last executing test programs: 55.110102368s ago: executing program 3 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f00000000c0)={0x18, 0x0, 0x71, 0x10001}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setns(0xc9, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00) write(r2, &(0x7f0000000800)='0', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 50.749181198s ago: executing program 3 (id=279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 49.82497511s ago: executing program 3 (id=283): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 49.57153328s ago: executing program 3 (id=284): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 49.332664276s ago: executing program 3 (id=289): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x5d, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x20000811) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) inotify_add_watch(r2, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x200000a0) write(r2, &(0x7f0000000400)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x34640, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x200000002}) 48.024452333s ago: executing program 3 (id=294): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) socket(0x40000000015, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x612d, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20, 0x1f0, 0x0, r6}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r8 = openat$hpet(0xffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r9 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r10 = getpid() sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0x2) r11 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, 0x0) syz_ublk_add_dev(r12, r13, r14, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x1}}}, &(0x7f00000004c0)) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0186405, &(0x7f00000002c0)={0x5, 0xd0ac, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x2}) syz_ublk_add_dev(r8, r1, r7, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0x1d1, 0x0, 0x0, 0x1000, 0xdcff, r15, 0x0, 0x92}}}, &(0x7f0000000500)) 32.577259198s ago: executing program 32 (id=294): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) socket(0x40000000015, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x612d, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20, 0x1f0, 0x0, r6}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r8 = openat$hpet(0xffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r9 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r10 = getpid() sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0x2) r11 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, 0x0) syz_ublk_add_dev(r12, r13, r14, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x1}}}, &(0x7f00000004c0)) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0186405, &(0x7f00000002c0)={0x5, 0xd0ac, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x2}) syz_ublk_add_dev(r8, r1, r7, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0x1d1, 0x0, 0x0, 0x1000, 0xdcff, r15, 0x0, 0x92}}}, &(0x7f0000000500)) 10.262689629s ago: executing program 0 (id=418): syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r1, 0x4b72, &(0x7f0000000700)={0x1, 0x9, 0x9, 0x0, 0x12, "0060930000efa48902000000000000ffff00"}) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/586, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfd85) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e000738"], 0x5c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) r6 = socket(0x8, 0x5, 0x7fff) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000140)=""/165, &(0x7f0000000200)=0xa5) 10.022243734s ago: executing program 1 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x154}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x40, 0x38, 0x12}, 0x18) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) syz_fuse_handle_req(r5, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x782810a1, 0x1, 0x1, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000db40)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0x80800000009, 0x0, 0x7, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x0, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_fuse_handle_req(r5, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) 8.184528955s ago: executing program 1 (id=426): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x2, 0x12) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) 7.570352585s ago: executing program 2 (id=428): socket$inet(0x2, 0x800, 0x7) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000140)="d8ba863eca3cec988b0ec48186bf87eab76bb32890a576b5a7430a1ab1800a8ef3de638bbec47bb6e2da0276d527529521b7833b1059faebb1f47ca00bc651b39cdebb9ef78d8ba3c84df74fa5a27e57b5fef9196f842d1768d58d44655cb61003d11e72e98f2c9c1be68c17bb9367", &(0x7f0000000680)="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"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x36, 0x7ff, 0x8, 0x8, 0x40}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xc1}}}}}]}}]}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r1, 0x0, 0x9) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x9) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x808d1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7.05408804s ago: executing program 0 (id=429): unshare(0x4a000200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x7fff, 0x6, 0x200, 0x9, 0xfffffffa, 0x3, 0xb, 0xfff}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x4, 0xffffffff, 0x80, 0x9, 0x6}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_tcp_int(r0, 0x65, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80240, 0x31840384d1ba4a81) finit_module(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x24046850}, 0x0) 5.983109011s ago: executing program 0 (id=433): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d7e599ada862a2ce97c1419e86100000000400", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x249f0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xb) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.897141086s ago: executing program 4 (id=434): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r4, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) close(r2) 5.58743077s ago: executing program 2 (id=435): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}, "00000000c00000d2"}}}}}, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) 4.810117911s ago: executing program 1 (id=436): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffff9c, &(0x7f00000002c0)='./file0\x00', 0x351800, 0x15) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$nl_route(r1, 0x0, 0x0) r5 = dup(r0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r8, 0x1, 0x3e, 0x0, &(0x7f0000000640)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280)={0x0, 0x0, 0xfd8b, 0x8, r7}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000380)=0xfd) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 4.65590107s ago: executing program 4 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000100)="11e5a68e291a6f297bca1e72499a1c0b73c1486bc5cd08a7132b5dc14c", 0x1d, 0x40, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000380)={0x3, r0, 'id0\x00'}) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) 3.659114875s ago: executing program 1 (id=438): fsopen(0x0, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x206) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="042fff01"], 0x102) getsockopt(0xffffffffffffffff, 0x400, 0x10001, &(0x7f0000000480)=""/165, &(0x7f0000000580)=0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x174a9bb6, 0x0, 0x3}) chdir(0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0xe503, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0xdc120f38dc45bb1c, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x6a040000) 3.658836374s ago: executing program 2 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3.655642408s ago: executing program 0 (id=446): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff06a660001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.611457714s ago: executing program 4 (id=440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) r4 = syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xe000003, 0x52424752, 0x3, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x9, 0x5}, {0x2, 0x10001}}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.9194559s ago: executing program 2 (id=441): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x1bf, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', 0x0, 0x1008840, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 2.487678665s ago: executing program 4 (id=442): unshare(0x4a000200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x7fff, 0x6, 0x200, 0x9, 0xfffffffa, 0x3, 0xb, 0xfff}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x4, 0xffffffff, 0x80, 0x9, 0x6}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_tcp_int(r0, 0x65, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80240, 0x31840384d1ba4a81) finit_module(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x24046850}, 0x0) 2.014854537s ago: executing program 0 (id=443): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') 1.614420726s ago: executing program 2 (id=444): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.181754061s ago: executing program 2 (id=445): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x2, 0x12) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) 1.013987941s ago: executing program 4 (id=447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeee0000, 0x2000, &(0x7f0000f8d000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000f4e000/0x3000)=nil}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x24, 0x12, 0x0, 0x101, 0x70bd27, 0x25dfdbfa, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x43}]}]}, 0x24}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) close(0x3) syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x20000) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getspdinfo={0x14, 0x25, 0x300, 0x70bd25, 0x25dfdbfc, 0x3da, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4004048) close(0x4) syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) 834.186714ms ago: executing program 1 (id=448): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x2, [0xd1, 0x8b]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 450.980343ms ago: executing program 0 (id=449): socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000), 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) r4 = syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x1a16, 0x0, 0x6, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x92cc, 0x800, 0x3, 0x80000259, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x2000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xefa7, 0x0, 0x2, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x502d, 0x80000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x755, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 89.490041ms ago: executing program 4 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0x1d6b', 0x6) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000b00), 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 0s ago: executing program 1 (id=451): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) socket(0x40000000015, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x612d, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20, 0x1f0, 0x0, r6}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r8 = openat$hpet(0xffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r9 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r10 = getpid() sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0x2) r11 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000200)={0x2e, 0x0, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x1}}}, &(0x7f00000004c0)) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0186405, &(0x7f00000002c0)={0x5, 0xd0ac, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x2}) syz_ublk_add_dev(r8, r1, r7, r15, &(0x7f0000000400)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0x1d1, 0x0, 0x0, 0x1000, 0xdcff, r16, 0x0, 0x92}}}, &(0x7f0000000500)) kernel console output (not intermixed with test programs): idge0: port 2(bridge_slave_1) entered forwarding state [ 50.457939][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.467075][ T5094] Bluetooth: hci3: command tx timeout [ 50.467248][ T5094] Bluetooth: hci2: command tx timeout [ 50.467415][ T5746] Bluetooth: hci0: command tx timeout [ 50.471243][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.474831][ T65] Bluetooth: hci1: command tx timeout [ 50.484873][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.484963][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.486344][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.486387][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.541074][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.593084][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.600205][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.600681][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.612955][ T812] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.613037][ T812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.894337][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.923534][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.927413][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.942609][ T5736] veth0_vlan: entered promiscuous mode [ 50.957076][ T5736] veth1_vlan: entered promiscuous mode [ 50.987854][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.010568][ T5741] veth0_vlan: entered promiscuous mode [ 51.025683][ T5742] veth0_vlan: entered promiscuous mode [ 51.034037][ T5736] veth0_macvtap: entered promiscuous mode [ 51.037892][ T5736] veth1_macvtap: entered promiscuous mode [ 51.039033][ T5741] veth1_vlan: entered promiscuous mode [ 51.043375][ T5742] veth1_vlan: entered promiscuous mode [ 51.089789][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.109072][ T5740] veth0_vlan: entered promiscuous mode [ 51.111065][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.128997][ T5742] veth0_macvtap: entered promiscuous mode [ 51.152139][ T5742] veth1_macvtap: entered promiscuous mode [ 51.160614][ T5741] veth0_macvtap: entered promiscuous mode [ 51.166316][ T5740] veth1_vlan: entered promiscuous mode [ 51.168598][ T5741] veth1_macvtap: entered promiscuous mode [ 51.203345][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.230283][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.245606][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.250952][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.250973][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.260546][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.280583][ T5740] veth0_macvtap: entered promiscuous mode [ 51.309481][ T5740] veth1_macvtap: entered promiscuous mode [ 51.327540][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.327562][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.343184][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.378469][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.415364][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.415383][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.435691][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.442584][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.442602][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.459269][ T5736] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.463988][ T5736] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.466745][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.467273][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.467601][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.469663][ T5736] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.484026][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.484044][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.499396][ T5736] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.508512][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508553][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508584][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508615][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508645][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508675][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508705][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508736][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508766][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508796][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508826][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508857][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.549623][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.549636][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.570412][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.570435][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.586595][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.623466][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.623492][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.118109][ T5896] pci_bus 0000:01: busn_res: [bus 01] is released [ 52.205969][ T5905] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 52.213823][ T5905] pci 0000:00:04.0: PCI bridge to [bus 01] [ 52.214123][ T5905] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 52.214249][ T5905] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 52.216805][ T5905] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 52.217783][ T5905] pci 0000:00:04.0: enabling Extended Tags [ 52.233151][ T5905] pci 0000:00:04.0: Adding to iommu group 4 [ 52.284261][ T5905] pci 0000:00:04.0: PCI bridge to [bus 01] [ 52.288383][ T5905] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 52.288417][ T5905] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 52.288488][ T5905] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 52.288503][ T5905] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 52.288518][ T5905] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 52.288580][ T5905] pci 0000:00:04.0: PCI bridge to [bus 01] [ 52.288644][ T5905] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 52.290013][ T5905] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 52.290896][ T5905] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 52.502241][ T5905] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 52.544567][ T65] Bluetooth: hci1: command tx timeout [ 52.557403][ T65] Bluetooth: hci0: command tx timeout [ 52.557436][ T65] Bluetooth: hci2: command tx timeout [ 52.557457][ T65] Bluetooth: hci3: command tx timeout [ 52.579881][ T5905] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 53.040582][ T5920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.051328][ T5920] usb 1-1: USB disconnect, device number 2 [ 53.227163][ T5920] hub 1-0:1.0: USB hub found [ 53.229958][ T5920] hub 1-0:1.0: 6 ports detected [ 53.414846][ T9] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 53.597771][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 53.615423][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 53.615442][ T9] usb 1-1: Product: QEMU USB Tablet [ 53.615451][ T9] usb 1-1: Manufacturer: QEMU [ 53.615459][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 53.662150][ T5933] syzkaller0: entered promiscuous mode [ 53.662176][ T5933] syzkaller0: entered allmulticast mode [ 53.691146][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input5 [ 53.728737][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 53.728753][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 53.805259][ T9] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 54.115570][ T5945] syzkaller0: entered promiscuous mode [ 54.115591][ T5945] syzkaller0: entered allmulticast mode [ 54.540184][ T5958] Zero length message leads to an empty skb [ 54.544092][ T5958] jffs2: notice: (5958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 54.624956][ T5746] Bluetooth: hci3: command tx timeout [ 54.624984][ T5746] Bluetooth: hci2: command tx timeout [ 54.624999][ T5746] Bluetooth: hci0: command tx timeout [ 54.625012][ T5746] Bluetooth: hci1: command tx timeout [ 56.026929][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.096204][ T77] Process accounting resumed [ 56.208444][ T35] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 56.214931][ T35] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 56.219563][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 56.219588][ T35] usb 7-1: Product: syz [ 56.219631][ T35] usb 7-1: Manufacturer: syz [ 56.244983][ T5980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.267964][ T35] iuu_phoenix 7-1:1.0: iuu_phoenix converter detected [ 56.278404][ T35] usb 7-1: iuu_phoenix converter now attached to ttyUSB0 [ 56.707173][ T5746] Bluetooth: hci0: command tx timeout [ 56.707205][ T5746] Bluetooth: hci2: command tx timeout [ 56.707225][ T5746] Bluetooth: hci3: command tx timeout [ 56.707259][ T65] Bluetooth: hci1: command tx timeout [ 56.992638][ T5985] syzkaller0: entered promiscuous mode [ 56.992662][ T5985] syzkaller0: entered allmulticast mode [ 57.029348][ T5992] syzkaller0: entered promiscuous mode [ 57.029371][ T5992] syzkaller0: entered allmulticast mode [ 57.156731][ T6006] loop0: detected capacity change from 0 to 32768 [ 57.167058][ T6006] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 57.394820][ T42] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.397431][ T6006] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 57.566508][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 57.567965][ T42] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 57.569779][ T42] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 57.569801][ T42] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 57.569831][ T42] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 57.569851][ T42] usb 8-1: config 168 interface 0 has no altsetting 0 [ 57.576687][ T42] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 57.576764][ T42] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 57.576793][ T42] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 57.576816][ T42] usb 8-1: config 168 interface 0 has no altsetting 0 [ 57.589474][ T9] usb 7-1: USB disconnect, device number 2 [ 57.616074][ T42] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 57.617054][ T42] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 57.617073][ T42] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 57.617091][ T42] usb 8-1: config 168 interface 0 has no altsetting 0 [ 57.646702][ T42] usb 8-1: string descriptor 0 read error: -22 [ 57.646761][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.666090][ T42] adutux 8-1:168.0: interrupt endpoints not found [ 57.685988][ T9] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 57.694231][ T9] iuu_phoenix 7-1:1.0: device disconnected [ 57.879515][ T5885] usb 8-1: USB disconnect, device number 2 [ 58.101213][ T6004] comedi comedi3: comedi_config --init_data is deprecated [ 58.543071][ T6033] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.626784][ T6033] md: md0 stopped. [ 60.169621][ T6059] fuse: blksize only supported for fuseblk [ 60.563251][ T6079] binder_alloc: 6075: pid 6075 spamming oneway? 1 buffers allocated for a total size of 4096 [ 60.566108][ T6079] binder_alloc: 6075: pid 6075 spamming oneway? 2 buffers allocated for a total size of 5120 [ 60.651950][ T6082] syzkaller0: entered promiscuous mode [ 60.651964][ T6082] syzkaller0: entered allmulticast mode [ 60.744616][ T5984] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 60.755043][ T6087] macvlan2: entered allmulticast mode [ 60.756743][ T6087] dummy0: entered allmulticast mode [ 60.757483][ T6087] dummy0: entered promiscuous mode [ 60.761083][ T6087] team0: Port device macvlan2 added [ 60.829119][ T5094] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 60.895504][ T5984] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 60.899919][ T5984] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.899943][ T5984] usb 7-1: config 0 has no interfaces? [ 60.899968][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.903880][ T5984] usb 7-1: config 0 descriptor?? [ 61.064156][ T6097] Trying to write to read-only block-device nullb0 [ 61.206248][ T5984] usb 7-1: USB disconnect, device number 3 [ 61.805910][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.805927][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.805937][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.805946][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.805955][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.805963][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.805973][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.805981][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.805989][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.805997][ T6110] tc action pedit unable to extract header offset for header type (0x5) [ 61.806051][ T6110] 0: reclassify loop, rule prio 0, protocol 800 [ 61.997086][ T6105] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 62.205887][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 62.211476][ T6115] macvtap1: entered promiscuous mode [ 62.211492][ T6115] dummy0: entered promiscuous mode [ 62.211680][ T6115] macvtap1: entered allmulticast mode [ 62.211690][ T6115] dummy0: entered allmulticast mode [ 62.568192][ T6119] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 62.637333][ T6124] tipc: Started in network mode [ 62.637361][ T6124] tipc: Node identity 3a4efb790786, cluster identity 4711 [ 62.637603][ T6124] tipc: Enabled bearer , priority 0 [ 62.638881][ T6124] syzkaller0: entered promiscuous mode [ 62.638899][ T6124] syzkaller0: entered allmulticast mode [ 62.644903][ T6124] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 62.660105][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 62.666558][ T6124] tipc: Resetting bearer [ 62.675183][ T6123] tipc: Resetting bearer [ 62.697880][ T6123] tipc: Disabling bearer [ 62.924151][ T6134] Bluetooth: MGMT ver 1.23 [ 62.928899][ T6107] workqueue: Failed to create a rescuer kthread for wq "dm-thin": -EINTR [ 63.076860][ T6142] syzkaller0: entered promiscuous mode [ 63.076884][ T6142] syzkaller0: entered allmulticast mode [ 63.083644][ T6142] tipc: Enabled bearer , priority 0 [ 63.088347][ T6142] tipc: Resetting bearer [ 63.093868][ T6139] tipc: Resetting bearer [ 63.108887][ T6139] tipc: Disabling bearer [ 63.134294][ T6141] tc action pedit offset 8 out of bounds [ 63.165993][ T6107] device-mapper: table: 248:2: thin-pool: Error creating pool's workqueue (-ENOMEM) [ 63.166022][ T6107] device-mapper: ioctl: error adding target to table [ 63.286142][ T6147] syzkaller0: entered promiscuous mode [ 63.286162][ T6147] syzkaller0: entered allmulticast mode [ 63.309384][ T6149] syz_tun: entered allmulticast mode [ 63.376393][ T6152] syzkaller0: entered promiscuous mode [ 63.376414][ T6152] syzkaller0: entered allmulticast mode [ 63.395672][ T6152] tipc: Started in network mode [ 63.395697][ T6152] tipc: Node identity b67845c5a728, cluster identity 4711 [ 63.396061][ T6152] tipc: Enabled bearer , priority 0 [ 63.405706][ T6152] tipc: Resetting bearer [ 63.411550][ T6151] tipc: Resetting bearer [ 63.422300][ T6151] tipc: Disabling bearer [ 63.435433][ T6143] syz_tun: left allmulticast mode [ 63.966757][ T43] audit: type=1326 audit(1789568715.585:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 63.967008][ T43] audit: type=1326 audit(1789568715.585:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 63.972619][ T43] audit: type=1326 audit(1789568715.585:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 63.972661][ T43] audit: type=1326 