T4275] ? verify_lock_unused+0x140/0x140 [ 72.667677][ T4275] __vmalloc_node_range+0x2b1/0x8b0 [ 72.672903][ T4275] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 72.677965][ T4275] vmalloc+0x75/0x80 [ 72.681884][ T4275] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 72.686936][ T4275] dvb_dvr_do_ioctl+0x12a/0x220 [ 72.691866][ T4275] dvb_usercopy+0x191/0x2b0 [ 72.696398][ T4275] ? dvb_dvr_release+0x3d0/0x3d0 [ 72.701359][ T4275] ? dvb_generic_ioctl+0xb0/0xb0 [ 72.706337][ T4275] ? dvb_dvr_poll+0x230/0x230 [ 72.711049][ T4275] dvb_dvr_ioctl+0x25/0x30 [ 72.715493][ T4275] __se_sys_ioctl+0xfa/0x170 [ 72.720169][ T4275] do_syscall_64+0x4c/0xa0 [ 72.724608][ T4275] ? clear_bhb_loop+0x30/0x80 [ 72.729314][ T4275] ? clear_bhb_loop+0x30/0x80 [ 72.734023][ T4275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.740002][ T4275] RIP: 0033:0x7f3af0d25e59 [ 72.744441][ T4275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.764062][ T4275] RSP: 002b:00007f3aeef7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.772498][ T4275] RAX: ffffffffffffffda RBX: 00007f3af0f9efa0 RCX: 00007f3af0d25e59 [ 72.780506][ T4275] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 72.788544][ T4275] RBP: 00007f3af0dbbd6f R08: 0000000000000000 R09: 0000000000000000 [ 72.796540][ T4275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.804541][ T4275] R13: 00007f3af0f9f038 R14: 00007f3af0f9efa0 R15: 00007fff2add73c8 [ 72.812562][ T4275] [ 72.826029][ T4275] Mem-Info: [ 72.830133][ T4275] active_anon:268 inactive_anon:5588 isolated_anon:0 [ 72.830133][ T4275] active_file:3575 inactive_file:37104 isolated_file:0 [ 72.830133][ T4275] unevictable:2816 dirty:1683 writeback:0 [ 72.830133][ T4275] slab_reclaimable:19921 slab_unreclaimable:90095 [ 72.830133][ T4275] mapped:30154 shmem:1630 pagetables:528 bounce:0 [ 72.830133][ T4275] kernel_misc_reclaimable:0 [ 72.830133][ T4275] free:1401756 free_pcp:9575 free_cma:0 [ 72.874766][ T4275] Node 0 active_anon:1040kB inactive_anon:21844kB active_file:14100kB inactive_file:148416kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:120616kB dirty:6712kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 6144kB writeback_tmp:0kB kernel_stack:10184kB pagetables:2112kB all_unreclaimable? no [ 72.874894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.918990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.928441][ T4275] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 72.943538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.973700][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.983081][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.992626][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.993697][ T4275] Node 0 [ 73.001500][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.013833][ T4275] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.113037][ T4275] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 73.118959][ T4275] Node 0 DMA32 free:1677680kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1040kB inactive_anon:21944kB active_file:14100kB inactive_file:148416kB unevictable:9728kB writepending:6712kB present:3129332kB managed:2606544kB mlocked:8192kB bounce:0kB free_pcp:22084kB local_pcp:3456kB free_cma:0kB [ 73.168879][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.219843][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.227920][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.240176][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.291459][ T4287] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 73.309937][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.320462][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.328821][ T4275] lowmem_reserve[]: 0 0 0 0 0 [ 73.341582][ T4275] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.395115][ T4275] lowmem_reserve[]: 0 0 0 0 0 [ 73.400358][ T4275] Node 1 Normal free:3908240kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:20kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:16628kB local_pcp:9792kB free_cma:0kB [ 73.432811][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.443301][ T4275] lowmem_reserve[]: 0 0 0 0 0 [ 73.448517][ T4275] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 73.450447][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.474020][ T4275] Node 0 DMA32: 3*4kB (UME) 2*8kB (ME) 1*16kB (U) 3*32kB (UME) 1*64kB (M) 3*128kB (UME) 0*256kB 2*512kB (UM) 1*1024kB (M) 1*2048kB (U) 407*4096kB (M) = 1671756kB [ 73.493279][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.512429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.515957][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.538748][ T4275] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 73.551720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.565732][ T4275] Node 1 Normal: 71*4kB (UME) 25*8kB (UME) 26*16kB (UME) 35*32kB (UME) 27*64kB (UE) 16*128kB (UE) 8*256kB (UM) 2*512kB (U) 0*1024kB 2*2048kB (UM) 951*4096kB (ME) = 3908260kB [ 73.596191][ T4275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.607356][ T4275] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.626236][ T4275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.660010][ T4275] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.682561][ T4275] 42425 total pagecache pages [ 73.695611][ T4275] 0 pages in swap cache [ 73.699468][ T4271] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.703326][ T4275] Swap cache stats: add 0, delete 0, find 0/0 [ 73.718880][ T4275] Free swap = 124996kB [ 73.723935][ T4275] Total swap = 124996kB [ 73.728357][ T4275] 2097051 pages RAM [ 73.743564][ T4275] 0 pages HighMem/MovableOnly [ 73.748273][ T4275] 411492 pages reserved [ 73.762760][ T4275] 0 pages cma reserved [ 73.800735][ T4294] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.970542][ T4271] usb 1-1: Using ep0 maxpacket: 16 [ 73.977414][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 74.003817][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 74.033145][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 74.056052][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 74.076565][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 74.112713][ T4294] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.119928][ T4271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.133333][ T4294] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.145735][ T4271] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.359394][ T4271] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 74.372890][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.383019][ T4271] usb 1-1: Product: syz [ 74.387298][ T4271] usb 1-1: Manufacturer: syz [ 74.392550][ T4271] usb 1-1: SerialNumber: syz [ 74.424602][ T4271] usb 1-1: config 0 descriptor?? [ 74.777910][ T4274] qrtr: Invalid version 18 [ 74.835960][ T4315] device syzkaller0 entered promiscuous mode [ 74.852295][ T4315] 0: reclassify loop, rule prio 0, protocol 700 [ 74.939615][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.974585][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.103429][ T4270] usb 1-1: USB disconnect, device number 2 [ 75.199332][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 75.292963][ T4325] kvm: pic: non byte write [ 75.319461][ T13] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 75.335355][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.348228][ T13] usb 3-1: config 0 descriptor?? [ 75.409571][ T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.418681][ T23] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 75.430366][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.439726][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 75.451483][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 75.578790][ T4332] device syzkaller0 entered promiscuous mode [ 75.594829][ T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.608637][ T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.619394][ T13] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 75.627014][ T23] usb 2-1: Product: syz [ 75.632792][ T23] usb 2-1: Manufacturer: syz [ 75.644168][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.674788][ T13] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 75.682298][ T13] usb 3-1: media controller created [ 75.700303][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 75.705734][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 75.718557][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.741088][ T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 75.747054][ T23] cdc_wdm 2-1:1.0: Unknown control protocol [ 75.916820][ T13] DVB: Unable to find symbol dib7000p_attach() [ 75.926491][ T13] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 75.951963][ T4338] device syzkaller0 entered promiscuous mode [ 75.975457][ T23] usb 2-1: USB disconnect, device number 2 [ 76.029317][ T13] rc_core: IR keymap rc-dib0700-rc5 not found [ 76.035449][ T13] Registered IR keymap rc-empty [ 76.071698][ T13] dvb-usb: could not initialize remote control. [ 76.078007][ T13] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 76.111351][ T13] usb 3-1: USB disconnect, device number 2 [ 76.172273][ T13] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 76.320828][ T4348] device syzkaller0 entered promiscuous mode [ 76.363865][ T4348] tipc: Started in network mode [ 76.368922][ T4348] tipc: Node identity f283798522d9, cluster identity 4711 [ 76.384390][ T4348] tipc: Enabled bearer , priority 0 [ 76.421135][ T4347] tipc: Resetting bearer [ 76.477818][ T4347] tipc: Disabling bearer [ 76.578712][ T4357] kvm: pic: non byte write [ 76.839538][ T4370] batman_adv: batadv0: Adding interface: dummy0 [ 76.869311][ T4370] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.952340][ T4370] batman_adv: batadv0: Interface activated: dummy0 [ 76.988526][ T4374] batadv0: mtu less than device minimum [ 77.020488][ T4374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 77.032458][ T4374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 77.044229][ T4374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 77.056135][ T4374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 77.067815][ T4374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 77.079195][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.080117][ T4374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 77.089231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.103887][ T4374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 77.109223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.122834][ T4374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 77.129233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.149197][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.159183][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.169179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.179213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.189194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 77.199192][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 77.222929][ T4376] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 77.760068][ T4392] syz.3.34 sent an empty control message without MSG_MORE. [ 77.981297][ T4396] tipc: Enabled bearer , priority 0 [ 77.996591][ T4396] device syzkaller0 entered promiscuous mode [ 78.016758][ T4396] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 78.038908][ T4396] tipc: Resetting bearer [ 78.075256][ T4395] tipc: Resetting bearer [ 78.107509][ T4395] tipc: Disabling bearer [ 78.159251][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.399340][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 78.519349][ T7] usb 4-1: config 0 has no interfaces? [ 78.524905][ T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.551984][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.576867][ T7] usb 4-1: config 0 descriptor?? [ 78.829578][ T4411] x_tables: duplicate underflow at hook 1 [ 78.858598][ T4390] kvm [4385]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 78.873221][ T4407] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.882357][ T4407] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.891159][ T4407] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.899939][ T4407] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.914333][ T4390] kvm [4385]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 78.930523][ T4390] APIC base relocation is unsupported by KVM [ 78.954573][ T4407] team0: Port device vxlan0 added [ 79.222594][ T4417] device syzkaller0 entered promiscuous mode [ 79.424745][ T4424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 79.530515][ T4424] netlink: 'syz.1.47': attribute type 12 has an invalid length. [ 79.913214][ T4432] tipc: Started in network mode [ 79.924913][ T4432] tipc: Node identity be7ed1e2229b, cluster identity 4711 [ 79.956017][ T4432] tipc: Enabled bearer , priority 0 [ 79.975022][ T4433] device syzkaller0 entered promiscuous mode [ 80.032331][ T4432] tipc: Resetting bearer [ 80.068052][ T4431] tipc: Resetting bearer [ 80.109289][ T4431] tipc: Disabling bearer [ 80.424833][ T4443] device syzkaller0 entered promiscuous mode [ 80.577087][ T4239] usb 4-1: USB disconnect, device number 2 [ 80.867425][ T4455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.59'. [ 80.897195][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.905463][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.026981][ T4461] netlink: 76 bytes leftover after parsing attributes in process `syz.4.59'. [ 81.055674][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.062855][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.070754][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.077855][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.138882][ T4461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.59'. [ 81.172425][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.179687][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.414241][ T1108] cfg80211: failed to load regulatory.db [ 82.002770][ T4476] device syzkaller0 entered promiscuous mode [ 82.339501][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.589271][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 82.709600][ T1111] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.731934][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.738588][ T1111] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 