audit(1789568715.585:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 63.972703][ T43] audit: type=1326 audit(1789568715.585:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 63.973271][ T43] audit: type=1326 audit(1789568715.585:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71175ab code=0x7ffc0000 [ 63.973632][ T43] audit: type=1326 audit(1789568715.585:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 63.973827][ T43] audit: type=1326 audit(1789568715.585:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 63.983626][ T43] audit: type=1326 audit(1789568715.585:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 64.026971][ T6167] lo: entered allmulticast mode [ 64.027347][ T6167] tunl0: entered allmulticast mode [ 64.027674][ T6167] gre0: entered allmulticast mode [ 64.027923][ T6167] gretap0: entered allmulticast mode [ 64.028279][ T6167] erspan0: entered allmulticast mode [ 64.028511][ T6167] ip_vti0: entered allmulticast mode [ 64.028801][ T6167] ip6_vti0: entered allmulticast mode [ 64.029028][ T6167] sit0: entered allmulticast mode [ 64.029415][ T6167] ip6tnl0: entered allmulticast mode [ 64.029645][ T6167] ip6gre0: entered allmulticast mode [ 64.029896][ T6167] syz_tun: entered allmulticast mode [ 64.031090][ T6167] ip6gretap0: entered allmulticast mode [ 64.032734][ T6167] bridge0: entered allmulticast mode [ 64.033052][ T6167] vcan0: entered allmulticast mode [ 64.033379][ T6167] bond0: entered allmulticast mode [ 64.033393][ T6167] bond_slave_0: entered allmulticast mode [ 64.033408][ T6167] bond_slave_1: entered allmulticast mode [ 64.034153][ T6167] team0: entered allmulticast mode [ 64.034168][ T6167] team_slave_0: entered allmulticast mode [ 64.034182][ T6167] team_slave_1: entered allmulticast mode [ 64.035840][ T6167] nlmon0: entered allmulticast mode [ 64.036207][ T6167] batadv0: entered allmulticast mode [ 64.036758][ T6167] vxcan0: entered allmulticast mode [ 64.039592][ T6167] vxcan1: entered allmulticast mode [ 64.039964][ T6167] veth0: entered allmulticast mode [ 64.040293][ T6167] veth1: entered allmulticast mode [ 64.040877][ T6167] wg0: entered allmulticast mode [ 64.041249][ T6167] wg1: entered allmulticast mode [ 64.041616][ T6167] wg2: entered allmulticast mode [ 64.042116][ T6167] veth0_to_bridge: entered allmulticast mode [ 64.043017][ T6167] bridge_slave_0: left promiscuous mode [ 64.045353][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.060291][ T6167] veth1_to_bridge: entered allmulticast mode [ 64.060998][ T6167] bridge_slave_1: left promiscuous mode [ 64.061305][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.079614][ T43] audit: type=1326 audit(1789568715.695:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.76" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 64.102502][ T6167] veth0_to_bond: entered allmulticast mode [ 64.145398][ T6167] bond0: (slave bond_slave_0): Releasing backup interface [ 64.197838][ T6167] veth1_to_bond: entered allmulticast mode [ 64.213843][ T6167] bond0: (slave bond_slave_1): Releasing backup interface [ 64.227685][ T6167] veth0_to_team: entered allmulticast mode [ 64.243832][ T6167] team0: Port device team_slave_0 removed [ 64.244233][ T6167] veth1_to_team: entered allmulticast mode [ 64.267930][ T6167] team0: Port device team_slave_1 removed [ 64.268348][ T6167] veth0_to_batadv: entered allmulticast mode [ 64.268618][ T6167] batadv_slave_0: entered allmulticast mode [ 64.268763][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.268823][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.271978][ T6167] veth1_to_batadv: entered allmulticast mode [ 64.274099][ T6167] batadv_slave_1: entered allmulticast mode [ 64.274243][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.274259][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.307844][ T6167] xfrm0: entered allmulticast mode [ 64.308120][ T6167] veth0_to_hsr: entered allmulticast mode [ 64.308403][ T6167] hsr_slave_0: entered allmulticast mode [ 64.308686][ T6167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.395486][ T6171] FAULT_INJECTION: forcing a failure. [ 64.395486][ T6171] name failslab, interval 1, probability 0, space 0, times 1 [ 64.395508][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: syz.2.78 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.395523][ T6171] Tainted: [L]=SOFTLOCKUP [ 64.395527][ T6171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.395533][ T6171] Call Trace: [ 64.395537][ T6171] [ 64.395541][ T6171] dump_stack_lvl+0x100/0x190 [ 64.395606][ T6171] should_fail_ex.cold+0x5/0xa [ 64.395630][ T6171] should_failslab+0xc2/0x120 [ 64.395670][ T6171] kmem_cache_alloc_noprof+0x92/0x6a0 [ 64.395684][ T6171] ? do_epoll_ctl_file+0x237d/0x36e0 [ 64.395703][ T6171] do_epoll_ctl_file+0x237d/0x36e0 [ 64.395723][ T6171] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 64.395738][ T6171] ? lock_acquire+0x1d1/0x380 [ 64.395752][ T6171] ? __fget_files+0x34/0x3d0 [ 64.395764][ T6171] ? find_held_lock+0x2b/0x80 [ 64.395775][ T6171] ? __fget_files+0x215/0x3d0 [ 64.395789][ T6171] ? __fget_files+0x21f/0x3d0 [ 64.395804][ T6171] ? do_epoll_ctl+0xfd/0x1a0 [ 64.395817][ T6171] do_epoll_ctl+0xfd/0x1a0 [ 64.395832][ T6171] ? __pfx_do_epoll_ctl+0x10/0x10 [ 64.395850][ T6171] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 64.395865][ T6171] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 64.395885][ T6171] __do_fast_syscall_32+0x13a/0x8b0 [ 64.395906][ T6171] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.395923][ T6171] do_fast_syscall_32+0x32/0x70 [ 64.395939][ T6171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.395953][ T6171] RIP: 0023:0xf7f14fec [ 64.395966][ T6171] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 64.395971][ T6171] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 64.395981][ T6171] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 64.395988][ T6171] RDX: 0000000000000005 RSI: 0000000080000500 RDI: 0000000000000000 [ 64.395994][ T6171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.395999][ T6171] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.396005][ T6171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.396018][ T6171] [ 64.549587][ T6173] tipc: Enabled bearer , priority 0 [ 64.550995][ T6173] syzkaller0: entered promiscuous mode [ 64.551017][ T6173] syzkaller0: entered allmulticast mode [ 64.562213][ T6175] ======================================================= [ 64.562213][ T6175] WARNING: The mand mount option has been deprecated and [ 64.562213][ T6175] and is ignored by this kernel. Remove the mand [ 64.562213][ T6175] option from the mount to silence this warning. [ 64.562213][ T6175] ======================================================= [ 64.562617][ T6175] ecryptfs: Unknown parameter 'ecryptfs_cipher}aesecŒ|}«' [ 64.565445][ T6175] warning: `syz.2.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.578393][ T6173] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 64.791443][ T6177] tipc: Resetting bearer [ 64.800703][ T6172] tipc: Resetting bearer [ 64.811693][ T6172] tipc: Disabling bearer [ 66.738934][ T6213] syz.1.88 uses obsolete (PF_INET,SOCK_PACKET) [ 66.810340][ T6193] veth1_vlan: entered allmulticast mode [ 66.826368][ T6206] syzkaller0: entered promiscuous mode [ 66.826382][ T6206] syzkaller0: entered allmulticast mode [ 66.940694][ T6220] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.012542][ T6220] kvm: pic: non byte read [ 67.018793][ T6220] kvm: pic: level sensitive irq not supported [ 67.019296][ T6220] kvm: pic: non byte read [ 67.021076][ T6220] kvm: pic: level sensitive irq not supported [ 67.021687][ T6220] kvm: pic: non byte read [ 67.023391][ T6220] kvm: pic: level sensitive irq not supported [ 67.023762][ T6220] kvm: pic: non byte read [ 67.049846][ T6220] kvm: pic: level sensitive irq not supported [ 67.050800][ T6220] kvm: pic: non byte read [ 67.719771][ T5094] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 67.719797][ T5094] CPU: 2 UID: 0 PID: 5094 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.719827][ T5094] Tainted: [L]=SOFTLOCKUP [ 67.719834][ T5094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.719847][ T5094] Workqueue: hci1 hci_rx_work [ 67.719887][ T5094] Call Trace: [ 67.719894][ T5094] [ 67.719902][ T5094] dump_stack_lvl+0x100/0x190 [ 67.719931][ T5094] sysfs_warn_dup.cold+0x1c/0x28 [ 67.719961][ T5094] sysfs_create_dir_ns+0x24b/0x2b0 [ 67.719985][ T5094] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 67.720005][ T5094] ? find_held_lock+0x2b/0x80 [ 67.720025][ T5094] ? kobject_add_internal+0x25f/0x930 [ 67.720046][ T5094] ? kobject_add_internal+0x25f/0x930 [ 67.720070][ T5094] ? do_raw_spin_unlock+0x145/0x1e0 [ 67.720090][ T5094] kobject_add_internal+0x2c8/0x930 [ 67.720117][ T5094] kobject_add+0x16a/0x1e0 [ 67.720139][ T5094] ? __pfx_kobject_add+0x10/0x10 [ 67.720161][ T5094] ? class_to_subsys+0x10f/0x150 [ 67.720193][ T5094] ? kobject_put+0xb9/0x640 [ 67.720211][ T5094] ? _raw_spin_unlock+0x28/0x50 [ 67.720242][ T5094] device_add+0x294/0x1970 [ 67.720271][ T5094] ? __pfx_dev_set_name+0x10/0x10 [ 67.720292][ T5094] ? __pfx_device_add+0x10/0x10 [ 67.720321][ T5094] ? mgmt_send_event_skb+0x2fb/0x460 [ 67.720355][ T5094] hci_conn_add_sysfs+0x1a3/0x260 [ 67.720385][ T5094] le_conn_complete_evt+0x122f/0x2130 [ 67.720416][ T5094] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 67.720440][ T5094] ? hci_event_packet+0x186/0xcd0 [ 67.720470][ T5094] hci_le_conn_complete_evt+0x23c/0x3a0 [ 67.720496][ T5094] ? skb_pull_data+0x15f/0x1e0 [ 67.720518][ T5094] hci_le_meta_evt+0x34a/0x5f0 [ 67.720544][ T5094] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 67.720573][ T5094] hci_event_packet+0x51c/0xcd0 [ 67.720598][ T5094] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 67.720625][ T5094] ? __pfx_hci_event_packet+0x10/0x10 [ 67.720655][ T5094] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.720695][ T5094] hci_rx_work+0x451/0xfc0 [ 67.720724][ T5094] process_one_work+0xac7/0x1b10 [ 67.720761][ T5094] ? __pfx_process_one_work+0x10/0x10 [ 67.720786][ T5094] ? lock_acquire+0x1d1/0x380 [ 67.720821][ T5094] ? __pfx_hci_rx_work+0x10/0x10 [ 67.720847][ T5094] worker_thread+0x5ef/0xe50 [ 67.720872][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 67.720895][ T5094] ? kthread+0x13a/0x450 [ 67.720912][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 67.720939][ T5094] kthread+0x373/0x450 [ 67.720959][ T5094] ? __pfx_kthread+0x10/0x10 [ 67.720982][ T5094] ret_from_fork+0x730/0xd60 [ 67.721011][ T5094] ? __pfx_ret_from_fork+0x10/0x10 [ 67.721041][ T5094] ? __switch_to+0x800/0x10f0 [ 67.721086][ T5094] ? __pfx_kthread+0x10/0x10 [ 67.721109][ T5094] ret_from_fork_asm+0x1a/0x30 [ 67.721143][ T5094] [ 67.721273][ T5094] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 67.721306][ T5094] Bluetooth: hci1: failed to register connection device [ 67.864887][ T6232] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.047616][ T6239] veth1_vlan: entered allmulticast mode [ 68.257507][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257520][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257525][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257530][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257535][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257540][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257545][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257550][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257555][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257561][ T6241] tc action pedit 'at' offset 5 out of bounds [ 68.257571][ T6241] 0: reclassify loop, rule prio 0, protocol 800 [ 68.627113][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.796699][ T9] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 68.797792][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.798741][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.807646][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.807660][ T9] usb 6-1: Product: syz [ 68.807667][ T9] usb 6-1: Manufacturer: syz [ 68.807674][ T9] usb 6-1: SerialNumber: syz [ 68.814599][ T9] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 68.839426][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 68.848130][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 69.940330][ T6262] binder: 6260:6262 ioctl c00c6211 0 returned -14 [ 69.998677][ T6263] loop2: detected capacity change from 0 to 2640 [ 70.051149][ T6263] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 70.051334][ T6263] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 70.051359][ T6263] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 70.051377][ T6263] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 70.051421][ T6263] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 70.051470][ T6263] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 70.051678][ T6263] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 70.051703][ T6263] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 70.051721][ T6263] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 70.051801][ T6263] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 70.882354][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.883029][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.892981][ T50] cfg80211: failed to load regulatory.db [ 72.723658][ T6243] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 72.814534][ T6243] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 72.814634][ T6243] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 72.890757][ T6243] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 72.894507][ T6243] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 72.895950][ T9] usb 6-1: USB disconnect, device number 2 [ 72.919093][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 72.934156][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 72.942742][ T9] ti_usb_3410_5052 6-1:2.0: device disconnected [ 73.675822][ T6302] binder: 6300:6302 ioctl 4018620d 0 returned -22 [ 73.681904][ T6302] binder: 6300:6302 ioctl c0306201 80000640 returned -22 [ 73.714206][ T6305] netlink: 'syz.3.120': attribute type 10 has an invalid length. [ 73.716455][ T6305] team0: Device dummy0 is already a lower device of the team interface [ 73.877961][ T6312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.121'. [ 74.102448][ T6317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.122'. [ 76.012678][ T5748] udevd[5748]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 76.252466][ T6333] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 77.359005][ T6355] syzkaller0: entered promiscuous mode [ 77.359035][ T6355] syzkaller0: entered allmulticast mode [ 77.749098][ T6358] veth1_vlan: entered allmulticast mode [ 78.455124][ T6368] veth1_vlan: entered allmulticast mode [ 78.891171][ T6374] syzkaller0: entered promiscuous mode [ 78.891192][ T6374] syzkaller0: entered allmulticast mode [ 78.986397][ T6375] syzkaller0: entered promiscuous mode [ 78.986419][ T6375] syzkaller0: entered allmulticast mode [ 80.822129][ T6402] FAULT_INJECTION: forcing a failure. [ 80.822129][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 80.822183][ T6402] CPU: 0 UID: 0 PID: 6402 Comm: syz.3.149 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.822209][ T6402] Tainted: [L]=SOFTLOCKUP [ 80.822215][ T6402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.822221][ T6402] Call Trace: [ 80.822225][ T6402] [ 80.822229][ T6402] dump_stack_lvl+0x100/0x190 [ 80.822247][ T6402] should_fail_ex.cold+0x5/0xa [ 80.822263][ T6402] should_failslab+0xc2/0x120 [ 80.822279][ T6402] __kvmalloc_node_noprof+0x113/0x9b0 [ 80.822293][ T6402] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 80.822307][ T6402] ? ceph_msg_new2+0x370/0x4f0 [ 80.822324][ T6402] ceph_msg_new2+0x370/0x4f0 [ 80.822339][ T6402] ceph_monc_init+0x63d/0xcd0 [ 80.822353][ T6402] ceph_create_client+0x25e/0x370 [ 80.822366][ T6402] ceph_get_tree+0x1a4/0x1fd0 [ 80.822379][ T6402] ? bpf_lsm_capable+0x9/0x10 [ 80.822394][ T6402] ? security_capable+0x80/0x260 [ 80.822409][ T6402] vfs_get_tree+0x92/0x320 [ 80.822425][ T6402] vfs_cmd_create+0xd7/0x2a0 [ 80.822442][ T6402] __do_sys_fsconfig+0x55a/0xcb0 [ 80.822460][ T6402] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 80.822476][ T6402] ? xfd_validate_state+0x129/0x190 [ 80.822498][ T6402] __do_fast_syscall_32+0x13a/0x8b0 [ 80.822522][ T6402] do_fast_syscall_32+0x32/0x70 [ 80.822538][ T6402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.822553][ T6402] RIP: 0023:0xf6fdefec [ 80.822566][ T6402] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 80.822572][ T6402] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 80.822583][ T6402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 80.822613][ T6402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.822634][ T6402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.822643][ T6402] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.822650][ T6402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.822664][ T6402] [ 80.972937][ T6407] syzkaller0: entered promiscuous mode [ 80.972957][ T6407] syzkaller0: entered allmulticast mode [ 81.093511][ T6412] syzkaller0: entered promiscuous mode [ 81.093525][ T6412] syzkaller0: entered allmulticast mode [ 81.184462][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 81.324577][ T854] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 81.499610][ T854] usb 6-1: Using ep0 maxpacket: 32 [ 81.503227][ T854] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 81.505092][ T854] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 81.505112][ T854] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 81.505128][ T854] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 81.505141][ T854] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 81.505153][ T854] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.506679][ T854] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 81.506695][ T854] usb 6-1: Product: syz [ 81.506706][ T854] usb 6-1: Manufacturer: syz [ 81.506716][ T854] usb 6-1: SerialNumber: syz [ 81.509512][ T854] usb 6-1: config 0 descriptor?? [ 81.537425][ T854] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 81.555780][ T854] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 81.860146][ T5884] usb 6-1: USB disconnect, device number 3 [ 82.077214][ T5884] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 82.834125][ T6434] pim6reg: entered allmulticast mode [ 82.874706][ T6433] pim6reg: left allmulticast mode [ 83.159939][ T6439] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.668101][ T6456] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 84.708991][ T812] rtrs_client L2018: : CM error (CM event: address error, err: -ENODEV) [ 84.733108][ T6456] rtrs_client L2636: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 84.891642][ T6464] syzkaller0: entered promiscuous mode [ 84.891663][ T6464] syzkaller0: entered allmulticast mode [ 85.118923][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.509278][ T6477] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 85.687768][ T6480] IPv6: NLM_F_REPLACE set, but no existing node found! [ 87.186070][ T5094] Bluetooth: hci3: command 0x0405 tx timeout [ 87.751533][ T6507] syzkaller0: entered promiscuous mode [ 87.751554][ T6507] syzkaller0: entered allmulticast mode [ 87.766059][ T6507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.797399][ T6509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 87.898566][ T1039] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 88.045022][ T1039] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 88.045851][ T1039] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.045873][ T1039] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.047427][ T1039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.047439][ T1039] usb 6-1: Product: syz [ 88.047467][ T1039] usb 6-1: Manufacturer: syz [ 88.047475][ T1039] usb 6-1: SerialNumber: syz [ 88.120030][ T6523] loop7: detected capacity change from 0 to 16384 [ 88.375972][ T6524] loop7: detected capacity change from 16384 to 0 [ 88.530873][ T5094] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 88.982490][ T6542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 89.014711][ T5884] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 89.174508][ T5884] usb 8-1: Using ep0 maxpacket: 16 [ 89.175799][ T5884] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 89.177167][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 89.179503][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.179515][ T5884] usb 8-1: Product: syz [ 89.179522][ T5884] usb 8-1: Manufacturer: syz [ 89.179529][ T5884] usb 8-1: SerialNumber: syz [ 89.181673][ T5884] usb 8-1: config 0 descriptor?? [ 89.188767][ T5884] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 89.188795][ T5884] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 89.354572][ T77] usb 6-1: USB disconnect, device number 4 [ 89.533757][ T6548] FAULT_INJECTION: forcing a failure. [ 89.533757][ T6548] name failslab, interval 1, probability 0, space 0, times 0 [ 89.533790][ T6548] CPU: 1 UID: 0 PID: 6548 Comm: syz.0.193 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.533817][ T6548] Tainted: [L]=SOFTLOCKUP [ 89.533824][ T6548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.533838][ T6548] Call Trace: [ 89.533845][ T6548] [ 89.533853][ T6548] dump_stack_lvl+0x100/0x190 [ 89.533882][ T6548] should_fail_ex.cold+0x5/0xa [ 89.533909][ T6548] should_failslab+0xc2/0x120 [ 89.533933][ T6548] __kmalloc_noprof+0xfc/0x840 [ 89.533954][ T6548] ? lockdep_init_map_type+0x5c/0x250 [ 89.533979][ T6548] ? multiq_init+0x155/0x2b0 [ 89.534015][ T6548] multiq_init+0x155/0x2b0 [ 89.534036][ T6548] ? __pfx_multiq_init+0x10/0x10 [ 89.534057][ T6548] qdisc_create+0x47b/0x1060 [ 89.534087][ T6548] tc_modify_qdisc+0xdcf/0x2120 [ 89.534119][ T6548] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 89.534161][ T6548] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 89.534182][ T6548] rtnetlink_rcv_msg+0x3c9/0xe90 [ 89.534206][ T6548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.534236][ T6548] ? ref_tracker_free+0x37e/0x6c0 [ 89.534265][ T6548] netlink_rcv_skb+0x159/0x420 [ 89.534287][ T6548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.534315][ T6548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.534344][ T6548] ? netlink_deliver_tap+0x1ae/0xcc0 [ 89.534391][ T6548] netlink_unicast+0x585/0x850 [ 89.534418][ T6548] ? __pfx_netlink_unicast+0x10/0x10 [ 89.534449][ T6548] netlink_sendmsg+0x8b0/0xda0 [ 89.534476][ T6548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.534498][ T6548] ? apparmor_socket_sendmsg+0x165/0x280 [ 89.534527][ T6548] ____sys_sendmsg+0xa4d/0xbe0 [ 89.534543][ T6548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.534566][ T6548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.534596][ T6548] ___sys_sendmsg+0x190/0x1e0 [ 89.534616][ T6548] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.534634][ T6548] ? futex_wait+0x11e/0x370 [ 89.534664][ T6548] ? find_held_lock+0x2b/0x80 [ 89.534700][ T6548] __sys_sendmsg+0x160/0x210 [ 89.534725][ T6548] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.534764][ T6548] __do_fast_syscall_32+0x13a/0x8b0 [ 89.534798][ T6548] do_fast_syscall_32+0x32/0x70 [ 89.534828][ T6548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.534852][ T6548] RIP: 0023:0xf7f45fec [ 89.534875][ T6548] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 89.534883][ T6548] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.534901][ T6548] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800012c0 [ 89.534914][ T6548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.534925][ T6548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.534936][ T6548] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.534949][ T6548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.534976][ T6548] [ 89.860986][ T5884] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 90.473769][ C2] raw-gadget.1 gadget.3: ignoring, device is not running [ 90.484099][ T5884] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 90.485344][ T5884] em28xx 8-1:0.0: board has no eeprom [ 90.655694][ T5884] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 90.655752][ T5884] em28xx 8-1:0.0: dvb set to bulk mode. [ 90.657656][ T854] em28xx 8-1:0.0: Binding DVB extension [ 90.848199][ T5884] usb 8-1: USB disconnect, device number 3 [ 90.911402][ T5884] em28xx 8-1:0.0: Disconnecting em28xx [ 91.681681][ T854] em28xx 8-1:0.0: Registering input extension [ 91.719898][ T5884] em28xx 8-1:0.0: Closing input extension [ 91.937619][ T5884] em28xx: Freeing device [ 94.667405][ T6570] syzkaller0: entered promiscuous mode [ 94.667485][ T6570] syzkaller0: entered allmulticast mode [ 95.964864][ T5884] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 96.154975][ T5884] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.186461][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.186487][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.186506][ T5884] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.186605][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.272213][ T5884] usb 8-1: config 0 descriptor?? [ 96.391936][ T6579] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.585308][ T5884] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 98.185680][ T6589] mmap: syz.0.204 (6589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.318236][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 99.031761][ T5885] usb 8-1: USB disconnect, device number 4 [ 101.905718][ T854] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 102.233281][ T5885] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 102.313185][ T854] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.333597][ T854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.333639][ T854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.333668][ T854] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.333920][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.444784][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 102.454129][ T5885] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.460404][ T854] usb 7-1: config 0 descriptor?? [ 102.496091][ T5885] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 102.496495][ T5885] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.496537][ T5885] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.496573][ T5885] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.496610][ T5885] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.496835][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.261082][ T854] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x4 [ 103.261431][ T854] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xe [ 103.261451][ T854] plantronics 0003:047F:FFFF.0004: item fetching failed at offset 22/24 [ 103.273427][ T854] plantronics 0003:047F:FFFF.0004: parse failed [ 103.274079][ T854] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 103.344714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 103.779051][ T6608] process 'syz.3.209' launched '/dev/fd/6' with NULL argv: empty string added [ 104.339162][ T50] usb 7-1: USB disconnect, device number 4 [ 105.524600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 106.364660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 106.814068][ T5885] usb 6-1: usb_control_msg returned -71 [ 106.815835][ T5885] usbtmc 6-1:16.0: can't read capabilities [ 107.091138][ T5885] usb 6-1: USB disconnect, device number 5 [ 107.843684][ T6619] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.035279][ T5746] Bluetooth: hci1: command 0x0406 tx timeout [ 109.121053][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 109.409352][ T5094] Bluetooth: hci1: unexpected event for opcode 0x040d [ 110.090851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.561718][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 111.129750][ T6637] FAULT_INJECTION: forcing a failure. [ 111.129750][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 111.129806][ T6637] CPU: 2 UID: 0 PID: 6637 Comm: syz.1.