82.779547][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.811824][ T1111] usb 2-1: config 0 descriptor?? [ 82.907364][ T4494] netlink: 60 bytes leftover after parsing attributes in process `syz.4.74'. [ 82.938135][ T4494] netlink: 76 bytes leftover after parsing attributes in process `syz.4.74'. [ 82.964959][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.972147][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.980206][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.987271][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.136213][ T4494] netlink: 60 bytes leftover after parsing attributes in process `syz.4.74'. [ 83.156048][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.163315][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.299945][ T1111] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 83.706557][ T4239] usb 2-1: USB disconnect, device number 3 [ 84.393906][ T4507] device syzkaller0 entered promiscuous mode [ 84.604908][ T26] audit: type=1800 audit(1779607595.678:2): pid=4468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.64" name="bus" dev="ramfs" ino=32642 res=0 errno=0 [ 84.959422][ T4511] process 'syz.1.79' launched './file1' with NULL argv: empty string added [ 85.408481][ T4525] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.552296][ T26] audit: type=1800 audit(1779607596.628:3): pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.81" name="file1" dev="fuse" ino=68719476738 res=0 errno=0 [ 85.569484][ T4239] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 85.653946][ T4532] netlink: 60 bytes leftover after parsing attributes in process `syz.4.85'. [ 85.738242][ T4532] netlink: 76 bytes leftover after parsing attributes in process `syz.4.85'. [ 85.803284][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.810469][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.817814][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.824903][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.954156][ T4532] netlink: 60 bytes leftover after parsing attributes in process `syz.4.85'. [ 86.004070][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.011299][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.079443][ T4239] usb 2-1: not running at top speed; connect to a high speed hub [ 86.339511][ T4239] usb 2-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 86.368515][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.406626][ T4239] usb 2-1: Product: syz [ 86.416266][ T4239] usb 2-1: Manufacturer: syz [ 86.456273][ T4239] usb 2-1: SerialNumber: syz [ 87.200561][ T4542] device syzkaller0 entered promiscuous mode [ 87.795232][ T4552] device syzkaller0 entered promiscuous mode [ 87.848829][ T4552] net_ratelimit: 11 callbacks suppressed [ 87.848842][ T4552] 0: reclassify loop, rule prio 0, protocol 700 [ 88.138235][ T26] audit: type=1800 audit(1779607599.208:4): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.90" name="/" dev="fuse" ino=1 res=0 errno=0 [ 88.623684][ T4561] Zero length message leads to an empty skb [ 88.676426][ T4558] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 88.694466][ T4558] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 88.772822][ T4564] tipc: Started in network mode [ 88.777847][ T4564] tipc: Node identity ae6ab25a8247, cluster identity 4711 [ 88.788122][ T4564] tipc: Enabled bearer , priority 0 [ 88.839790][ T4567] device syzkaller0 entered promiscuous mode [ 88.899121][ T4564] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 88.948037][ T4569] Mem-Info: [ 88.951391][ T4569] active_anon:267 inactive_anon:9842 isolated_anon:0 [ 88.951391][ T4569] active_file:4661 inactive_file:36560 isolated_file:0 [ 88.951391][ T4569] unevictable:768 dirty:685 writeback:0 [ 88.951391][ T4569] slab_reclaimable:20157 slab_unreclaimable:94333 [ 88.951391][ T4569] mapped:31780 shmem:1632 pagetables:676 bounce:0 [ 88.951391][ T4569] kernel_misc_reclaimable:0 [ 88.951391][ T4569] free:1379776 free_pcp:11781 free_cma:0 [ 88.993221][ T4569] Node 0 active_anon:1036kB inactive_anon:38860kB active_file:18444kB inactive_file:146240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127120kB dirty:2740kB writeback:0kB shmem:4452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10384kB pagetables:2704kB all_unreclaimable? no [ 89.024415][ T4569] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 89.053419][ T4569] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 89.079596][ T4569] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 89.085339][ T4569] Node 0 DMA32 free:1592696kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1036kB inactive_anon:38860kB active_file:18444kB inactive_file:146240kB unevictable:1536kB writepending:2740kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:33148kB local_pcp:15196kB free_cma:0kB [ 89.115303][ T4569] lowmem_reserve[]: 0 0 0 0 0 [ 89.120013][ T4569] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 89.145550][ T4569] lowmem_reserve[]: 0 0 0 0 0 [ 89.150294][ T4569] Node 1 Normal free:3911048kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13752kB local_pcp:8504kB free_cma:0kB [ 89.179068][ T4569] lowmem_reserve[]: 0 0 0 0 0 [ 89.183809][ T4569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 89.196496][ T4569] Node 0 DMA32: 22*4kB (UME) 26*8kB (UME) 113*16kB (UME) 114*32kB (UME) 17*64kB (UME) 14*128kB (UME) 4*256kB (UE) 2*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 385*4096kB (M) = 1592760kB [ 89.214423][ T4569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 89.225884][ T4569] Node 1 Normal: 82*4kB (UME) 30*8kB (UME) 27*16kB (UME) 70*32kB (UME) 38*64kB (UME) 21*128kB (UE) 9*256kB (UM) 2*512kB (U) 0*1024kB 2*2048kB (UM) 951*4096kB (ME) = 3911080kB [ 89.243316][ T4569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 89.252857][ T4569] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 89.262344][ T4569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 89.271882][ T4569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 89.281172][ T4569] 42853 total pagecache pages [ 89.285880][ T4569] 0 pages in swap cache [ 89.290063][ T4569] Swap cache stats: add 0, delete 0, find 0/0 [ 89.296120][ T4569] Free swap = 124996kB [ 89.300258][ T4569] Total swap = 124996kB [ 89.304412][ T4569] 2097051 pages RAM [ 89.308200][ T4569] 0 pages HighMem/MovableOnly [ 89.312878][ T4569] 411492 pages reserved [ 89.317035][ T4569] 0 pages cma reserved [ 89.350974][ T4567] tipc: Resetting bearer [ 89.385392][ T4563] tipc: Resetting bearer [ 89.414043][ T4563] tipc: Disabling bearer [ 89.614964][ T4578] device syzkaller0 entered promiscuous mode [ 89.663949][ T4581] x_tables: duplicate underflow at hook 1 [ 89.819717][ T4239] usb 2-1: MIDIStreaming interface descriptor not found [ 90.055193][ T4239] usb 2-1: USB disconnect, device number 4 [ 90.382508][ T4597] kvm: pic: non byte write [ 90.434433][ T4592] udevd[4592]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.644637][ T4602] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 90.664941][ T4602] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.966261][ T4628] qrtr: Invalid version 0 [ 92.106701][ T4624] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 92.146275][ T4624] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 92.224889][ T4635] kvm: pic: non byte write [ 92.455012][ T4644] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 92.494799][ T4644] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 92.635251][ T4653] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 92.675230][ T4653] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 93.429101][ T4680] kvm: pic: non byte write [ 93.540972][ T4688] tipc: Enabled bearer , priority 0 [ 93.551121][ T4688] tipc: Resetting bearer [ 93.560442][ T4687] tipc: Disabling bearer [ 93.801587][ T4588] ODEBUG: Out of memory. ODEBUG disabled [ 93.885787][ T4697] kvm [4691]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 93.898550][ T4697] kvm [4691]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 94.217529][ T4707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.140'. [ 94.577598][ T4716] device syzkaller0 entered promiscuous mode [ 94.846517][ T4588] Set syz1 is full, maxelem 65536 reached [ 94.928350][ T4733] kvm: pic: non byte write [ 95.069963][ T4739] tipc: Enabled bearer , priority 0 [ 95.085270][ T4736] tipc: Resetting bearer [ 95.106026][ T4735] tipc: Disabling bearer [ 95.133231][ T4744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.151'. [ 95.280003][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.315129][ T4753] tipc: Enabled bearer , priority 0 [ 95.338989][ T4753] device syzkaller0 entered promiscuous mode [ 95.377430][ T4753] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 95.451439][ T4753] tipc: Resetting bearer [ 95.471286][ T4752] tipc: Resetting bearer [ 95.504535][ T4752] tipc: Disabling bearer [ 95.750305][ T4776] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 95.802731][ T4773] device syzkaller0 entered promiscuous mode [ 95.818174][ T4776] device syzkaller0 entered promiscuous mode [ 95.889533][ T1108] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 95.915826][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.933551][ T1108] usb 1-1: Product: syz [ 95.944146][ T1108] usb 1-1: Manufacturer: syz [ 95.949152][ T1108] usb 1-1: SerialNumber: syz [ 96.002798][ T4775] ALSA: mixer_oss: invalid OSS volume '' [ 96.017906][ T1108] usb 1-1: config 0 descriptor?? [ 96.045134][ T4780] device syzkaller0 entered promiscuous mode [ 96.469218][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.557242][ T4792] tipc: Enabled bearer , priority 0 [ 96.571102][ T4792] tipc: Resetting bearer [ 96.589767][ T4791] tipc: Disabling bearer [ 96.709282][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 96.829616][ T23] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 96.830010][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.836429][ T23] usb 4-1: config 0 descriptor?? [ 96.899844][ T4809] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 96.922589][ T4809] device syzkaller0 entered promiscuous mode [ 96.986836][ T4811] device syzkaller0 entered promiscuous mode [ 97.139265][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.149454][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 97.189588][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.211441][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 97.218634][ T23] usb 4-1: media controller created [ 97.247334][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.265225][ T1108] usb 1-1: ATUSB: AT86RF231 version 17 [ 97.317343][ T23] DVB: Unable to find symbol dib7000p_attach() [ 97.323736][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 97.359312][ T7] usb 5-1: device descriptor read/64, error -71 [ 97.414240][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 97.427382][ T23] Registered IR keymap rc-empty [ 97.440845][ T23] dvb-usb: could not initialize remote control. [ 97.458802][ T23] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 97.469359][ T1108] usb 1-1: atusb_control_msg: req 0x00 val 0x0 idx 0x0, error -71 [ 97.484138][ T1108] usb 1-1: Firmware version (0.0) predates our first public release. [ 97.508556][ T1108] usb 1-1: Please update to version 0.2 or newer [ 97.509958][ T23] usb 4-1: USB disconnect, device number 3 [ 97.549437][ T1108] usb 1-1: atusb_probe: initialization failed, error = -71 [ 97.557037][ T1108] atusb: probe of 1-1:0.0 failed with error -71 [ 97.591922][ T23] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 97.600865][ T1108] usb 1-1: USB disconnect, device number 3 [ 97.638476][ T4822] ALSA: mixer_oss: invalid OSS volume '' [ 97.651232][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.677786][ T4830] device syzkaller0 entered promiscuous mode [ 97.869296][ T7] usb 5-1: device descriptor read/64, error -71 [ 97.925651][ T4839] netlink: 52 bytes leftover after parsing attributes in process `syz.3.187'. [ 97.936723][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.944178][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.982622][ T4839] netlink: 76 bytes leftover after parsing attributes in process `syz.3.187'. [ 98.000687][ T7] usb usb5-port1: attempt power cycle [ 98.014155][ T4839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.021395][ T4839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.029138][ T4839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.036292][ T4839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.075548][ T4839] netlink: 52 bytes leftover after parsing attributes in process `syz.3.187'. [ 98.105536][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.113162][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.149781][ T4842] device syzkaller0 entered promiscuous mode [ 98.163565][ T4846] device syzkaller0 entered promiscuous mode [ 98.439219][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.539600][ T4862] kvm: pic: non byte write [ 98.559403][ T7] usb 5-1: device descriptor read/8, error -71 [ 98.657092][ T4867] device syzkaller0 entered promiscuous mode [ 98.854692][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.960046][ T7] usb 5-1: device descriptor read/8, error -71 [ 99.100357][ T7] usb usb5-port1: unable to enumerate USB device [ 99.139263][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.399360][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 99.542975][ T1108] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 99.610401][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.669295][ T1108] usb 4-1: config 0 descriptor?? [ 99.682195][ T4905] device syzkaller0 entered promiscuous mode [ 99.789321][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.811301][ T4907] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 99.861554][ T4907] device syzkaller0 entered promiscuous mode [ 99.929362][ T1108] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 99.939461][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.972332][ T1108] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 100.002928][ T4912] kvm: pic: non byte write [ 100.007119][ T1108] usb 4-1: media controller created [ 100.039345][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 100.052935][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.163047][ T23] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 100.196997][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.208392][ T4924] device syzkaller0 entered promiscuous mode [ 100.228048][ T23] usb 2-1: config 0 descriptor?? [ 100.256946][ T1108] DVB: Unable to find symbol dib7000p_attach() [ 100.271316][ T1108] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 100.399301][ T1108] rc_core: IR keymap rc-dib0700-rc5 not found [ 100.409252][ T1108] Registered IR keymap rc-empty [ 100.430555][ T1108] dvb-usb: could not initialize remote control. [ 100.444384][ T1108] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 100.489299][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 100.520693][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.539518][ T1108] usb 4-1: USB disconnect, device number 4 [ 100.582629][ T1108] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 100.599470][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 100.616119][ T23] usb 2-1: media controller created [ 100.677832][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.828078][ T23] DVB: Unable to find symbol dib7000p_attach() [ 100.844557][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 100.939241][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 100.962514][ T23] Registered IR keymap rc-empty [ 100.967566][ T23] dvb-usb: could not initialize remote control. [ 100.984249][ T23] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 101.043486][ T23] usb 2-1: USB disconnect, device number 5 [ 101.099973][ T23] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 101.143314][ T1108] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.293759][ T4947] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 101.332547][ T4947] device syzkaller0 entered promiscuous mode [ 101.363011][ T4947] tipc: Started in network mode [ 101.369247][ T1108] usb 4-1: device descriptor read/64, error -71 [ 101.399262][ T4947] tipc: Node identity 22325c7511d2, cluster identity 4711 [ 101.441392][ T4947] tipc: Enabled bearer , priority 0 [ 101.486619][ T4946] tipc: Resetting bearer [ 101.560201][ T4946] tipc: Disabling bearer [ 101.639217][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.739852][ T4959] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.749205][ T4959] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.758486][ T4959] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.767282][ T4959] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.776342][ T4963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'. [ 101.785393][ T4959] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 101.849502][ T1108] usb 4-1: device descriptor read/64, error -71 [ 101.883341][ T4968] netlink: 76 bytes leftover after parsing attributes in process `syz.2.227'. [ 101.979641][ T1108] usb usb4-port1: attempt power cycle [ 102.069267][ T1111] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.269296][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.299251][ T4239] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.309409][ T1111] usb 5-1: Using ep0 maxpacket: 16 [ 102.419346][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.429529][ T1111] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.440742][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.447369][ T1111] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 102.456505][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.466452][ T1111] usb 5-1: config 0 descriptor?? [ 102.479324][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 102.519389][ T1108] usb 4-1: device descriptor read/8, error -71 [ 102.539299][ T4239] usb 3-1: Using ep0 maxpacket: 32 [ 102.659283][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 102.659676][ T4239] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 102.672241][ T13] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 102.689368][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.696233][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.705553][ T13] usb 2-1: config 0 descriptor?? [ 102.716236][ T4239] usb 3-1: config 0 descriptor?? [ 102.729605][ T4973] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 102.799411][ T1108] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 102.889475][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.897515][ T7] usb 1-1: config 0 has no interface number 0 [ 102.919328][ T1108] usb 4-1: device descriptor read/8, error -71 [ 102.951504][ T1111] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 102.979390][ T4239] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 102.989905][ T4239] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.023552][ T4239] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 103.043049][ T4239] usb 3-1: media controller created [ 103.049776][ T1108] usb usb4-port1: unable to enumerate USB device [ 103.065811][ T4239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.106787][ T7] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 103.116366][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.120577][ T4239] DVB: Unable to find symbol dib7000p_attach() [ 103.125647][ T7] usb 1-1: Product: syz [ 103.134996][ T7] usb 1-1: Manufacturer: syz [ 103.139669][ T7] usb 1-1: SerialNumber: syz [ 103.145238][ T4239] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 103.163986][ T7] usb 1-1: config 0 descriptor?? [ 103.185157][ T13] hid (null): bogus close delimiter [ 103.196418][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.203926][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.213763][ T7] usb 1-1: selecting invalid altsetting 1 [ 103.219592][ T4239] rc_core: IR keymap rc-dib0700-rc5 not found [ 103.220196][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.229857][ T4239] Registered IR keymap rc-empty [ 103.235744][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 103.244494][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 103.250985][ T4239] dvb-usb: could not initialize remote control. [ 103.254224][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.259832][ T4239] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 103.272814][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.289044][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.297645][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.304178][ T4239] usb 3-1: USB disconnect, device number 3 [ 103.333021][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.345467][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.354287][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.364425][ T4239] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 103.371931][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.389343][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.396869][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.407220][ T7] DVB: Unable to find symbol stv0299_attach() [ 103.423524][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 103.432484][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.447242][ T4981] netlink: 6 bytes leftover after parsing attributes in process `syz.0.232'. [ 103.450246][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.479542][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.488874][ T7] DVB: Unable to find symbol tda8083_attach() [ 103.495289][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 103.503590][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.515698][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.528374][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.547926][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.555560][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.570927][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.578411][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.586228][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.601829][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.611756][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.621265][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.628641][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.637641][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.647280][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.654911][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.662502][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.669975][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.677366][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.684861][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.693829][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.701328][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.708742][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.716228][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.723700][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.749218][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.756630][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.784986][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.823414][ T4239] usb 1-1: USB disconnect, device number 4 [ 103.829279][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.829307][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.829331][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.829354][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.829394][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.829417][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.829440][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.974930][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 103.987744][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.014607][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.031508][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.043531][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.051326][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.059320][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.079398][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.086820][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.137488][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.155709][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.180980][ T5008] device syzkaller0 entered promiscuous mode [ 104.187213][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.200451][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.209700][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.217110][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.224977][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.232638][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.240842][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.248540][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.256511][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.264641][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.273247][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.280970][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.288532][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.296329][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.304704][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.313903][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.321679][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.329331][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.336910][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.344691][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.352495][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.360146][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.371432][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.386618][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.401877][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.420379][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.435862][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.452354][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.470974][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.486159][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.502560][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.519756][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.534965][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.551495][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.574798][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.592354][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.607708][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.626269][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.628129][ T5016] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.643276][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.679207][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.697034][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.704833][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.712470][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.721406][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.728951][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.736414][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.744129][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.751659][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.759336][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.766742][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.775403][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.786135][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.794628][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.806625][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.815163][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.830189][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.837731][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.850224][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.857744][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.868519][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.878069][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.889132][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.898840][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.909718][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.917124][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.926718][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.934455][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.942051][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.949588][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.957097][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.964714][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.972403][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.980001][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.987545][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 