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.129838][ T6637] Tainted: [L]=SOFTLOCKUP [ 111.129855][ T6637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.129874][ T6637] Call Trace: [ 111.129887][ T6637] [ 111.129904][ T6637] dump_stack_lvl+0x100/0x190 [ 111.130004][ T6637] should_fail_ex.cold+0x5/0xa [ 111.130165][ T6637] should_failslab+0xc2/0x120 [ 111.130262][ T6637] __kvmalloc_node_noprof+0x113/0x9b0 [ 111.130302][ T6637] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 111.130361][ T6637] ? ceph_msg_new2+0x370/0x4f0 [ 111.130548][ T6637] ceph_msg_new2+0x370/0x4f0 [ 111.130679][ T6637] ceph_monc_init+0x63d/0xcd0 [ 111.130973][ T6637] ceph_create_client+0x25e/0x370 [ 111.131067][ T6637] ceph_get_tree+0x1a4/0x1fd0 [ 111.131176][ T6637] ? bpf_lsm_capable+0x9/0x10 [ 111.131241][ T6637] ? security_capable+0x80/0x260 [ 111.131447][ T6637] vfs_get_tree+0x92/0x320 [ 111.131539][ T6637] vfs_cmd_create+0xd7/0x2a0 [ 111.131621][ T6637] __do_sys_fsconfig+0x55a/0xcb0 [ 111.131746][ T6637] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 111.131794][ T6637] ? xfd_validate_state+0x129/0x190 [ 111.132148][ T6637] __do_fast_syscall_32+0x13a/0x8b0 [ 111.132271][ T6637] do_fast_syscall_32+0x32/0x70 [ 111.132335][ T6637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.132378][ T6637] RIP: 0023:0xf706efec [ 111.132446][ T6637] Code: Unable to access opcode bytes at 0xf706efc2. [ 111.132461][ T6637] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 111.132494][ T6637] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 111.132512][ T6637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.132529][ T6637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.132547][ T6637] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.132566][ T6637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.132873][ T6637] [ 112.151876][ T6639] null_blk: nullb1: using native zone append [ 112.822107][ T6639] null_blk: disk nullb1 created [ 114.031151][ T6659] FAULT_INJECTION: forcing a failure. [ 114.031151][ T6659] name failslab, interval 1, probability 0, space 0, times 0 [ 114.031190][ T6659] CPU: 3 UID: 0 PID: 6659 Comm: syz.2.222 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.031213][ T6659] Tainted: [L]=SOFTLOCKUP [ 114.031222][ T6659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.031234][ T6659] Call Trace: [ 114.031250][ T6659] [ 114.031271][ T6659] dump_stack_lvl+0x100/0x190 [ 114.031441][ T6659] should_fail_ex.cold+0x5/0xa [ 114.031702][ T6659] should_failslab+0xc2/0x120 [ 114.031794][ T6659] __kvmalloc_node_noprof+0x113/0x9b0 [ 114.031886][ T6659] ? __pfx___mutex_lock+0x10/0x10 [ 114.032014][ T6659] ? nf_hook_entries_grow+0x255/0x870 [ 114.032339][ T6659] nf_hook_entries_grow+0x255/0x870 [ 114.032899][ T6659] __nf_register_net_hook+0x112/0x780 [ 114.033067][ T6659] nf_register_net_hook+0xdb/0x170 [ 114.033182][ T6659] nf_register_net_hooks+0x5d/0xd0 [ 114.033370][ T6659] ip_vs_register_hooks+0xe3/0x150 [ 114.033446][ T6659] ip_vs_add_service+0x515/0x2240 [ 114.033626][ T6659] ? __ip_vs_service_find+0x4d0/0x9c0 [ 114.033829][ T6659] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 114.033871][ T6659] do_ip_vs_set_ctl+0xb86/0xc90 [ 114.034001][ T6659] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 114.034161][ T6659] ? find_held_lock+0x2b/0x80 [ 114.034211][ T6659] ? nf_sockopt_find.isra.0+0x222/0x290 [ 114.034266][ T6659] ? nf_sockopt_find.isra.0+0x222/0x290 [ 114.034576][ T6659] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.035209][ T6659] ? nf_setsockopt+0x8d/0xf0 [ 114.035253][ T6659] nf_setsockopt+0x8d/0xf0 [ 114.035452][ T6659] ip_setsockopt+0xcb/0xf0 [ 114.035694][ T6659] udp_setsockopt+0x64/0xb0 [ 114.035797][ T6659] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 114.035926][ T6659] do_sock_setsockopt+0xf3/0x1d0 [ 114.036183][ T6659] __sys_setsockopt+0x119/0x190 [ 114.036430][ T6659] __ia32_sys_setsockopt+0xbc/0x160 [ 114.036490][ T6659] ? __do_fast_syscall_32+0xb3/0x8b0 [ 114.036674][ T6659] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.036806][ T6659] __do_fast_syscall_32+0x13a/0x8b0 [ 114.037017][ T6659] do_fast_syscall_32+0x32/0x70 [ 114.037098][ T6659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.037156][ T6659] RIP: 0023:0xf7f14fec [ 114.037248][ T6659] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 114.037267][ T6659] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 114.037309][ T6659] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 114.037332][ T6659] RDX: 0000000000000482 RSI: 0000000080000180 RDI: 000000000000002c [ 114.037356][ T6659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.037379][ T6659] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.037403][ T6659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.037932][ T6659] [ 118.879004][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'. [ 120.027743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.789134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 127.361022][ T6681] FAULT_INJECTION: forcing a failure. [ 127.361022][ T6681] name failslab, interval 1, probability 0, space 0, times 0 [ 127.361061][ T6681] CPU: 0 UID: 0 PID: 6681 Comm: syz.2.228 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.361079][ T6681] Tainted: [L]=SOFTLOCKUP [ 127.361086][ T6681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.361095][ T6681] Call Trace: [ 127.361109][ T6681] [ 127.361124][ T6681] dump_stack_lvl+0x100/0x190 [ 127.361218][ T6681] should_fail_ex.cold+0x5/0xa [ 127.361360][ T6681] should_failslab+0xc2/0x120 [ 127.361412][ T6681] __kmalloc_cache_noprof+0x91/0x6d0 [ 127.361461][ T6681] ? ceph_osdmap_alloc+0x40/0x2d0 [ 127.361620][ T6681] ceph_osdmap_alloc+0x40/0x2d0 [ 127.361702][ T6681] ceph_osdc_init+0x433/0xa00 [ 127.361794][ T6681] ceph_create_client+0x281/0x370 [ 127.361877][ T6681] ceph_get_tree+0x1a4/0x1fd0 [ 127.361948][ T6681] ? bpf_lsm_capable+0x9/0x10 [ 127.361988][ T6681] ? security_capable+0x80/0x260 [ 127.362069][ T6681] vfs_get_tree+0x92/0x320 [ 127.362151][ T6681] vfs_cmd_create+0xd7/0x2a0 [ 127.362250][ T6681] __do_sys_fsconfig+0x55a/0xcb0 [ 127.362333][ T6681] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 127.362358][ T6681] ? xfd_validate_state+0x129/0x190 [ 127.362615][ T6681] __do_fast_syscall_32+0x13a/0x8b0 [ 127.362722][ T6681] do_fast_syscall_32+0x32/0x70 [ 127.362800][ T6681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.362862][ T6681] RIP: 0023:0xf7f14fec [ 127.362928][ T6681] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 127.362935][ T6681] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 127.362952][ T6681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 127.362961][ T6681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.362970][ T6681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.362979][ T6681] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.362989][ T6681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.363256][ T6681] [ 127.605129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 128.391999][ T6686] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 128.427176][ T6686] syz_tun: entered promiscuous mode [ 128.660418][ T6686] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 128.673175][ T5816] bond0: (slave bond_slave_0): interface is now down [ 128.673194][ T5816] bond0: (slave bond_slave_1): interface is now down [ 128.673206][ T5816] bond0: (slave syz_tun): interface is now down [ 128.685561][ T5816] bond0: (slave bond_slave_0): interface is now down [ 128.685580][ T5816] bond0: (slave bond_slave_1): interface is now down [ 128.685593][ T5816] bond0: (slave syz_tun): interface is now down [ 128.708787][ T5816] bond0: (slave bond_slave_0): interface is now down [ 128.708812][ T5816] bond0: (slave bond_slave_1): interface is now down [ 128.708829][ T5816] bond0: (slave syz_tun): interface is now down [ 128.724894][ T5816] bond0: (slave bond_slave_0): interface is now down [ 128.724910][ T5816] bond0: (slave bond_slave_1): interface is now down [ 128.724919][ T5816] bond0: (slave syz_tun): interface is now down [ 128.748506][ T5816] bond0: (slave bond_slave_0): interface is now down [ 128.748541][ T5816] bond0: (slave bond_slave_1): interface is now down [ 128.748561][ T5816] bond0: (slave syz_tun): interface is now down [ 128.751617][ T6692] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 128.767786][ T5816] bond0: (slave bond_slave_0): interface is now down [ 128.767811][ T5816] bond0: (slave bond_slave_1): interface is now down [ 128.767825][ T5816] bond0: (slave syz_tun): interface is now down [ 128.819317][ T5816] bond0: now running without any active interface! [ 130.603276][ T5094] Bluetooth: hci3: command 0x0405 tx timeout [ 131.813787][ T6709] batman_adv: batadv0: Adding interface: veth0 [ 131.813804][ T6709] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.813838][ T6709] batman_adv: batadv0: Interface activated: veth0 [ 131.834691][ T6713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.834741][ T6713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.870161][ T6713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.870200][ T6713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.909071][ T6713] batman_adv: batadv0: Interface deactivated: veth0 [ 131.909119][ T6713] batman_adv: batadv0: Removing interface: veth0 [ 132.329546][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.329977][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.627143][ T65] Bluetooth: hci3: command 0x0405 tx timeout [ 134.566151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 138.225337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 139.074842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.818480][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 148.050626][ T50] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 148.073423][ T50] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.091935][ T50] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.136127][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.136149][ T50] usb 7-1: Product: syz [ 148.136162][ T50] usb 7-1: Manufacturer: syz [ 148.136175][ T50] usb 7-1: SerialNumber: syz [ 148.359315][ T50] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 148.445032][ T50] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 148.678678][ T50] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 153.670452][ T6742] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 153.714230][ T6742] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 153.769496][ T5823] usb 7-1: USB disconnect, device number 5 [ 154.347642][ T5823] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 154.481146][ T5823] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 154.515284][ T5823] ti_usb_3410_5052 7-1:2.0: device disconnected [ 155.855257][ T854] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 156.052198][ T854] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 156.108443][ T854] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.109974][ T854] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.223453][ T854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.223487][ T854] usb 7-1: Product: syz [ 156.223509][ T854] usb 7-1: Manufacturer: syz [ 156.223532][ T854] usb 7-1: SerialNumber: syz [ 156.275605][ T6766] loop0: detected capacity change from 0 to 32768 [ 156.642401][ T6766] loop1: detected capacity change from 0 to 65536 [ 157.235603][ T65] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 157.259869][ T854] usb 7-1: USB disconnect, device number 6 [ 157.648394][ T6766] workqueue: Failed to create a rescuer kthread for wq "dm-thin": -EINTR [ 158.748072][ T6766] device-mapper: table: 248:0: thin-pool: Error creating pool's workqueue (-ENOMEM) [ 158.748100][ T6766] device-mapper: ioctl: error adding target to table [ 159.266135][ T65] Bluetooth: hci1: command 0x0406 tx timeout [ 161.568517][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 163.348534][ T65] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 163.359234][ T6796] FAULT_INJECTION: forcing a failure. [ 163.359234][ T6796] name failslab, interval 1, probability 0, space 0, times 0 [ 163.359279][ T6796] CPU: 2 UID: 0 PID: 6796 Comm: syz.1.254 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.359302][ T6796] Tainted: [L]=SOFTLOCKUP [ 163.359314][ T6796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.359329][ T6796] Call Trace: [ 163.359359][ T6796] [ 163.359371][ T6796] dump_stack_lvl+0x100/0x190 [ 163.359434][ T6796] should_fail_ex.cold+0x5/0xa [ 163.359554][ T6796] should_failslab+0xc2/0x120 [ 163.359644][ T6796] __kmalloc_cache_noprof+0x91/0x6d0 [ 163.359713][ T6796] ? vim2m_open+0xad/0x830 [ 163.359843][ T6796] vim2m_open+0xad/0x830 [ 163.359984][ T6796] v4l2_open+0x1d2/0x490 [ 163.360026][ T6796] ? __pfx_v4l2_open+0x10/0x10 [ 163.360066][ T6796] chrdev_open+0x234/0x6a0 [ 163.360110][ T6796] ? __pfx_apparmor_file_open+0x10/0x10 [ 163.360187][ T6796] ? __pfx_chrdev_open+0x10/0x10 [ 163.360303][ T6796] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 163.360392][ T6796] do_dentry_open+0x6ab/0x14d0 [ 163.360436][ T6796] ? __pfx_chrdev_open+0x10/0x10 [ 163.360600][ T6796] vfs_open+0x82/0x3f0 [ 163.360725][ T6796] path_openat+0x19fa/0x2440 [ 163.360875][ T6796] ? __pfx_path_openat+0x10/0x10 [ 163.360946][ T6796] ? trace_event_buffer_commit+0x20a/0xa80 [ 163.361084][ T6796] do_file_open+0x20e/0x430 [ 163.361167][ T6796] ? __pfx_do_file_open+0x10/0x10 [ 163.361190][ T6796] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 163.361558][ T6796] ? _raw_spin_unlock+0x28/0x50 [ 163.361608][ T6796] ? alloc_fd+0x471/0x7a0 [ 163.361797][ T6796] do_sys_openat2+0x10f/0x1e0 [ 163.361883][ T6796] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.361965][ T6796] ? preempt_schedule_thunk+0x16/0x40 [ 163.362126][ T6796] __ia32_compat_sys_openat+0x12d/0x210 [ 163.362220][ T6796] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 163.362440][ T6796] __do_fast_syscall_32+0x13a/0x8b0 [ 163.362489][ T6796] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.362559][ T6796] do_fast_syscall_32+0x32/0x70 [ 163.362610][ T6796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.362645][ T6796] RIP: 0023:0xf706efec [ 163.362705][ T6796] Code: Unable to access opcode bytes at 0xf706efc2. [ 163.362717][ T6796] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 163.362742][ T6796] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 163.362757][ T6796] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.362770][ T6796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.362784][ T6796] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.362798][ T6796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.363058][ T6796] [ 165.152622][ T6808] program syz.0.