104.995089][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.002784][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.010237][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.017821][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.027066][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.034660][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.042112][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.049807][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.057215][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.064872][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.072335][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.081345][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.088747][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.099580][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.106994][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.118734][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.129418][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.136837][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.149815][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.157343][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.170332][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.177878][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.189560][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.196968][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.208453][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.217011][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.229883][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.237288][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.249093][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.258425][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.269028][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.277416][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.287980][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.296227][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.306415][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.314684][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.325207][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.334142][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.341677][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.349088][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.356540][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.363973][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.371407][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.378795][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.386230][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.393654][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.401102][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.408489][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 105.415923][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0xd [ 105.423379][ T13] hid-generic 0003:0B05:1ABE.0003: unknown main item tag 0x5 [ 105.430829][ T13] hid-generic 0003:0B05:1ABE.0003: bogus close delimiter [ 105.439304][ T13] hid-generic 0003:0B05:1ABE.0003: item 0 1 2 10 parsing failed [ 105.447312][ T13] hid-generic: probe of 0003:0B05:1ABE.0003 failed with error -22 [ 105.462829][ T13] usb 2-1: USB disconnect, device number 6 [ 105.479856][ T7] usb 5-1: USB disconnect, device number 6 [ 105.805770][ T5022] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 105.813815][ T5022] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 105.847470][ T5031] device syzkaller0 entered promiscuous mode [ 105.975540][ T5038] netlink: 76 bytes leftover after parsing attributes in process `syz.0.249'. [ 107.677394][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.684814][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.178096][ T5040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.202687][ T5040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.666496][ T5040] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.676412][ T5040] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.685383][ T5040] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.694493][ T5040] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.822610][ T5040] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.831673][ T5040] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.840664][ T5040] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.849910][ T5040] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.879966][ T5040] syz.2.250 (5040) used greatest stack depth: 19832 bytes left [ 109.028891][ T5097] device syzkaller0 entered promiscuous mode [ 109.359651][ T5114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.267'. [ 109.849357][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.122370][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 110.279710][ T1108] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 110.293868][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.311543][ T1108] usb 1-1: config 0 descriptor?? [ 110.345574][ T5147] tipc: Enabled bearer , priority 0 [ 110.353553][ T5147] device syzkaller0 entered promiscuous mode [ 110.362125][ T5147] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 110.397392][ T5147] tipc: Resetting bearer [ 110.413610][ T5146] tipc: Resetting bearer [ 110.470922][ T5146] tipc: Disabling bearer [ 110.490635][ T5151] netlink: 88 bytes leftover after parsing attributes in process `syz.1.281'. [ 110.506895][ T5151] netlink: 76 bytes leftover after parsing attributes in process `syz.1.281'. [ 110.527150][ T5151] netlink: 88 bytes leftover after parsing attributes in process `syz.1.281'. [ 110.579500][ T1108] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 110.600182][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.660535][ T1108] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 110.688071][ T1108] usb 1-1: media controller created [ 110.736676][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.872972][ T5165] device syzkaller0 entered promiscuous mode [ 110.920599][ T1108] DVB: Unable to find symbol dib7000p_attach() [ 110.934069][ T1108] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 111.079267][ T1108] rc_core: IR keymap rc-dib0700-rc5 not found [ 111.087020][ T1108] Registered IR keymap rc-empty [ 111.114418][ T1108] dvb-usb: could not initialize remote control. [ 111.131110][ T1108] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 111.204907][ T1108] usb 1-1: USB disconnect, device number 5 [ 111.313346][ T1108] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 111.362934][ T5177] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 111.372018][ T5177] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.525873][ T5190] tipc: Started in network mode [ 111.549388][ T5190] tipc: Node identity d62ad6bfcbd9, cluster identity 4711 [ 111.558415][ T5190] tipc: Enabled bearer , priority 0 [ 111.573840][ T5190] device syzkaller0 entered promiscuous mode [ 111.604837][ T5190] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 111.643262][ T5190] tipc: Resetting bearer [ 111.673769][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 111.698884][ T5188] tipc: Resetting bearer [ 111.730281][ T5188] tipc: Disabling bearer [ 111.858919][ T5200] device syzkaller0 entered promiscuous mode [ 112.157424][ T5211] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 112.200058][ T5211] tipc: Enabled bearer , priority 0 [ 112.247309][ T5210] tipc: Disabling bearer [ 112.443098][ T2305] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.619224][ T21] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 112.709272][ T2305] usb 3-1: Using ep0 maxpacket: 16 [ 112.756147][ T5240] device syzkaller0 entered promiscuous mode [ 112.829302][ T2305] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 112.838065][ T2305] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 112.859029][ T2305] usb 3-1: config 166 has no interface number 0 [ 112.867883][ T2305] usb 3-1: config 166 has no interface number 1 [ 112.902444][ T2305] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 112.914142][ T2305] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 112.926892][ T2305] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 112.938449][ T2305] usb 3-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 112.949695][ T2305] usb 3-1: config 166 interface 177 has no altsetting 0 [ 112.956752][ T2305] usb 3-1: config 166 interface 34 has no altsetting 0 [ 113.009563][ T21] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.027844][ T21] usb 5-1: config 0 has no interface number 0 [ 113.119555][ T2305] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 113.132103][ T5250] netlink: 88 bytes leftover after parsing attributes in process `syz.1.317'. [ 113.142362][ T5250] netlink: 76 bytes leftover after parsing attributes in process `syz.1.317'. [ 113.152677][ T2305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.152765][ T5250] netlink: 88 bytes leftover after parsing attributes in process `syz.1.317'. [ 113.185872][ T2305] usb 3-1: Product: syz [ 113.190468][ T21] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 113.207865][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.218092][ T2305] usb 3-1: Manufacturer: syz [ 113.230228][ T2305] usb 3-1: SerialNumber: syz [ 113.237387][ T21] usb 5-1: Product: syz [ 113.256800][ T21] usb 5-1: Manufacturer: syz [ 113.269852][ T21] usb 5-1: SerialNumber: syz [ 113.285040][ T5254] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 113.305640][ T21] usb 5-1: config 0 descriptor?? [ 113.311061][ T5254] tipc: Enabled bearer , priority 0 [ 113.323524][ T5253] tipc: Disabling bearer [ 113.351770][ T21] usb 5-1: selecting invalid altsetting 1 [ 113.358192][ T21] dvb_ttusb_budget: ttusb_init_controller: error [ 113.368934][ T21] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 113.437530][ T21] DVB: Unable to find symbol stv0299_attach() [ 113.486497][ T21] DVB: Unable to find symbol tda8083_attach() [ 113.495185][ T21] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 113.588931][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 113.592505][ T2305] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 113.606469][ T5221] netlink: 6 bytes leftover after parsing attributes in process `syz.4.306'. [ 113.819921][ T2305] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 113.824486][ T5277] device syzkaller0 entered promiscuous mode [ 113.866428][ T5281] bridge0: port 3(batadv0) entered blocking state [ 113.873193][ T5281] bridge0: port 3(batadv0) entered disabled state [ 113.881381][ T5281] device batadv0 entered promiscuous mode [ 113.887577][ T5281] bridge0: port 3(batadv0) entered blocking state [ 113.894086][ T5281] bridge0: port 3(batadv0) entered forwarding state [ 113.949450][ T2305] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 113.956249][ T2305] usb 3-1: No valid video chain found. [ 113.968905][ T4205] usb 5-1: USB disconnect, device number 7 [ 113.988436][ T2305] usb 3-1: USB disconnect, device number 4 [ 114.039406][ T4285] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 114.048924][ T4285] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 114.452659][ T5290] netlink: 88 bytes leftover after parsing attributes in process `syz.2.330'. [ 114.462570][ T5290] netlink: 76 bytes leftover after parsing attributes in process `syz.2.330'. [ 114.474722][ T5290] netlink: 88 bytes leftover after parsing attributes in process `syz.2.330'. [ 114.781624][ T5298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.333'. [ 115.223376][ T5316] kvm [5306]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 115.235088][ T5316] kvm [5306]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 115.410952][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.669320][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 115.724186][ T5325] device syzkaller0 entered promiscuous mode [ 115.782183][ T5329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.345'. [ 115.801308][ T1108] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 115.815187][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.842812][ T1108] usb 5-1: config 0 descriptor?? [ 116.129457][ T1108] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 116.147902][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.229541][ T1108] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 116.236761][ T1108] usb 5-1: media controller created [ 116.299864][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.483389][ T5354] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.493059][ T5354] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.502067][ T5354] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.510863][ T5354] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.525430][ T1108] DVB: Unable to find symbol dib7000p_attach() [ 116.535485][ T1108] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 116.629272][ T5354] team0: Port device vxlan0 added [ 116.689370][ T1108] rc_core: IR keymap rc-dib0700-rc5 not found [ 116.696241][ T1108] Registered IR keymap rc-empty [ 116.711915][ T1108] dvb-usb: could not initialize remote control. [ 116.726478][ T1108] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 116.782613][ T1108] usb 5-1: USB disconnect, device number 8 [ 116.816409][ T5362] usb usb8: usbfs: process 5362 (syz.2.358) did not claim interface 0 before use [ 116.864436][ T5363] device syzkaller0 entered promiscuous mode [ 116.872936][ T1108] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 117.128840][ T5372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.363'. [ 117.869390][ T4178] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.159871][ T4178] usb 4-1: Using ep0 maxpacket: 32 [ 118.299587][ T4178] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 118.318944][ T4178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.362791][ T4178] usb 4-1: config 0 descriptor?? [ 118.649229][ T21] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 118.663479][ T4178] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 118.684483][ T4178] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.727346][ T4178] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 118.759343][ T4178] usb 4-1: media controller created [ 118.826846][ T4178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.909860][ T4178] DVB: Unable to find symbol dib7000p_attach() [ 118.916255][ T4178] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 119.009763][ T21] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.032682][ T4178] rc_core: IR keymap rc-dib0700-rc5 not found [ 119.038961][ T21] usb 5-1: config 0 has no interface number 0 [ 119.040066][ T4178] Registered IR keymap rc-empty [ 119.081872][ T4178] dvb-usb: could not initialize remote control. [ 119.134800][ T4178] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 119.195795][ T4178] usb 4-1: USB disconnect, device number 9 [ 119.200396][ T21] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 119.211114][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.219246][ T21] usb 5-1: Product: syz [ 119.223822][ T21] usb 5-1: Manufacturer: syz [ 119.228536][ T21] usb 5-1: SerialNumber: syz [ 119.274839][ T21] usb 5-1: config 0 descriptor?? [ 119.283621][ T4178] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 119.331402][ T21] usb 5-1: selecting invalid altsetting 1 [ 119.337635][ T21] dvb_ttusb_budget: ttusb_init_controller: error [ 119.344550][ T21] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 119.471781][ T21] DVB: Unable to find symbol stv0299_attach() [ 119.505311][ T21] DVB: Unable to find symbol tda8083_attach() [ 119.511887][ T21] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 119.537846][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 119.560205][ T5424] netlink: 6 bytes leftover after parsing attributes in process `syz.4.379'. [ 119.697428][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 119.850273][ T21] usb 5-1: USB disconnect, device number 9 [ 120.015588][ T5486] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 5486 comm: syz.2.396) [ 120.030945][ T26] audit: type=1800 audit(1779607631.108:5): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.396" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=39553 res=0 errno=0 [ 120.062379][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.391875][ T5493] tipc: Enabled bearer , priority 0 [ 120.448544][ T5495] device syzkaller0 entered promiscuous mode [ 120.495673][ T5493] tipc: Resetting bearer [ 120.514426][ T5490] tipc: Resetting bearer [ 120.540071][ T5490] tipc: Disabling bearer [ 120.821409][ T5511] device syzkaller0 entered promiscuous mode [ 120.967819][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 120.972526][ T5514] tipc: Enabled bearer , priority 0 [ 120.998655][ T5514] device syzkaller0 entered promiscuous mode [ 121.077550][ T5520] tipc: Resetting bearer [ 121.108124][ T5513] tipc: Resetting bearer [ 121.114225][ T1108] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 121.161472][ T5513] tipc: Disabling bearer [ 121.359238][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 121.479427][ T1108] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 121.505873][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.519228][ T4178] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 121.538596][ T1108] usb 4-1: config 0 descriptor?? [ 121.723195][ T5549] tipc: Enabled bearer , priority 0 [ 121.750936][ T5549] device syzkaller0 entered promiscuous mode [ 121.805577][ T5549] tipc: Resetting bearer [ 121.819509][ T1108] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 121.839049][ T5548] tipc: Resetting bearer [ 121.845857][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.879452][ T4178] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.890426][ T1108] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 121.897775][ T4178] usb 2-1: config 0 has no interface number 0 [ 121.920806][ T1108] usb 4-1: media controller created [ 121.969134][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.035035][ T5548] tipc: Disabling bearer [ 122.079382][ T4178] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 122.127429][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.153167][ T1108] DVB: Unable to find symbol dib7000p_attach() [ 122.161596][ T1108] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 122.178896][ T4178] usb 2-1: Product: syz [ 122.192279][ T4178] usb 2-1: Manufacturer: syz [ 122.202786][ T4178] usb 2-1: SerialNumber: syz [ 122.220481][ T4178] usb 2-1: config 0 descriptor?? [ 122.270777][ T4178] usb 2-1: selecting invalid altsetting 1 [ 122.276617][ T4178] dvb_ttusb_budget: ttusb_init_controller: error [ 122.369467][ T4178] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 122.419227][ T1108] rc_core: IR keymap rc-dib0700-rc5 not found [ 122.429207][ T1108] Registered IR keymap rc-empty [ 122.450494][ T1108] dvb-usb: could not initialize remote control. [ 122.476730][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 122.489253][ T1108] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 122.507567][ T5535] netlink: 6 bytes leftover after parsing attributes in process `syz.1.412'. [ 122.547462][ T1108] usb 4-1: USB disconnect, device number 10 [ 122.576314][ T4178] DVB: Unable to find symbol stv0299_attach() [ 122.645321][ T1108] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 122.741734][ T4178] DVB: Unable to find symbol tda8083_attach() [ 122.750798][ T4178] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 122.844997][ T4178] usb 2-1: USB disconnect, device number 7 [ 123.052240][ T5587] kvm: emulating exchange as write [ 123.460007][ T5607] device syzkaller0 entered promiscuous mode [ 123.886254][ T5628] netlink: 51 bytes leftover after parsing attributes in process `syz.4.443'. [ 124.149512][ T7] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 124.259500][ T5638] tipc: Enabled bearer , priority 0 [ 124.283822][ T5638] device syzkaller0 entered promiscuous mode [ 124.326957][ T5638] tipc: Resetting bearer [ 124.346880][ T5637] tipc: Resetting bearer [ 124.382886][ T5637] tipc: Disabling bearer [ 124.519445][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.539565][ T7] usb 3-1: config 0 has no interface number 0 [ 124.709462][ T7] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 124.748264][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.784482][ T7] usb 3-1: Product: syz [ 124.791568][ T7] usb 3-1: Manufacturer: syz [ 124.799920][ T7] usb 3-1: SerialNumber: syz [ 124.815636][ T7] usb 3-1: config 0 descriptor?? [ 124.860512][ T7] usb 3-1: selecting invalid altsetting 1 [ 124.883419][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 124.908548][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 125.061285][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 125.087580][ T5632] netlink: 6 bytes leftover after parsing attributes in process `syz.2.445'. [ 125.132064][ T7] DVB: Unable to find symbol stv0299_attach() [ 125.297682][ T7] DVB: Unable to find symbol tda8083_attach() [ 125.305305][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 125.518702][ T21] usb 3-1: USB disconnect, device number 5 [ 125.618018][ T5673] device syzkaller0 entered promiscuous mode [ 125.638521][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.658375][ T5676] device batadv0 left promiscuous mode [ 125.680770][ T5676] bridge0: port 3(batadv0) entered disabled state [ 125.707414][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.731891][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.745235][ T5676] device bridge_slave_0 left promiscuous mode [ 125.751934][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.765033][ T5676] device bridge_slave_1 left promiscuous mode [ 125.775004][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.793777][ T5676] bond0: (slave bond_slave_0): Releasing backup interface [ 125.825389][ T5676] bond0: (slave bond_slave_1): Releasing backup interface [ 125.896685][ T5676] team0: Port device team_slave_0 removed [ 125.921904][ T5676] team0: Port device team_slave_1 removed [ 125.942350][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.951598][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.964133][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.972119][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.115765][ T5679] team0: Port device ip6gre1 added [ 126.145368][ T5676] syz.0.461 (5676) used greatest stack depth: 19504 bytes left [ 126.844962][ T5715] device syzkaller0 entered promiscuous mode [ 126.888819][ T5717] tipc: Enabled bearer , priority 0 [ 126.904600][ T5717] device syzkaller0 entered promiscuous mode [ 126.934923][ T5717] tipc: Resetting bearer [ 126.952963][ T5716] tipc: Resetting bearer [ 126.979308][ T7] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 126.987401][ T5716] tipc: Disabling bearer [ 127.324657][ T5736] netlink: 52 bytes leftover after parsing attributes in process `syz.3.486'. [ 127.344201][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.353081][ T5084] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 127.368022][ T7] usb 3-1: config 0 has no interface number 0 [ 127.527359][ T5746] device syzkaller0 entered promiscuous mode [ 127.529937][ T7] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 127.573589][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.604776][ T7] usb 3-1: Product: syz [ 127.608978][ T7] usb 3-1: Manufacturer: syz [ 127.613956][ T5084] usb 5-1: Using ep0 maxpacket: 8 [ 127.627497][ T7] usb 3-1: SerialNumber: syz [ 127.663352][ T7] usb 3-1: config 0 descriptor?? [ 127.731063][ T5084] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 127.741320][ T7] usb 3-1: selecting invalid altsetting 1 [ 127.747143][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 127.776706][ T5084] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.800150][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 127.820226][ T5084] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.856612][ T5084] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.899221][ T5084] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.923085][ T7] DVB: Unable to find symbol stv0299_attach() [ 127.940188][ T5084] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.950704][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 127.969282][ T5084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.979456][ T5711] netlink: 6 bytes leftover after parsing attributes in process `syz.2.474'. [ 128.044762][ T7] DVB: Unable to find symbol tda8083_attach() [ 128.059228][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 128.059561][ T4271] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.099033][ T5765] netlink: 52 bytes leftover after parsing attributes in process `syz.3.497'. [ 128.267209][ T4237] usb 3-1: USB disconnect, device number 6 [ 128.270241][ T5084] usb 5-1: GET_CAPABILITIES returned 0 [ 128.288541][ T5084] usbtmc 5-1:16.0: can't read capabilities [ 128.340527][ T4271] usb 1-1: Using ep0 maxpacket: 32 [ 128.470184][ T4271] usb 1-1: config 0 has no interfaces? [ 128.475721][ T4271] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 128.485470][ T4271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.503629][ T4271] usb 1-1: config 0 descriptor?? [ 128.529562][ T5084] usb 5-1: USB disconnect, device number 10 [ 128.676690][ T5781] device syzkaller0 entered promiscuous mode [ 128.749311][ T2305] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 128.760925][ T5757] 9pnet: Insufficient options for proto=fd [ 128.781915][ T4237] usb 1-1: USB disconnect, device number 6 [ 128.953966][ T5788] tipc: Enabled bearer , priority 0 [ 128.962138][ T5788] device syzkaller0 entered promiscuous mode [ 128.975978][ T5788] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 129.000996][ T5788] tipc: Resetting bearer [ 129.009109][ T5786] tipc: Resetting bearer [ 129.047734][ T5786] tipc: Disabling bearer [ 129.131597][ T5793] netlink: 52 bytes leftover after parsing attributes in process `syz.2.508'. [ 129.339338][ T2305] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 129.354200][ T2305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.363074][ T2305] usb 4-1: Product: syz [ 129.367328][ T2305] usb 4-1: Manufacturer: syz [ 129.372708][ T2305] usb 4-1: SerialNumber: syz [ 129.380261][ T2305] usb 4-1: config 0 descriptor?? [ 129.422784][ T2305] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 129.505921][ T5811] device syzkaller0 entered promiscuous mode [ 129.739584][ T4237] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 129.789301][ T2305] gspca_m5602: Failed to find a sensor [ 129.794852][ T2305] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 129.826191][ T2305] usb 4-1: USB disconnect, device number 11 [ 129.974552][ T5824] device syzkaller0 entered promiscuous mode [ 130.130575][ T4237] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.157037][ T4237] usb 1-1: config 0 has no interface number 0 [ 130.205583][ T5835] device syzkaller0 entered promiscuous mode [ 130.361899][ T4237] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 130.376747][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.393411][ T4237] usb 1-1: Product: syz [ 130.407825][ T4237] usb 1-1: Manufacturer: syz [ 130.419022][ T4237] usb 1-1: SerialNumber: syz [ 130.439408][ T4237] usb 1-1: config 0 descriptor?? [ 130.508856][ T4237] usb 1-1: selecting invalid altsetting 1 [ 130.532364][ T4237] dvb_ttusb_budget: ttusb_init_controller: error [ 130.546649][ T4237] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 130.662792][ T4237] DVB: Unable to find symbol stv0299_attach() [ 130.858268][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 130.915939][ T5810] netlink: 6 bytes leftover after parsing attributes in process `syz.0.515'. [ 131.485591][ T4237] DVB: Unable to find symbol tda8083_attach() [ 131.491979][ T4237] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 131.724664][ T5864] device syzkaller0 entered promiscuous mode [ 131.765600][ T7] usb 1-1: USB disconnect, device number 7 [ 131.808443][ T5869] device syzkaller0 entered promiscuous mode [ 131.859250][ T4178] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.022305][ T5875] tipc: Enabled bearer , priority 0 [ 132.030770][ T5875] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 132.045770][ T5876] device syzkaller0 entered promiscuous mode [ 132.060996][ T5875] tipc: Resetting bearer [ 132.099186][ T4178] usb 2-1: Using ep0 maxpacket: 16 [ 132.109554][ T5874] tipc: Disabling bearer [ 132.240562][ T5882] device syzkaller0 entered promiscuous mode [ 132.260673][ T5882] tipc: Enabled bearer , priority 0 [ 132.263566][ T4178] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.276636][ T5881] tipc: Resetting bearer [ 132.340746][ T5881] tipc: Disabling bearer [ 132.369569][ T4178] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 7 [ 132.470692][ T5887] tipc: Enabled bearer , priority 0 [ 132.478235][ T5887] device syzkaller0 entered promiscuous mode [ 132.484722][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.503543][ T5887] tipc: Resetting bearer [ 132.513410][ T5886] tipc: Resetting bearer [ 132.532542][ T5886] tipc: Disabling bearer [ 132.542250][ T4178] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 132.554634][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.565593][ T4178] usb 2-1: Product: syz [ 132.574639][ T4178] usb 2-1: Manufacturer: syz [ 132.581478][ T4178] usb 2-1: SerialNumber: syz [ 132.612940][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.619286][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.649516][ T4271] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.759322][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 132.899445][ T23] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 132.908727][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.918651][ T23] usb 4-1: config 0 descriptor?? [ 132.959489][ T4178] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 132.979392][ T4178] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 132.986833][ T4178] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 133.040455][ T4271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.057616][ T4178] usb 2-1: USB disconnect, device number 8 [ 133.067571][ T4271] usb 1-1: config 0 has no interfaces? [ 133.126818][ T5897] device syzkaller0 entered promiscuous mode [ 133.179500][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 133.191830][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.219523][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 133.236515][ T23] usb 4-1: media controller created [ 133.242394][ T4271] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 133.263057][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.279581][ T4271] usb 1-1: Product: syz [ 133.287992][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.297531][ T4271] usb 1-1: Manufacturer: syz [ 133.302238][ T4271] usb 1-1: SerialNumber: syz [ 133.341345][ T4271] usb 1-1: config 0 descriptor?? [ 133.400276][ T5899] device syzkaller0 entered promiscuous mode [ 133.419245][ T23] DVB: Unable to find symbol dib7000p_attach() [ 133.427805][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 133.533731][ T5905] device syzkaller0 entered promiscuous mode [ 133.569407][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 133.583423][ T23] Registered IR keymap rc-empty [ 133.588546][ T23] dvb-usb: could not initialize remote control. [ 133.596113][ T23] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 133.613524][ T4237] usb 1-1: USB disconnect, device number 8 [ 133.621939][ T23] usb 4-1: USB disconnect, device number 12 [ 133.672368][ T23] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 133.747673][ T5918] device syzkaller0 entered promiscuous mode [ 133.764515][ T5918] tipc: Enabled bearer , priority 0 [ 133.778166][ T5917] tipc: Resetting bearer [ 133.815153][ T5917] tipc: Disabling bearer [ 133.852449][ T4271] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.129494][ T4271] usb 3-1: Using ep0 maxpacket: 16 [ 134.151251][ T5929] device syzkaller0 entered promiscuous mode [ 134.160410][ T5931] device syzkaller0 entered promiscuous mode [ 134.186318][ T5929] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 134.231264][ T5934] binder: BINDER_SET_CONTEXT_MGR already set [ 134.257161][ T5934] binder: 5933:5934 ioctl 4018620d 200000004a80 returned -16 [ 134.279288][ T4271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.302811][ T4271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.317838][ T4271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.330700][ T4271] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.340743][ T4271] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.409189][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.428435][ T5936] device syzkaller0 entered promiscuous mode [ 134.441987][ T5938] device syzkaller0 entered promiscuous mode [ 134.449672][ T4271] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.468998][ T4271] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.497296][ T4271] usb 3-1: Manufacturer: syz [ 134.507241][ T4271] usb 3-1: config 0 descriptor?? [ 134.643186][ T5943] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.652034][ T5943] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.659337][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 134.660961][ T5943] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.674638][ T5943] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.697090][ T5943] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 134.720139][ T5947] netlink: 68 bytes leftover after parsing attributes in process `syz.0.567'. [ 134.779557][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 134.802334][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.868704][ T7] usb 2-1: config 0 descriptor?? [ 134.959212][ T4271] rc_core: IR keymap rc-hauppauge not found [ 134.966373][ T4271] Registered IR keymap rc-empty [ 134.986993][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.049650][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.069443][ T2305] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 135.091543][ T4271] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 135.123538][ T4271] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 135.149310][ T7] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 135.160049][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.206376][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.209981][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 135.229245][ T7] usb 2-1: media controller created [ 135.249408][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.276167][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.289479][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.329331][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.349269][ T2305] usb 4-1: Using ep0 maxpacket: 32 [ 135.405239][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.449336][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.465567][ T7] DVB: Unable to find symbol dib7000p_attach() [ 135.475517][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 135.479813][ T2305] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 135.499385][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.516928][ T5964] tipc: Enabled bearer , priority 0 [ 135.529223][ T2305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.538173][ T5964] device syzkaller0 entered promiscuous mode [ 135.544594][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.568270][ T2305] usb 4-1: config 0 descriptor?? [ 135.581212][ T5964] tipc: Resetting bearer [ 135.589278][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.619513][ T4271] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.643030][ T5963] tipc: Resetting bearer [ 135.659279][ T7] rc_core: IR keymap rc-dib0700-rc5 not found [ 135.665664][ T7] Registered IR keymap rc-empty [ 135.678444][ T7] dvb-usb: could not initialize remote control. [ 135.684738][ T4271] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 135.684796][ T4271] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 135.710243][ T5963] tipc: Disabling bearer [ 135.723342][ T7] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 135.753480][ T7] usb 2-1: USB disconnect, device number 9 [ 135.849359][ T2305] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 135.867792][ T7] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 135.874203][ T2305] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.950040][ T2305] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 135.957307][ T2305] usb 4-1: media controller created [ 136.016743][ T5977] device syzkaller0 entered promiscuous mode [ 136.038756][ T2305] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.159433][ T2305] DVB: Unable to find symbol dib7000p_attach() [ 136.175848][ T2305] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 136.276822][ T5989] tipc: Enabled bearer , priority 0 [ 136.283797][ T2305] rc_core: IR keymap rc-dib0700-rc5 not found [ 136.290053][ T2305] Registered IR keymap rc-empty [ 136.303240][ T2305] dvb-usb: could not initialize remote control. [ 136.310070][ T5989] device syzkaller0 entered promiscuous mode [ 136.322033][ T2305] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 136.345975][ T5989] tipc: Resetting bearer [ 136.385395][ T2305] usb 4-1: USB disconnect, device number 13 [ 136.400634][ T5985] tipc: Resetting bearer [ 136.421450][ T5985] tipc: Disabling bearer [ 136.465337][ T2305] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 136.515581][ T4271] usb 3-1: USB disconnect, device number 7 [ 136.631552][ T6003] tmpfs: Unknown parameter 'usrquota' [ 136.949997][ T6019] device syzkaller0 entered promiscuous mode [ 137.069349][ T4271] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.227582][ T6030] tipc: Enabled bearer , priority 0 [ 137.257108][ T6030] device syzkaller0 entered promiscuous mode [ 137.282164][ T6030] tipc: Resetting bearer [ 137.292144][ T6028] tipc: Resetting bearer [ 137.340873][ T6028] tipc: Disabling bearer [ 137.349339][ T4271] usb 3-1: Using ep0 maxpacket: 32 [ 137.479361][ T4271] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 137.491113][ T4271] usb 3-1: config 2 has no interface number 0 [ 137.523482][ T4271] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 137.537593][ T4271] usb 3-1: config 2 interface 88 has no altsetting 0 [ 137.559312][ T4178] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 137.589501][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.694961][ T6046] tipc: Enabled bearer , priority 0 [ 137.702756][ T6046] device syzkaller0 entered promiscuous mode [ 137.723023][ T6046] tipc: Resetting bearer [ 137.730348][ T4271] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 137.740022][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.748181][ T6045] tipc: Resetting bearer [ 137.754061][ T4271] usb 3-1: Product: syz [ 137.763693][ T4271] usb 3-1: Manufacturer: syz [ 137.768319][ T4271] usb 3-1: SerialNumber: syz [ 137.778709][ T6045] tipc: Disabling bearer [ 137.809854][ T6007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.865641][ T6050] bond0 speed is unknown, defaulting to 1000 [ 137.873729][ T6050] bond0 speed is unknown, defaulting to 1000 [ 137.879335][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 137.903855][ T6050] bond0 speed is unknown, defaulting to 1000 [ 137.909942][ T6052] device syzkaller0 entered promiscuous mode [ 137.937320][ T6050] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.947238][ T4178] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 137.961001][ T4178] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.971583][ T4178] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 137.977092][ T6050] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 138.009390][ T23] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 138.024834][ T6050] bond0 speed is unknown, defaulting to 1000 [ 138.032161][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.042891][ T6007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.055818][ T6050] bond0 speed is unknown, defaulting to 1000 [ 138.064598][ T6050] bond0 speed is unknown, defaulting to 1000 [ 138.072297][ T23] usb 5-1: config 0 descriptor?? [ 138.080682][ T6050] bond0 speed is unknown, defaulting to 1000 [ 138.087661][ T6050] bond0 speed is unknown, defaulting to 1000 [ 138.159400][ T4178] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 138.172618][ T4178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.185503][ T4178] usb 4-1: Product: syz [ 138.200374][ T4178] usb 4-1: Manufacturer: syz [ 138.205023][ T4178] usb 4-1: SerialNumber: syz [ 138.226384][ T4178] usb 4-1: config 0 descriptor?? [ 138.245151][ T6061] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.254332][ T6061] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.263172][ T6061] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.271978][ T6061] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.283186][ T6061] team0: Device vxlan0 is of different type [ 138.311492][ T6061] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.320447][ T6061] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.329450][ T6061] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.338335][ T6061] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.347679][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 138.362165][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.389502][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 138.397327][ T23] usb 5-1: media controller created [ 138.430439][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.472124][ T6063] device syzkaller0 entered promiscuous mode [ 138.487018][ T6063] tipc: Enabled bearer , priority 0 [ 138.497119][ T7] usb 4-1: USB disconnect, device number 14 [ 138.508532][ T6062] tipc: Resetting bearer [ 138.518167][ T4271] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 138.544727][ T23] DVB: Unable to find symbol dib7000p_attach() [ 138.551759][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 138.562713][ T4271] asix: probe of 3-1:2.88 failed with error -71 [ 138.585480][ T4271] usb 3-1: USB disconnect, device number 8 [ 138.641573][ T6062] tipc: Disabling bearer [ 138.699263][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 138.723920][ T23] Registered IR keymap rc-empty [ 138.733109][ T23] dvb-usb: could not initialize remote control. [ 138.753818][ T23] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 138.801058][ T23] usb 5-1: USB disconnect, device number 11 [ 138.874054][ T23] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 138.948050][ T6077] tipc: Enabled bearer , priority 0 [ 138.963273][ T6077] device syzkaller0 entered promiscuous mode [ 