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.120020][ T6822] syz_tun: left promiscuous mode [ 172.200917][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.209998][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.581189][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.698632][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.107417][ T6822] veth1_vlan: left allmulticast mode [ 175.434582][ T5749] Bluetooth: hci0: command 0x0406 tx timeout [ 175.434695][ T5749] Bluetooth: hci1: command 0x0406 tx timeout [ 175.434762][ T5749] Bluetooth: hci2: command 0x0406 tx timeout [ 175.769281][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 175.769313][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 178.392089][ T5816] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.392981][ T5816] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.415927][ T5816] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.416147][ T5816] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.876281][ T6866] pci_bus 0000:01: busn_res: [bus 01] is released [ 183.980823][ T6869] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 184.003642][ T6869] pci 0000:00:04.0: PCI bridge to [bus 01] [ 184.003925][ T6869] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 184.005060][ T6869] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 184.007051][ T6869] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 184.009591][ T6869] pci 0000:00:04.0: enabling Extended Tags [ 184.058821][ T6869] pci 0000:00:04.0: Adding to iommu group 4 [ 184.116165][ T6869] pci 0000:00:04.0: PCI bridge to [bus 01] [ 184.119498][ T6869] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 184.119527][ T6869] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 184.119593][ T6869] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 184.119608][ T6869] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 184.119623][ T6869] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 184.119690][ T6869] pci 0000:00:04.0: PCI bridge to [bus 01] [ 184.119745][ T6869] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 184.121416][ T6869] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 184.122483][ T6869] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 184.206482][ T6869] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 184.209263][ T6869] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(26) aer_irq aer_isr aerdrv [ 184.209299][ T6869] pcieport 0000:00:04.0: AER: request AER IRQ 26 failed [ 184.209308][ T6869] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 184.242705][ T6879] loop1: detected capacity change from 0 to 65536 [ 184.245027][ T6875] loop0: detected capacity change from 0 to 32768 [ 184.599773][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 184.599787][ T43] audit: type=1326 audit(1789568836.215:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.599973][ T43] audit: type=1326 audit(1789568836.215:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.600974][ T43] audit: type=1326 audit(1789568836.215:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.601224][ T43] audit: type=1326 audit(1789568836.215:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.602312][ T43] audit: type=1326 audit(1789568836.215:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.602459][ T43] audit: type=1326 audit(1789568836.215:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.602764][ T43] audit: type=1326 audit(1789568836.215:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.603456][ T43] audit: type=1326 audit(1789568836.215:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.603571][ T43] audit: type=1326 audit(1789568836.215:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.603888][ T43] audit: type=1326 audit(1789568836.215:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 184.693718][ T6898] veth1_vlan: entered allmulticast mode [ 185.468114][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.468437][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.621477][ T6915] FAULT_INJECTION: forcing a failure. [ 185.621477][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 185.621498][ T6915] CPU: 2 UID: 0 PID: 6915 Comm: syz.0.287 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.621513][ T6915] Tainted: [L]=SOFTLOCKUP [ 185.621517][ T6915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.621523][ T6915] Call Trace: [ 185.621527][ T6915] [ 185.621532][ T6915] dump_stack_lvl+0x100/0x190 [ 185.621552][ T6915] should_fail_ex.cold+0x5/0xa [ 185.621573][ T6915] should_failslab+0xc2/0x120 [ 185.621591][ T6915] __kmalloc_cache_noprof+0x91/0x6d0 [ 185.621609][ T6915] ? ceph_osdmap_alloc+0x40/0x2d0 [ 185.621629][ T6915] ceph_osdmap_alloc+0x40/0x2d0 [ 185.621645][ T6915] ceph_osdc_init+0x433/0xa00 [ 185.621661][ T6915] ceph_create_client+0x281/0x370 [ 185.621675][ T6915] ceph_get_tree+0x1a4/0x1fd0 [ 185.621689][ T6915] ? bpf_lsm_capable+0x9/0x10 [ 185.621706][ T6915] ? security_capable+0x80/0x260 [ 185.621719][ T6915] vfs_get_tree+0x92/0x320 [ 185.621735][ T6915] vfs_cmd_create+0xd7/0x2a0 [ 185.621752][ T6915] __do_sys_fsconfig+0x55a/0xcb0 [ 185.621771][ T6915] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 185.621787][ T6915] ? xfd_validate_state+0x129/0x190 [ 185.621810][ T6915] __do_fast_syscall_32+0x13a/0x8b0 [ 185.621828][ T6915] do_fast_syscall_32+0x32/0x70 [ 185.621845][ T6915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.621859][ T6915] RIP: 0023:0xf7f45fec [ 185.621870][ T6915] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 185.621874][ T6915] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 185.621885][ T6915] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 185.621891][ T6915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.621897][ T6915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.621903][ T6915] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.621909][ T6915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.621922][ T6915] [ 185.781445][ T6910] pci_bus 0000:01: busn_res: [bus 01] is released [ 185.820923][ T6917] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 185.843666][ T6917] pci 0000:00:04.0: PCI bridge to [bus 01] [ 185.843848][ T6917] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 185.843973][ T6917] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 185.846584][ T6917] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 185.847071][ T6917] pci 0000:00:04.0: enabling Extended Tags [ 185.852614][ T6917] pci 0000:00:04.0: Adding to iommu group 4 [ 185.886585][ T6917] pci 0000:00:04.0: PCI bridge to [bus 01] [ 185.888840][ T6917] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 185.888867][ T6917] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 185.888935][ T6917] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 185.888950][ T6917] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 185.888964][ T6917] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 185.889028][ T6917] pci 0000:00:04.0: PCI bridge to [bus 01] [ 185.889081][ T6917] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 185.890749][ T6917] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 185.891901][ T6917] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 185.934496][ T5884] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 185.940544][ T6917] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 185.945655][ T6917] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 186.054491][ T854] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.115199][ T5884] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 186.115962][ T5884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.115984][ T5884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 186.115998][ T5884] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 186.116016][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.224890][ T854] usb 5-1: Using ep0 maxpacket: 16 [ 186.225695][ T854] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.226522][ T854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.228204][ T854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.228216][ T854] usb 5-1: Product: syz [ 186.228223][ T854] usb 5-1: Manufacturer: syz [ 186.228276][ T854] usb 5-1: SerialNumber: syz [ 186.229958][ T854] usb 5-1: config 0 descriptor?? [ 186.232550][ T854] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.232566][ T854] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 186.361489][ T6918] netlink: 56 bytes leftover after parsing attributes in process `syz.1.290'. [ 186.375094][ T5884] usb 6-1: USB disconnect, device number 6 [ 186.377368][ T6923] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 186.377382][ T6923] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 186.833994][ T854] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 187.245456][ T854] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 187.245475][ T854] em28xx 5-1:0.0: board has no eeprom [ 187.304465][ T854] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 187.304482][ T854] em28xx 5-1:0.0: dvb set to bulk mode. [ 187.306188][ T77] em28xx 5-1:0.0: Binding DVB extension [ 187.328954][ T854] usb 5-1: USB disconnect, device number 2 [ 187.329605][ T854] em28xx 5-1:0.0: Disconnecting em28xx [ 187.335038][ T77] em28xx 5-1:0.0: Registering input extension [ 187.336630][ T854] em28xx 5-1:0.0: Closing input extension [ 187.390721][ T854] em28xx: Freeing device [ 187.780982][ T6947] pimreg: entered allmulticast mode [ 187.791915][ T6947] pimreg: left allmulticast mode [ 187.888024][ T6953] FAULT_INJECTION: forcing a failure. [ 187.888024][ T6953] name failslab, interval 1, probability 0, space 0, times 0 [ 187.888044][ T6953] CPU: 3 UID: 0 PID: 6953 Comm: syz.0.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.888059][ T6953] Tainted: [L]=SOFTLOCKUP [ 187.888063][ T6953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.888068][ T6953] Call Trace: [ 187.888072][ T6953] [ 187.888077][ T6953] dump_stack_lvl+0x100/0x190 [ 187.888095][ T6953] should_fail_ex.cold+0x5/0xa [ 187.888124][ T6953] should_failslab+0xc2/0x120 [ 187.888139][ T6953] __kvmalloc_node_noprof+0x113/0x9b0 [ 187.888152][ T6953] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 187.888164][ T6953] ? ceph_msg_new2+0x370/0x4f0 [ 187.888185][ T6953] ceph_msg_new2+0x370/0x4f0 [ 187.888200][ T6953] ceph_monc_init+0x63d/0xcd0 [ 187.888215][ T6953] ceph_create_client+0x25e/0x370 [ 187.888229][ T6953] ceph_get_tree+0x1a4/0x1fd0 [ 187.888244][ T6953] ? bpf_lsm_capable+0x9/0x10 [ 187.888260][ T6953] ? security_capable+0x80/0x260 [ 187.888275][ T6953] vfs_get_tree+0x92/0x320 [ 187.888290][ T6953] vfs_cmd_create+0xd7/0x2a0 [ 187.888307][ T6953] __do_sys_fsconfig+0x55a/0xcb0 [ 187.888326][ T6953] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 187.888349][ T6953] __do_fast_syscall_32+0x13a/0x8b0 [ 187.888367][ T6953] do_fast_syscall_32+0x32/0x70 [ 187.888384][ T6953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.888397][ T6953] RIP: 0023:0xf7f45fec [ 187.888408][ T6953] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 187.888413][ T6953] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 187.888423][ T6953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 187.888430][ T6953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.888436][ T6953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.888442][ T6953] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.888448][ T6953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.888461][ T6953] [ 188.774521][ T5837] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 188.924454][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 188.925466][ T5837] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.926382][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.928147][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.928164][ T5837] usb 5-1: Product: syz [ 188.928174][ T5837] usb 5-1: Manufacturer: syz [ 188.928185][ T5837] usb 5-1: SerialNumber: syz [ 188.930780][ T5837] usb 5-1: config 0 descriptor?? [ 188.933350][ T5837] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 188.933373][ T5837] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 189.538009][ T5837] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 189.942054][ T5837] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 189.942072][ T5837] em28xx 5-1:0.0: board has no eeprom [ 190.004428][ T5837] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 190.004446][ T5837] em28xx 5-1:0.0: dvb set to bulk mode. [ 190.010046][ T5837] usb 5-1: USB disconnect, device number 3 [ 190.013285][ T5837] em28xx 5-1:0.0: Disconnecting em28xx [ 190.013321][ T1484] em28xx 5-1:0.0: Binding DVB extension [ 190.040259][ T1484] em28xx 5-1:0.0: Registering input extension [ 190.041042][ T5837] em28xx 5-1:0.0: Closing input extension [ 190.055976][ T5837] em28xx: Freeing device [ 190.419596][ T6988] FAULT_INJECTION: forcing a failure. [ 190.419596][ T6988] name failslab, interval 1, probability 0, space 0, times 0 [ 190.419625][ T6988] CPU: 3 UID: 0 PID: 6988 Comm: syz.2.