138.988408][ T6077] tipc: Resetting bearer [ 138.997996][ T6076] tipc: Resetting bearer [ 139.033802][ T6076] tipc: Disabling bearer [ 139.309291][ T5084] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 139.382107][ T4237] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 139.517973][ T6101] device syzkaller0 entered promiscuous mode [ 139.526979][ T6101] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 139.559242][ T5084] usb 4-1: Using ep0 maxpacket: 16 [ 139.674849][ T6105] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 139.683014][ T6105] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 139.747482][ T6111] tipc: Enabled bearer , priority 0 [ 139.754783][ T6111] device syzkaller0 entered promiscuous mode [ 139.775647][ T6111] tipc: Resetting bearer [ 139.782578][ T6110] tipc: Resetting bearer [ 139.797518][ T6110] tipc: Disabling bearer [ 139.819764][ T4237] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.827971][ T4237] usb 3-1: config 0 has no interface number 0 [ 139.829351][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.842795][ T5084] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 139.863261][ T5084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.875615][ T5084] usb 4-1: Product: syz [ 139.893589][ T5084] usb 4-1: Manufacturer: syz [ 139.898238][ T5084] usb 4-1: SerialNumber: syz [ 139.906180][ T5084] usb 4-1: config 0 descriptor?? [ 139.950606][ T5084] gspca_main: spca508-2.14.0 probing 041e:4018 [ 140.039293][ T4237] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 140.048739][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.057124][ T4237] usb 3-1: Product: syz [ 140.061574][ T4237] usb 3-1: Manufacturer: syz [ 140.066198][ T4237] usb 3-1: SerialNumber: syz [ 140.073255][ T4237] usb 3-1: config 0 descriptor?? [ 140.112221][ T4237] usb 3-1: selecting invalid altsetting 1 [ 140.118867][ T4237] dvb_ttusb_budget: ttusb_init_controller: error [ 140.125531][ T4237] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 140.158641][ T4237] DVB: Unable to find symbol stv0299_attach() [ 140.159536][ T5084] gspca_spca508: reg_read err -32 [ 140.187962][ T4237] DVB: Unable to find symbol tda8083_attach() [ 140.194377][ T4237] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 140.209870][ T5084] gspca_spca508: reg_read err -32 [ 140.229638][ T7] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 140.239000][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.251632][ T4178] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.259466][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 140.314175][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 140.323494][ T6081] netlink: 6 bytes leftover after parsing attributes in process `syz.2.617'. [ 140.346658][ T6081] bond0 speed is unknown, defaulting to 1000 [ 140.419275][ T7] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 140.437577][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.445949][ T7] usb 5-1: Product: syz [ 140.450912][ T7] usb 5-1: Manufacturer: syz [ 140.456256][ T7] usb 5-1: SerialNumber: syz [ 140.466247][ T7] usb 5-1: config 0 descriptor?? [ 140.489350][ T5084] gspca_spca508: reg_read err -71 [ 140.499327][ T4178] usb 1-1: Using ep0 maxpacket: 32 [ 140.509315][ T5084] gspca_spca508: reg_read err -71 [ 140.529312][ T5084] gspca_spca508: reg write: error -71 [ 140.534755][ T5084] spca508: probe of 4-1:0.0 failed with error -71 [ 140.543598][ T5084] usb 4-1: USB disconnect, device number 15 [ 140.607911][ T21] usb 3-1: USB disconnect, device number 9 [ 140.619639][ T4178] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 140.634574][ T4178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.644473][ T4178] usb 1-1: config 0 descriptor?? [ 140.699403][ T4237] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.714322][ T7] usb 5-1: USB disconnect, device number 12 [ 140.909273][ T4178] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 140.917501][ T4178] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.949475][ T4178] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 140.956711][ T4178] usb 1-1: media controller created [ 140.969246][ T4237] usb 2-1: Using ep0 maxpacket: 32 [ 140.976445][ T4178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.018442][ T4178] DVB: Unable to find symbol dib7000p_attach() [ 141.025131][ T4178] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 141.099278][ T4178] rc_core: IR keymap rc-dib0700-rc5 not found [ 141.105370][ T4178] Registered IR keymap rc-empty [ 141.110430][ T4178] dvb-usb: could not initialize remote control. [ 141.144077][ T4237] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 141.153528][ T4178] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 141.159284][ T4237] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 141.176608][ T4237] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 141.186305][ T4237] usb 2-1: config 1 has no interface number 0 [ 141.203002][ T4237] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.214412][ T6128] tmpfs: Unknown parameter 'usrquota' [ 141.217669][ T4178] usb 1-1: USB disconnect, device number 9 [ 141.249356][ T4237] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 141.268389][ T4237] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 141.281437][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.342303][ T4237] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 141.350602][ T4178] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 141.459255][ T4271] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 141.570886][ T4237] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 141.691085][ T6144] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.709895][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.723312][ T6144] kvm: pic: non byte read [ 141.728268][ T6144] kvm: pic: single mode not supported [ 141.728371][ T6144] kvm: pic: non byte read [ 141.747133][ T6144] kvm: pic: non byte read [ 141.753619][ T6144] kvm: pic: non byte read [ 141.758331][ T6144] kvm: pic: non byte read [ 141.990499][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 142.059991][ T4271] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 142.069082][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.089372][ T4271] usb 4-1: Product: syz [ 142.093834][ T4271] usb 4-1: Manufacturer: syz [ 142.098453][ T4271] usb 4-1: SerialNumber: syz [ 142.128352][ T4271] usb 4-1: config 0 descriptor?? [ 142.139341][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.149539][ T2305] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 142.157164][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.359384][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.368492][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.396424][ T6153] devpts: called with bogus options [ 142.399286][ T23] usb 3-1: Product: syz [ 142.406064][ T23] usb 3-1: Manufacturer: syz [ 142.419287][ T23] usb 3-1: SerialNumber: syz [ 142.534913][ T6157] tipc: Enabled bearer , priority 0 [ 142.544219][ T6157] device syzkaller0 entered promiscuous mode [ 142.562791][ T6157] tipc: Resetting bearer [ 142.570069][ T6156] tipc: Resetting bearer [ 142.579578][ T2305] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.588945][ T2305] usb 5-1: config 0 has no interface number 0 [ 142.610612][ T1111] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 142.622239][ T6156] tipc: Disabling bearer [ 142.749560][ T23] usb 3-1: 0:2 : does not exist [ 142.767742][ T23] usb 3-1: USB disconnect, device number 10 [ 142.774440][ T2305] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 142.784925][ T2305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.804053][ T2305] usb 5-1: Product: syz [ 142.814658][ T2305] usb 5-1: Manufacturer: syz [ 142.821190][ T2305] usb 5-1: SerialNumber: syz [ 142.827952][ T2305] usb 5-1: config 0 descriptor?? [ 142.891199][ T2305] usb 5-1: selecting invalid altsetting 1 [ 142.901876][ T2305] dvb_ttusb_budget: ttusb_init_controller: error [ 142.911611][ T2305] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 143.011353][ T2305] DVB: Unable to find symbol stv0299_attach() [ 143.049501][ T4592] udevd[4592]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 143.091428][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 143.106069][ T6151] netlink: 6 bytes leftover after parsing attributes in process `syz.4.644'. [ 143.126434][ T2305] DVB: Unable to find symbol tda8083_attach() [ 143.132774][ T2305] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 143.217643][ T6169] bond0 speed is unknown, defaulting to 1000 [ 143.269408][ T4271] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -71 [ 143.277399][ T4271] usb 4-1: Firmware version (0.0) predates our first public release. [ 143.299271][ T4271] usb 4-1: Please update to version 0.2 or newer [ 143.334654][ T4271] usb 4-1: atusb_probe: initialization failed, error = -71 [ 143.342939][ T6174] netlink: 128 bytes leftover after parsing attributes in process `syz.2.652'. [ 143.360205][ T4271] atusb: probe of 4-1:0.0 failed with error -71 [ 143.387142][ T4271] usb 4-1: USB disconnect, device number 16 [ 143.437914][ T1111] usb 5-1: USB disconnect, device number 13 [ 143.484943][ T2305] usb 2-1: USB disconnect, device number 10 [ 143.495661][ T2305] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 143.552180][ T6180] tipc: Enabled bearer , priority 0 [ 143.580899][ T6180] device syzkaller0 entered promiscuous mode [ 143.622319][ T6180] tipc: Resetting bearer [ 143.667034][ T6179] tipc: Resetting bearer [ 143.753963][ T6179] tipc: Disabling bearer [ 143.760005][ T4237] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.831012][ T6187] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 144.061201][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 144.219567][ T4237] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 144.238431][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.252600][ T4237] usb 1-1: config 0 descriptor?? [ 144.339328][ T4271] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.406522][ T6214] [ 144.408919][ T6214] ====================================================== [ 144.415963][ T6214] WARNING: possible circular locking dependency detected [ 144.423009][ T6214] syzkaller #0 Not tainted [ 144.427444][ T6214] ------------------------------------------------------ [ 144.434472][ T6214] syz.1.668/6214 is trying to acquire lock: [ 144.440369][ T6214] ffff8880750b8120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 144.449974][ T6214] [ 144.449974][ T6214] but task is already holding lock: [ 144.457352][ T6214] ffffc900017ccd30 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 144.466957][ T6214] [ 144.466957][ T6214] which lock already depends on the new lock. [ 144.466957][ T6214] [ 144.477374][ T6214] [ 144.477374][ T6214] the existing dependency chain (in reverse order) is: [ 144.486393][ T6214] [ 144.486393][ T6214] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 144.494342][ T6214] _raw_spin_lock+0x2a/0x40 [ 144.499389][ T6214] __inet_hash+0xe3/0x960 [ 144.504270][ T6214] inet_csk_listen_start+0x22f/0x320 [ 144.510100][ T6214] inet_listen+0x2e1/0x590 [ 144.515053][ T6214] __sys_listen+0x19d/0x220 [ 144.520095][ T6214] __x64_sys_listen+0x56/0x60 [ 144.525312][ T6214] do_syscall_64+0x4c/0xa0 [ 144.530273][ T6214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.536747][ T6214] [ 144.536747][ T6214] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 144.544482][ T6214] __lock_acquire+0x2c42/0x7d10 [ 144.549867][ T6214] lock_acquire+0x19e/0x400 [ 144.554894][ T6214] mptcp_diag_get_info+0x1f2/0x9e0 [ 144.560530][ T6214] inet_sk_diag_fill+0xf5e/0x1ca0 [ 144.566075][ T6214] mptcp_diag_dump+0xce6/0x12b0 [ 144.571447][ T6214] __inet_diag_dump+0x1f6/0x380 [ 144.576821][ T6214] netlink_dump+0x694/0xcf0 [ 144.581847][ T6214] __netlink_dump_start+0x523/0x700 [ 144.587574][ T6214] inet_diag_handler_cmd+0x1d3/0x2b0 [ 144.593383][ T6214] sock_diag_rcv_msg+0x164/0x3e0 [ 144.598850][ T6214] netlink_rcv_skb+0x1f5/0x440 [ 144.604239][ T6214] sock_diag_rcv+0x26/0x40 [ 144.609178][ T6214] netlink_unicast+0x774/0x920 [ 144.614460][ T6214] netlink_sendmsg+0x8ba/0xbe0 [ 144.619747][ T6214] sock_write_iter+0x2a6/0x3a0 [ 144.625034][ T6214] do_iter_readv_writev+0x47e/0x5f0 [ 144.630758][ T6214] do_iter_write+0x205/0x7b0 [ 144.635873][ T6214] do_writev+0x281/0x480 [ 144.640647][ T6214] do_syscall_64+0x4c/0xa0 [ 144.645596][ T6214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.652015][ T6214] [ 144.652015][ T6214] other info that might help us debug this: [ 144.652015][ T6214] [ 144.662249][ T6214] Possible unsafe locking scenario: [ 144.662249][ T6214] [ 144.669724][ T6214] CPU0 CPU1 [ 144.675089][ T6214] ---- ---- [ 144.680462][ T6214] lock(&h->lhash2[i].lock); [ 144.685143][ T6214] lock(sk_lock-AF_INET6); [ 144.692173][ T6214] lock(&h->lhash2[i].lock); [ 144.699369][ T6214] lock(sk_lock-AF_INET6); [ 144.703874][ T6214] [ 144.703874][ T6214] *** DEADLOCK *** [ 144.703874][ T6214] [ 144.712020][ T6214] 6 locks held by syz.1.668/6214: [ 144.717047][ T6214] #0: ffffffff8d447768 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 144.726361][ T6214] #1: ffffffff8d447628 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 144.736716][ T6214] #2: ffff88807e762698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 144.747426][ T6214] #3: ffffffff8d521828 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 144.757715][ T6214] #4: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 144.767035][ T6214] #5: ffffc900017ccd30 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 144.777046][ T6214] [ 144.777046][ T6214] stack backtrace: [ 144.782941][ T6214] CPU: 1 PID: 6214 Comm: syz.1.668 Not tainted syzkaller #0 [ 144.790231][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.800287][ T6214] Call Trace: [ 144.803579][ T6214] [ 144.806519][ T6214] dump_stack_lvl+0x188/0x250 [ 144.811200][ T6214] ? load_image+0x400/0x400 [ 144.815708][ T6214] ? show_regs_print_info+0x20/0x20 [ 144.820914][ T6214] ? print_circular_bug+0x12b/0x1a0 [ 144.826113][ T6214] check_noncircular+0x296/0x330 [ 144.831062][ T6214] ? add_chain_block+0x940/0x940 [ 144.835998][ T6214] ? lockdep_lock+0xf1/0x1f0 [ 144.840600][ T6214] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 144.846588][ T6214] ? mark_lock+0x94/0x320 [ 144.850918][ T6214] __lock_acquire+0x2c42/0x7d10 [ 144.855786][ T6214] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 144.861772][ T6214] ? verify_lock_unused+0x140/0x140 [ 144.867033][ T6214] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 144.873021][ T6214] ? verify_lock_unused+0x140/0x140 [ 144.878281][ T6214] ? __local_bh_enable_ip+0xd7/0x1c0 [ 144.883571][ T6214] ? __local_bh_enable_ip+0x136/0x1c0 [ 144.888946][ T6214] ? lockdep_hardirqs_on+0x94/0x140 [ 144.894165][ T6214] ? __local_bh_enable_ip+0x136/0x1c0 [ 144.899539][ T6214] ? _local_bh_enable+0xa0/0xa0 [ 144.904401][ T6214] ? nla_put+0x130/0x1e0 [ 144.908651][ T6214] lock_acquire+0x19e/0x400 [ 144.913167][ T6214] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 144.918377][ T6214] ? read_lock_is_recursive+0x10/0x10 [ 144.923761][ T6214] ? rcu_lock_release+0x5/0x20 [ 144.928538][ T6214] ? __lock_acquire+0x7d10/0x7d10 [ 144.933573][ T6214] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 144.938777][ T6214] mptcp_diag_get_info+0x1f2/0x9e0 [ 144.943892][ T6214] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 144.949098][ T6214] inet_sk_diag_fill+0xf5e/0x1ca0 [ 144.954129][ T6214] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 144.959855][ T6214] ? do_raw_spin_lock+0x128/0x2f0 [ 144.964901][ T6214] ? __rwlock_init+0x140/0x140 [ 144.969667][ T6214] ? inet_diag_bc_sk+0x18b/0x1120 [ 144.974693][ T6214] mptcp_diag_dump+0xce6/0x12b0 [ 144.979550][ T6214] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 144.986142][ T6214] __inet_diag_dump+0x1f6/0x380 [ 144.991011][ T6214] netlink_dump+0x694/0xcf0 [ 144.995530][ T6214] ? netlink_lookup+0x1d0/0x1d0 [ 145.000387][ T6214] ? __inet_diag_dump_start+0x805/0x970 [ 145.005963][ T6214] __netlink_dump_start+0x523/0x700 [ 145.011167][ T6214] inet_diag_handler_cmd+0x1d3/0x2b0 [ 145.016461][ T6214] ? rcu_lock_release+0x20/0x20 [ 145.021362][ T6214] ? inet_diag_handler_get_info+0xb90/0xb90 [ 145.027260][ T6214] ? inet_diag_dump_start+0x20/0x20 [ 145.032463][ T6214] ? inet_diag_dump+0x50/0x50 [ 145.037152][ T6214] ? rcu_lock_release+0x20/0x20 [ 145.042010][ T6214] sock_diag_rcv_msg+0x164/0x3e0 [ 145.046958][ T6214] netlink_rcv_skb+0x1f5/0x440 [ 145.051730][ T6214] ? sock_diag_bind+0xa0/0xa0 [ 145.056412][ T6214] ? netlink_ack+0xb50/0xb50 [ 145.061013][ T6214] ? __lock_acquire+0x7d10/0x7d10 [ 145.066053][ T6214] sock_diag_rcv+0x26/0x40 [ 145.070472][ T6214] netlink_unicast+0x774/0x920 [ 145.075239][ T6214] netlink_sendmsg+0x8ba/0xbe0 [ 145.080019][ T6214] ? netlink_getsockopt+0x570/0x570 [ 145.085225][ T6214] ? aa_sock_msg_perm+0x94/0x150 [ 145.090169][ T6214] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 145.095467][ T6214] ? security_socket_sendmsg+0x7c/0xa0 [ 145.100932][ T6214] sock_write_iter+0x2a6/0x3a0 [ 145.105702][ T6214] ? sock_read_iter+0x380/0x380 [ 145.110554][ T6214] do_iter_readv_writev+0x47e/0x5f0 [ 145.115765][ T6214] ? aa_path_link+0x880/0x880 [ 145.120459][ T6214] ? generic_file_rw_checks+0x280/0x280 [ 145.126020][ T6214] ? common_file_perm+0x171/0x1c0 [ 145.131091][ T6214] ? fsnotify_perm+0x5d/0x560 [ 145.135812][ T6214] ? security_file_permission+0x75/0xa0 [ 145.141372][ T6214] do_iter_write+0x205/0x7b0 [ 145.145975][ T6214] ? import_iovec+0x6f/0xa0 [ 145.150485][ T6214] do_writev+0x281/0x480 [ 145.154757][ T6214] ? do_readv+0x460/0x460 [ 145.159097][ T6214] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 145.165104][ T6214] ? lock_chain_count+0x20/0x20 [ 145.169968][ T6214] ? vtime_user_exit+0x2c8/0x3e0 [ 145.174913][ T6214] ? lockdep_hardirqs_on+0x94/0x140 [ 145.180118][ T6214] do_syscall_64+0x4c/0xa0 [ 145.184542][ T6214] ? clear_bhb_loop+0x30/0x80 [ 145.189262][ T6214] ? clear_bhb_loop+0x30/0x80 [ 145.193967][ T6214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.199883][ T6214] RIP: 0033:0x7f3af0d25e59 [ 145.204313][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.223923][ T6214] RSP: 002b:00007f3aeef7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 145.232397][ T6214] RAX: ffffffffffffffda RBX: 00007f3af0f9efa0 RCX: 00007f3af0d25e59 [ 145.240378][ T6214] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 145.248378][ T6214] RBP: 00007f3af0dbbd6f R08: 0000000000000000 R09: 0000000000000000 [ 145.256370][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.264353][ T6214] R13: 00007f3af0f9f038 R14: 00007f3af0f9efa0 R15: 00007fff2add73c8 [ 145.272356][ T6214] [ 145.276678][ T6214] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 145.286319][ T6214] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6214, name: syz.1.668 [ 145.295322][ T6214] INFO: lockdep is turned off. [ 145.300121][ T6214] Preemption disabled at: [ 145.300129][ T6214] [<0000000000000000>] 0x0 [ 145.308919][ T6214] CPU: 1 PID: 6214 Comm: syz.1.668 Not tainted syzkaller #0 [ 145.316221][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.326293][ T6214] Call Trace: [ 145.329595][ T6214] [ 145.332569][ T6214] dump_stack_lvl+0x188/0x250 [ 145.337272][ T6214] ? show_regs_print_info+0x20/0x20 [ 145.342499][ T6214] ? load_image+0x400/0x400 [ 145.347035][ T6214] ___might_sleep+0x493/0x610 [ 145.351776][ T6214] ? __might_sleep+0xf0/0xf0 [ 145.356385][ T6214] ? read_lock_is_recursive+0x10/0x10 [ 145.361784][ T6214] ? rcu_lock_release+0x5/0x20 [ 145.366577][ T6214] __lock_sock_fast+0x2f/0xe0 [ 145.371277][ T6214] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 145.376506][ T6214] mptcp_diag_get_info+0x1fe/0x9e0 [ 145.381620][ T6214] inet_sk_diag_fill+0xf5e/0x1ca0 [ 145.386642][ T6214] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 145.392366][ T6214] ? do_raw_spin_lock+0x128/0x2f0 [ 145.397398][ T6214] ? __rwlock_init+0x140/0x140 [ 145.402164][ T6214] ? inet_diag_bc_sk+0x18b/0x1120 [ 145.407197][ T6214] mptcp_diag_dump+0xce6/0x12b0 [ 145.412045][ T6214] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 145.418638][ T6214] __inet_diag_dump+0x1f6/0x380 [ 145.423497][ T6214] netlink_dump+0x694/0xcf0 [ 145.428012][ T6214] ? netlink_lookup+0x1d0/0x1d0 [ 145.432872][ T6214] ? __inet_diag_dump_start+0x805/0x970 [ 145.438455][ T6214] __netlink_dump_start+0x523/0x700 [ 145.443652][ T6214] inet_diag_handler_cmd+0x1d3/0x2b0 [ 145.448941][ T6214] ? rcu_lock_release+0x20/0x20 [ 145.453783][ T6214] ? inet_diag_handler_get_info+0xb90/0xb90 [ 145.459682][ T6214] ? inet_diag_dump_start+0x20/0x20 [ 145.464887][ T6214] ? inet_diag_dump+0x50/0x50 [ 145.469572][ T6214] ? rcu_lock_release+0x20/0x20 [ 145.474432][ T6214] sock_diag_rcv_msg+0x164/0x3e0 [ 145.479373][ T6214] netlink_rcv_skb+0x1f5/0x440 [ 145.484135][ T6214] ? sock_diag_bind+0xa0/0xa0 [ 145.488817][ T6214] ? netlink_ack+0xb50/0xb50 [ 145.493433][ T6214] ? __lock_acquire+0x7d10/0x7d10 [ 145.498483][ T6214] sock_diag_rcv+0x26/0x40 [ 145.502890][ T6214] netlink_unicast+0x774/0x920 [ 145.507673][ T6214] netlink_sendmsg+0x8ba/0xbe0 [ 145.512442][ T6214] ? netlink_getsockopt+0x570/0x570 [ 145.517647][ T6214] ? aa_sock_msg_perm+0x94/0x150 [ 145.522590][ T6214] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 145.527886][ T6214] ? security_socket_sendmsg+0x7c/0xa0 [ 145.533353][ T6214] sock_write_iter+0x2a6/0x3a0 [ 145.538115][ T6214] ? sock_read_iter+0x380/0x380 [ 145.542971][ T6214] do_iter_readv_writev+0x47e/0x5f0 [ 145.548177][ T6214] ? aa_path_link+0x880/0x880 [ 145.552857][ T6214] ? generic_file_rw_checks+0x280/0x280 [ 145.558417][ T6214] ? common_file_perm+0x171/0x1c0 [ 145.563473][ T6214] ? fsnotify_perm+0x5d/0x560 [ 145.568143][ T6214] ? security_file_permission+0x75/0xa0 [ 145.573685][ T6214] do_iter_write+0x205/0x7b0 [ 145.578282][ T6214] ? import_iovec+0x6f/0xa0 [ 145.582788][ T6214] do_writev+0x281/0x480 [ 145.587027][ T6214] ? do_readv+0x460/0x460 [ 145.591362][ T6214] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 145.597368][ T6214] ? lock_chain_count+0x20/0x20 [ 145.602229][ T6214] ? vtime_user_exit+0x2c8/0x3e0 [ 145.607189][ T6214] ? lockdep_hardirqs_on+0x94/0x140 [ 145.612396][ T6214] do_syscall_64+0x4c/0xa0 [ 145.616817][ T6214] ? clear_bhb_loop+0x30/0x80 [ 145.621493][ T6214] ? clear_bhb_loop+0x30/0x80 [ 145.626177][ T6214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.632076][ T6214] RIP: 0033:0x7f3af0d25e59 [ 145.636481][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.656165][ T6214] RSP: 002b:00007f3aeef7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 145.664571][ T6214] RAX: ffffffffffffffda RBX: 00007f3af0f9efa0 RCX: 00007f3af0d25e59 [ 145.672537][ T6214] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 145.680512][ T6214] RBP: 00007f3af0dbbd6f R08: 0000000000000000 R09: 0000000000000000 [ 145.688468][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.696428][ T6214] R13: 00007f3af0f9f038 R14: 00007f3af0f9efa0 R15: 00007fff2add73c8 [ 145.704424][ T6214] [ 145.707489][ T6214] BUG: scheduling while atomic: syz.1.668/6214/0x00000002 [ 145.714596][ T6214] INFO: lockdep is turned off. [ 145.719377][ T6214] Modules linked in: [ 145.723295][ T6214] Preemption disabled at: [ 145.723302][ T6214] [<0000000000000000>] 0x0 [ 145.732055][ T6214] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 145.740804][ T6214] CPU: 1 PID: 6214 Comm: syz.1.668 Tainted: G W syzkaller #0 [ 145.749500][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.759561][ T6214] Call Trace: [ 145.762851][ T6214] [ 145.765785][ T6214] dump_stack_lvl+0x188/0x250 [ 145.770467][ T6214] ? show_regs_print_info+0x20/0x20 [ 145.775671][ T6214] ? load_image+0x400/0x400 [ 145.780180][ T6214] panic+0x2e5/0x810 [ 145.784069][ T6214] ? bpf_jit_dump+0xd0/0xd0 [ 145.788561][ T6214] ? vprintk_emit+0xf9/0x150 [ 145.793144][ T6214] ? _printk+0xda/0x130 [ 145.797308][ T6214] check_panic_on_warn+0x80/0xa0 [ 145.802254][ T6214] __schedule_bug+0x193/0x1f0 [ 145.806938][ T6214] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 145.812328][ T6214] __schedule+0x1324/0x43c0 [ 145.816839][ T6214] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 145.822555][ T6214] ? prepare_to_wait_exclusive+0xc5/0x220 [ 145.828290][ T6214] ? do_raw_spin_lock+0x128/0x2f0 [ 145.833345][ T6214] ? __kthread_should_park+0xa2/0xe0 [ 145.838644][ T6214] ? lock_chain_count+0x20/0x20 [ 145.843492][ T6214] ? lock_release+0xb5/0x8a0 [ 145.848088][ T6214] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 145.854067][ T6214] ? __lock_sock+0x159/0x2b0 [ 145.858676][ T6214] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 145.864572][ T6214] ? release_firmware_map_entry+0x190/0x190 [ 145.870461][ T6214] ? __lock_sock+0x159/0x2b0 [ 145.875056][ T6214] ? __local_bh_enable_ip+0x136/0x1c0 [ 145.880431][ T6214] ? _local_bh_enable+0xa0/0xa0 [ 145.885398][ T6214] schedule+0x11b/0x1e0 [ 145.889561][ T6214] __lock_sock+0x15e/0x2b0 [ 145.893984][ T6214] ? sk_page_frag_refill+0x200/0x200 [ 145.899280][ T6214] ? do_raw_spin_lock+0x128/0x2f0 [ 145.904323][ T6214] ? init_wait_entry+0xd0/0xd0 [ 145.909098][ T6214] ? __rwlock_init+0x140/0x140 [ 145.913864][ T6214] ? rcu_lock_release+0x5/0x20 [ 145.918619][ T6214] ? __lock_sock_fast+0x43/0xe0 [ 145.923470][ T6214] __lock_sock_fast+0x78/0xe0 [ 145.928168][ T6214] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 145.933365][ T6214] mptcp_diag_get_info+0x1fe/0x9e0 [ 145.938500][ T6214] inet_sk_diag_fill+0xf5e/0x1ca0 [ 145.943542][ T6214] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 145.949266][ T6214] ? do_raw_spin_lock+0x128/0x2f0 [ 145.954307][ T6214] ? __rwlock_init+0x140/0x140 [ 145.959069][ T6214] ? inet_diag_bc_sk+0x18b/0x1120 [ 145.964096][ T6214] mptcp_diag_dump+0xce6/0x12b0 [ 145.968940][ T6214] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 145.975527][ T6214] __inet_diag_dump+0x1f6/0x380 [ 145.980381][ T6214] netlink_dump+0x694/0xcf0 [ 145.984888][ T6214] ? netlink_lookup+0x1d0/0x1d0 [ 145.989733][ T6214] ? __inet_diag_dump_start+0x805/0x970 [ 145.995303][ T6214] __netlink_dump_start+0x523/0x700 [ 146.000498][ T6214] inet_diag_handler_cmd+0x1d3/0x2b0 [ 146.005797][ T6214] ? rcu_lock_release+0x20/0x20 [ 146.010650][ T6214] ? inet_diag_handler_get_info+0xb90/0xb90 [ 146.016549][ T6214] ? inet_diag_dump_start+0x20/0x20 [ 146.021769][ T6214] ? inet_diag_dump+0x50/0x50 [ 146.026468][ T6214] ? rcu_lock_release+0x20/0x20 [ 146.031322][ T6214] sock_diag_rcv_msg+0x164/0x3e0 [ 146.036268][ T6214] netlink_rcv_skb+0x1f5/0x440 [ 146.041070][ T6214] ? sock_diag_bind+0xa0/0xa0 [ 146.045788][ T6214] ? netlink_ack+0xb50/0xb50 [ 146.050383][ T6214] ? __lock_acquire+0x7d10/0x7d10 [ 146.055412][ T6214] sock_diag_rcv+0x26/0x40 [ 146.059838][ T6214] netlink_unicast+0x774/0x920 [ 146.064608][ T6214] netlink_sendmsg+0x8ba/0xbe0 [ 146.069372][ T6214] ? netlink_getsockopt+0x570/0x570 [ 146.074567][ T6214] ? aa_sock_msg_perm+0x94/0x150 [ 146.079500][ T6214] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 146.084791][ T6214] ? security_socket_sendmsg+0x7c/0xa0 [ 146.090260][ T6214] sock_write_iter+0x2a6/0x3a0 [ 146.095027][ T6214] ? sock_read_iter+0x380/0x380 [ 146.099879][ T6214] do_iter_readv_writev+0x47e/0x5f0 [ 146.105075][ T6214] ? aa_path_link+0x880/0x880 [ 146.109748][ T6214] ? generic_file_rw_checks+0x280/0x280 [ 146.115327][ T6214] ? common_file_perm+0x171/0x1c0 [ 146.120361][ T6214] ? fsnotify_perm+0x5d/0x560 [ 146.125040][ T6214] ? security_file_permission+0x75/0xa0 [ 146.130627][ T6214] do_iter_write+0x205/0x7b0 [ 146.135220][ T6214] ? import_iovec+0x6f/0xa0 [ 146.139734][ T6214] do_writev+0x281/0x480 [ 146.143990][ T6214] ? do_readv+0x460/0x460 [ 146.148329][ T6214] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 146.154320][ T6214] ? lock_chain_count+0x20/0x20 [ 146.159174][ T6214] ? vtime_user_exit+0x2c8/0x3e0 [ 146.164125][ T6214] ? lockdep_hardirqs_on+0x94/0x140 [ 146.169358][ T6214] do_syscall_64+0x4c/0xa0 [ 146.173780][ T6214] ? clear_bhb_loop+0x30/0x80 [ 146.178462][ T6214] ? clear_bhb_loop+0x30/0x80 [ 146.183144][ T6214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.189032][ T6214] RIP: 0033:0x7f3af0d25e59 [ 146.193478][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.213181][ T6214] RSP: 002b:00007f3aeef7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 146.221612][ T6214] RAX: ffffffffffffffda RBX: 00007f3af0f9efa0 RCX: 00007f3af0d25e59 [ 146.229595][ T6214] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 146.237682][ T6214] RBP: 00007f3af0dbbd6f R08: 0000000000000000 R09: 0000000000000000 [ 146.245682][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.253664][ T6214] R13: 00007f3af0f9f038 R14: 00007f3af0f9efa0 R15: 00007fff2add73c8 [ 146.261665][ T6214] [ 146.265090][ T6214] Kernel Offset: disabled [ 146.269432][ T6214] Rebooting in 86400 seconds..