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.419649][ T6988] Tainted: [L]=SOFTLOCKUP [ 190.419659][ T6988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.419669][ T6988] Call Trace: [ 190.419674][ T6988] [ 190.419681][ T6988] dump_stack_lvl+0x100/0x190 [ 190.419711][ T6988] should_fail_ex.cold+0x5/0xa [ 190.419736][ T6988] should_failslab+0xc2/0x120 [ 190.419760][ T6988] kmem_cache_alloc_noprof+0x92/0x6a0 [ 190.419780][ T6988] ? ceph_msg_new2+0x3e/0x4f0 [ 190.419805][ T6988] ceph_msg_new2+0x3e/0x4f0 [ 190.419832][ T6988] ceph_monc_init+0x686/0xcd0 [ 190.419857][ T6988] ceph_create_client+0x25e/0x370 [ 190.419879][ T6988] ceph_get_tree+0x1a4/0x1fd0 [ 190.419898][ T6988] ? bpf_lsm_capable+0x9/0x10 [ 190.419928][ T6988] ? security_capable+0x80/0x260 [ 190.419952][ T6988] vfs_get_tree+0x92/0x320 [ 190.419978][ T6988] vfs_cmd_create+0xd7/0x2a0 [ 190.420007][ T6988] __do_sys_fsconfig+0x55a/0xcb0 [ 190.420037][ T6988] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 190.420078][ T6988] __do_fast_syscall_32+0x13a/0x8b0 [ 190.420111][ T6988] do_fast_syscall_32+0x32/0x70 [ 190.420137][ T6988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.420156][ T6988] RIP: 0023:0xf7f14fec [ 190.420175][ T6988] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 190.420181][ T6988] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 190.420193][ T6988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 190.420200][ T6988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.420207][ T6988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.420214][ T6988] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 190.420221][ T6988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.420236][ T6988] [ 190.509005][ T5984] Process accounting resumed [ 192.018001][ T7023] FAULT_INJECTION: forcing a failure. [ 192.018001][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 192.018032][ T7023] CPU: 3 UID: 0 PID: 7023 Comm: syz.0.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.018057][ T7023] Tainted: [L]=SOFTLOCKUP [ 192.018063][ T7023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.018074][ T7023] Call Trace: [ 192.018080][ T7023] [ 192.018087][ T7023] dump_stack_lvl+0x100/0x190 [ 192.018118][ T7023] should_fail_ex.cold+0x5/0xa [ 192.018150][ T7023] should_failslab+0xc2/0x120 [ 192.018178][ T7023] __kmalloc_cache_noprof+0x91/0x6d0 [ 192.018210][ T7023] ? ceph_osdmap_alloc+0x40/0x2d0 [ 192.018244][ T7023] ceph_osdmap_alloc+0x40/0x2d0 [ 192.018267][ T7023] ceph_osdc_init+0x433/0xa00 [ 192.018290][ T7023] ceph_create_client+0x281/0x370 [ 192.018310][ T7023] ceph_get_tree+0x1a4/0x1fd0 [ 192.018332][ T7023] ? bpf_lsm_capable+0x9/0x10 [ 192.018359][ T7023] ? security_capable+0x80/0x260 [ 192.018383][ T7023] vfs_get_tree+0x92/0x320 [ 192.018410][ T7023] vfs_cmd_create+0xd7/0x2a0 [ 192.018438][ T7023] __do_sys_fsconfig+0x55a/0xcb0 [ 192.018466][ T7023] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 192.018508][ T7023] ? xfd_validate_state+0x129/0x190 [ 192.018550][ T7023] __do_fast_syscall_32+0x13a/0x8b0 [ 192.018583][ T7023] do_fast_syscall_32+0x32/0x70 [ 192.018611][ T7023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.018660][ T7023] RIP: 0023:0xf7f45fec [ 192.018679][ T7023] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 192.018687][ T7023] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 192.018706][ T7023] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 192.018717][ T7023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.018728][ T7023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.018740][ T7023] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.018751][ T7023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.018777][ T7023] [ 192.254511][ T1484] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 192.404493][ T1484] usb 7-1: Using ep0 maxpacket: 16 [ 192.404999][ T1484] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.405849][ T1484] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.407411][ T1484] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.407426][ T1484] usb 7-1: Product: syz [ 192.407435][ T1484] usb 7-1: Manufacturer: syz [ 192.407443][ T1484] usb 7-1: SerialNumber: syz [ 192.408672][ T1484] usb 7-1: config 0 descriptor?? [ 192.413290][ T1484] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 192.413308][ T1484] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 193.013002][ T1484] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 193.417327][ T1484] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 193.417344][ T1484] em28xx 7-1:0.0: board has no eeprom [ 193.484531][ T1484] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 193.484550][ T1484] em28xx 7-1:0.0: dvb set to bulk mode. [ 193.486406][ T5837] em28xx 7-1:0.0: Binding DVB extension [ 193.489779][ T1484] usb 7-1: USB disconnect, device number 7 [ 193.490947][ T1484] em28xx 7-1:0.0: Disconnecting em28xx [ 193.509396][ T5837] em28xx 7-1:0.0: Registering input extension [ 193.509901][ T1484] em28xx 7-1:0.0: Closing input extension [ 193.522187][ T1484] em28xx: Freeing device [ 193.746591][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.746678][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.618411][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.619443][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.620466][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.623323][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.624233][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.116748][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.116870][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.116956][ T7028] bridge_slave_0: entered allmulticast mode [ 203.118330][ T7028] bridge_slave_0: entered promiscuous mode [ 203.120462][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.120502][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.120557][ T7028] bridge_slave_1: entered allmulticast mode [ 203.121246][ T7028] bridge_slave_1: entered promiscuous mode [ 203.141551][ T7028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.143492][ T7028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.167506][ T7028] team0: Port device team_slave_0 added [ 203.171892][ T7028] team0: Port device team_slave_1 added [ 203.190522][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.190537][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.190555][ T7028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.191820][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.191831][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.191848][ T7028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.217381][ T7028] hsr_slave_0: entered promiscuous mode [ 203.218191][ T7028] hsr_slave_1: entered promiscuous mode [ 203.218684][ T7028] debugfs: 'hsr0' already exists in 'hsr' [ 203.218700][ T7028] Cannot create hsr debugfs directory [ 203.361738][ T7061] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.526717][ T7028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.540811][ T7028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.541663][ T7028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.546642][ T7028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.547198][ T7028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.573295][ T7028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.580129][ T7028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.599327][ T7028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.617162][ T7070] Bluetooth: ISO socket layer initialized [ 203.627348][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.627399][ T7028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.627509][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.627649][ T7028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.653027][ T7076] null_blk: disk rnullb0 created [ 203.663069][ T7028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.672476][ T7028] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.697779][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.710332][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.755779][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.755855][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.763400][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.763480][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.026056][ T7092] dvmrp0: entered allmulticast mode [ 204.034461][ T7088] batman_adv: batadv0: Adding interface: dummy0 [ 204.034472][ T7088] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.034488][ T7088] batman_adv: batadv0: Interface activated: dummy0 [ 204.051080][ T7092] netlink: 'syz.2.332': attribute type 2 has an invalid length. [ 204.059283][ T7088] batadv0: mtu less than device minimum [ 204.061355][ T7088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.062310][ T7088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.063221][ T7088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.064192][ T7088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.065230][ T7088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.066106][ T7088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.067070][ T7088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.068033][ T7088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.129083][ T7092] FAULT_INJECTION: forcing a failure. [ 204.129083][ T7092] name fail_futex, interval 1, probability 0, space 0, times 1 [ 204.129114][ T7092] CPU: 3 UID: 0 PID: 7092 Comm: syz.2.332 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.129135][ T7092] Tainted: [L]=SOFTLOCKUP [ 204.129141][ T7092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.129150][ T7092] Call Trace: [ 204.129162][ T7092] [ 204.129168][ T7092] dump_stack_lvl+0x100/0x190 [ 204.129194][ T7092] should_fail_ex.cold+0x5/0xa [ 204.129215][ T7092] get_futex_key+0xf72/0x14f0 [ 204.129256][ T7092] ? __pfx_get_futex_key+0x10/0x10 [ 204.129282][ T7092] ? __mutex_unlock_slowpath+0x35d/0x930 [ 204.129310][ T7092] futex_wake+0xf4/0x5e0 [ 204.129331][ T7092] ? __pfx_futex_wake+0x10/0x10 [ 204.129354][ T7092] ? detach_task_ctx_data+0x83/0x490 [ 204.129381][ T7092] do_futex+0x2b2/0x440 [ 204.129397][ T7092] ? __pfx_do_futex+0x10/0x10 [ 204.129411][ T7092] ? __might_fault+0xc5/0x140 [ 204.129440][ T7092] mm_exit_exec_release+0x256/0x2f0 [ 204.129465][ T7092] do_exit+0x707/0x2ae0 [ 204.129487][ T7092] ? __pfx_do_exit+0x10/0x10 [ 204.129504][ T7092] ? do_raw_spin_lock+0x128/0x260 [ 204.129527][ T7092] ? find_held_lock+0x2b/0x80 [ 204.129543][ T7092] ? get_signal+0x7e0/0x21e0 [ 204.129569][ T7092] do_group_exit+0xd5/0x2a0 [ 204.129588][ T7092] get_signal+0x1ec7/0x21e0 [ 204.129615][ T7092] ? putname+0xb1/0x110 [ 204.129635][ T7092] ? __pfx_get_signal+0x10/0x10 [ 204.129659][ T7092] ? do_futex+0x190/0x440 [ 204.129676][ T7092] arch_do_signal_or_restart+0x91/0x7a0 [ 204.129699][ T7092] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 204.129732][ T7092] exit_to_user_mode_loop+0x139/0x700 [ 204.129755][ T7092] ? rcu_is_watching+0x13/0xc0 [ 204.129772][ T7092] __do_fast_syscall_32+0x59f/0x8b0 [ 204.129799][ T7092] do_fast_syscall_32+0x32/0x70 [ 204.129823][ T7092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.129842][ T7092] RIP: 0023:0xf7f14fec [ 204.129860][ T7092] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 204.129868][ T7092] RSP: 002b:00000000f53d65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 204.129884][ T7092] RAX: fffffffffffffe00 RBX: 00000000f73d4f88 RCX: 0000000000000080 [ 204.129894][ T7092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d4f8c [ 204.129904][ T7092] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 204.129913][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.129922][ T7092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.129940][ T7092] [ 204.216986][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.519442][ T7028] veth0_vlan: entered promiscuous mode [ 204.524481][ T7028] veth1_vlan: entered promiscuous mode [ 204.541482][ T7028] veth0_macvtap: entered promiscuous mode [ 204.543811][ T7028] veth1_macvtap: entered promiscuous mode [ 204.553330][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.555338][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.706195][ T5746] Bluetooth: hci4: command tx timeout [ 204.742076][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.742093][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.744681][ T5787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.744991][ T5787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.745024][ T5787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.745041][ T5787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.757345][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.757364][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.130313][ T7145] nvmet_rdma: binding CM ID to 172.20.20.23:4420 failed (-99) [ 206.795011][ T5746] Bluetooth: hci4: command tx timeout [ 208.254487][ T5837] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.295625][ T7179] pim6reg: entered allmulticast mode [ 208.707629][ T7179] pim6reg: left allmulticast mode [ 208.754463][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 208.762054][ T5837] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 208.782696][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 208.791543][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 208.864838][ T5746] Bluetooth: hci4: command tx timeout [ 208.865154][ T7180] hsr_slave_1 (unregistering): left promiscuous mode [ 209.072359][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.072377][ T5837] usb 5-1: Product: syz [ 209.072385][ T5837] usb 5-1: Manufacturer: syz [ 209.072393][ T5837] usb 5-1: SerialNumber: syz [ 209.073623][ T5837] usb 5-1: config 0 descriptor?? [ 209.075748][ T5837] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 209.075766][ T5837] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 209.685676][ T5837] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 209.809421][ T7200] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 210.102250][ T5837] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 210.102281][ T5837] em28xx 5-1:0.0: board has no eeprom [ 210.174526][ T5837] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 210.174555][ T5837] em28xx 5-1:0.0: dvb set to bulk mode. [ 210.196268][ T5837] usb 5-1: USB disconnect, device number 4 [ 210.197757][ T5837] em28xx 5-1:0.0: Disconnecting em28xx [ 210.197825][ T5830] em28xx 5-1:0.0: Binding DVB extension [ 210.239936][ T5830] em28xx 5-1:0.0: Registering input extension [ 210.240531][ T5837] em28xx 5-1:0.0: Closing input extension [ 210.256511][ T5837] em28xx: Freeing device [ 210.955201][ T5746] Bluetooth: hci4: command tx timeout [ 211.564758][ T3263] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 211.624467][ T5984] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 211.628934][ T7236] veth1_vlan: entered allmulticast mode [ 211.728742][ T3263] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.729571][ T3263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.729588][ T3263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.729600][ T3263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.729620][ T3263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.731819][ T3263] usb 5-1: config 0 descriptor?? [ 211.760391][ T7240] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 211.767305][ T62] rtrs_client L2018: : CM error (CM event: address error, err: -ENODEV) [ 211.767417][ T7240] rtrs_client L2636: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 211.785662][ T5984] usb 7-1: Using ep0 maxpacket: 16 [ 211.786858][ T5984] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 211.788620][ T5984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 211.791553][ T5984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.791565][ T5984] usb 7-1: Product: syz [ 211.791572][ T5984] usb 7-1: Manufacturer: syz [ 211.791579][ T5984] usb 7-1: SerialNumber: syz [ 211.797636][ T5984] usb 7-1: config 0 descriptor?? [ 211.802639][ T5984] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 211.802657][ T5984] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 212.141909][ T3263] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x4 [ 212.141928][ T3263] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xe [ 212.141941][ T3263] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 22/24 [ 212.142360][ T3263] plantronics 0003:047F:FFFF.0005: parse failed [ 212.143338][ T3263] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 212.405625][ T5984] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 212.938353][ T1039] usb 5-1: USB disconnect, device number 5 [ 212.980628][ T5984] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 212.980654][ T5984] em28xx 7-1:0.0: board has no eeprom [ 212.988655][ T7256] syzkaller0: entered promiscuous mode [ 212.988676][ T7256] syzkaller0: entered allmulticast mode [ 213.044897][ T5984] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 213.044918][ T5984] em28xx 7-1:0.0: dvb set to bulk mode. [ 213.045340][ T3263] em28xx 7-1:0.0: Binding DVB extension [ 213.073307][ T5984] usb 7-1: USB disconnect, device number 8 [ 213.074767][ T5984] em28xx 7-1:0.0: Disconnecting em28xx [ 213.098703][ T7261] netlink: 4064 bytes leftover after parsing attributes in process `syz.0.373'. [ 213.127209][ T3263] em28xx 7-1:0.0: Registering input extension [ 213.127429][ T5984] em28xx 7-1:0.0: Closing input extension [ 213.232154][ T5984] em28xx: Freeing device [ 213.639996][ T7264] batman_adv: batadv0: Adding interface: dummy0 [ 213.640008][ T7264] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.640024][ T7264] batman_adv: batadv0: Interface activated: dummy0 [ 213.668531][ T7266] net_ratelimit: 11 callbacks suppressed [ 213.668545][ T7266] batadv0: mtu less than device minimum [ 213.669042][ T7266] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.669579][ T7266] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.670051][ T7266] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.670522][ T7266] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.671034][ T7266] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.671504][ T7266] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.671978][ T7266] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.672439][ T7266] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.672961][ T7266] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 214.118845][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.119125][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.234715][ T7278] veth1_vlan: left allmulticast mode [ 214.469865][ T7278] dummy0: left allmulticast mode [ 214.470127][ T7278] macvtap1: left promiscuous mode [ 214.470137][ T7278] macvtap1: left allmulticast mode [ 214.474583][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.474607][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.474624][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.474641][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.100745][ T7303] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 215.497511][ T7311] overlayfs: missing 'lowerdir' [ 215.635790][ T5984] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 215.796005][ T5984] usb 9-1: Using ep0 maxpacket: 16 [ 215.796638][ T5984] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 215.797683][ T5984] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 215.802908][ T5984] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.802928][ T5984] usb 9-1: Product: syz [ 215.802940][ T5984] usb 9-1: Manufacturer: syz [ 215.802952][ T5984] usb 9-1: SerialNumber: syz [ 215.806245][ T5984] usb 9-1: config 0 descriptor?? [ 215.811604][ T5984] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 215.811631][ T5984] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 216.449534][ T5984] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 217.321883][ T5984] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 217.321906][ T5984] em28xx 9-1:0.0: board has no eeprom [ 217.386806][ T5984] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 217.386835][ T5984] em28xx 9-1:0.0: dvb set to bulk mode. [ 217.387417][ T3263] em28xx 9-1:0.0: Binding DVB extension [ 217.391414][ T5984] usb 9-1: USB disconnect, device number 2 [ 217.397036][ T5984] em28xx 9-1:0.0: Disconnecting em28xx [ 217.411611][ T3263] em28xx 9-1:0.0: Registering input extension [ 217.411716][ T5984] em28xx 9-1:0.0: Closing input extension [ 217.427191][ T5984] em28xx: Freeing device [ 217.760877][ T7336] veth1_vlan: entered allmulticast mode [ 217.878918][ T7338] FAULT_INJECTION: forcing a failure. [ 217.878918][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 217.878952][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.4.397 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.878978][ T7338] Tainted: [L]=SOFTLOCKUP [ 217.878985][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.878996][ T7338] Call Trace: [ 217.879002][ T7338] [ 217.879010][ T7338] dump_stack_lvl+0x100/0x190 [ 217.879054][ T7338] should_fail_ex.cold+0x5/0xa [ 217.879081][ T7338] should_failslab+0xc2/0x120 [ 217.879109][ T7338] __kvmalloc_node_noprof+0x113/0x9b0 [ 217.879137][ T7338] ? __pfx___mutex_lock+0x10/0x10 [ 217.879168][ T7338] ? nf_hook_entries_grow+0x255/0x870 [ 217.879195][ T7338] nf_hook_entries_grow+0x255/0x870 [ 217.879228][ T7338] __nf_register_net_hook+0x112/0x780 [ 217.879256][ T7338] nf_register_net_hook+0xdb/0x170 [ 217.879280][ T7338] nf_register_net_hooks+0x5d/0xd0 [ 217.879305][ T7338] ip_vs_register_hooks+0xe3/0x150 [ 217.879335][ T7338] ip_vs_add_service+0x515/0x2240 [ 217.879359][ T7338] ? __ip_vs_service_find+0x4d0/0x9c0 [ 217.879394][ T7338] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 217.879413][ T7338] do_ip_vs_set_ctl+0xb86/0xc90 [ 217.879435][ T7338] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 217.879455][ T7338] ? rcu_is_watching+0x13/0xc0 [ 217.879481][ T7338] ? find_held_lock+0x2b/0x80 [ 217.879500][ T7338] ? nf_sockopt_find.isra.0+0x222/0x290 [ 217.879529][ T7338] ? nf_sockopt_find.isra.0+0x222/0x290 [ 217.879565][ T7338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.879609][ T7338] ? nf_setsockopt+0x8d/0xf0 [ 217.879632][ T7338] nf_setsockopt+0x8d/0xf0 [ 217.879659][ T7338] ip_setsockopt+0xcb/0xf0 [ 217.879680][ T7338] udp_setsockopt+0x64/0xb0 [ 217.879707][ T7338] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 217.879741][ T7338] do_sock_setsockopt+0xf3/0x1d0 [ 217.879773][ T7338] __sys_setsockopt+0x119/0x190 [ 217.879802][ T7338] __ia32_sys_setsockopt+0xbc/0x160 [ 217.879825][ T7338] ? __do_fast_syscall_32+0xb3/0x8b0 [ 217.879853][ T7338] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.879880][ T7338] __do_fast_syscall_32+0x13a/0x8b0 [ 217.879920][ T7338] do_fast_syscall_32+0x32/0x70 [ 217.879951][ T7338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.879977][ T7338] RIP: 0023:0xf702efec [ 217.879996][ T7338] Code: Unable to access opcode bytes at 0xf702efc2. [ 217.880005][ T7338] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 217.880025][ T7338] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 217.880036][ T7338] RDX: 0000000000000482 RSI: 0000000080000180 RDI: 000000000000002c [ 217.880048][ T7338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.880058][ T7338] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.880071][ T7338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.880100][ T7338] [ 220.930289][ T7365] net_ratelimit: 12 callbacks suppressed [ 220.930313][ T7365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 221.370505][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 221.370524][ T43] audit: type=1326 audit(1789568872.985:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.370565][ T43] audit: type=1326 audit(1789568872.985:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.370755][ T43] audit: type=1326 audit(1789568872.985:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.371151][ T43] audit: type=1326 audit(1789568872.985:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.371302][ T43] audit: type=1326 audit(1789568872.985:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.371660][ T43] audit: type=1326 audit(1789568872.985:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.371788][ T43] audit: type=1326 audit(1789568872.985:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.372372][ T43] audit: type=1326 audit(1789568872.985:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.388129][ T7374] kvm [7373]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 221.416381][ T7374] kvm [7373]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 221.446861][ T7374] kvm [7373]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 221.526332][ T43] audit: type=1326 audit(1789568873.145:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.526389][ T43] audit: type=1326 audit(1789568873.145:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 221.924518][ T3263] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 222.085239][ T3263] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 222.086500][ T3263] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.089158][ T3263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 222.089171][ T3263] usb 7-1: Product: syz [ 222.089178][ T3263] usb 7-1: Manufacturer: syz [ 222.089185][ T3263] usb 7-1: SerialNumber: syz [ 222.201747][ T7381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.302874][ T3263] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 222.348129][ T7381] md: could not open device unknown-block(0,0). [ 222.348169][ T7381] md: error, md_import_device() returned -6 [ 222.542106][ T7389] FAULT_INJECTION: forcing a failure. [ 222.542106][ T7389] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 222.542141][ T7389] CPU: 2 UID: 0 PID: 7389 Comm: syz.4.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.542167][ T7389] Tainted: [L]=SOFTLOCKUP [ 222.542173][ T7389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.542185][ T7389] Call Trace: [ 222.542191][ T7389] [ 222.542199][ T7389] dump_stack_lvl+0x100/0x190 [ 222.542229][ T7389] should_fail_ex.cold+0x5/0xa [ 222.542253][ T7389] _copy_from_iter+0x1f4/0x1690 [ 222.542281][ T7389] ? __asan_memset+0x23/0x50 [ 222.542301][ T7389] ? __pfx__copy_from_iter+0x10/0x10 [ 222.542324][ T7389] ? __pfx___alloc_skb+0x10/0x10 [ 222.542356][ T7389] netlink_sendmsg+0x808/0xda0 [ 222.542384][ T7389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.542409][ T7389] ? apparmor_socket_sendmsg+0x165/0x280 [ 222.542438][ T7389] __sys_sendto+0x48b/0x4e0 [ 222.542459][ T7389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.542482][ T7389] ? __pfx___sys_sendto+0x10/0x10 [ 222.542512][ T7389] ? lock_acquire+0x1d1/0x380 [ 222.542555][ T7389] __ia32_compat_sys_socketcall+0x59a/0x770 [ 222.542578][ T7389] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 222.542614][ T7389] do_int80_emulation+0x166/0x650 [ 222.542646][ T7389] asm_int80_emulation+0x1a/0x20 [ 222.542665][ T7389] RIP: 0023:0xf71675ab [ 222.542681][ T7389] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 222.542718][ T7389] RSP: 002b:00000000f541c34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 222.542738][ T7389] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f541c3f4 [ 222.542750][ T7389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.542762][ T7389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.542773][ T7389] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 222.542785][ T7389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.542805][ T7389] [ 222.561888][ T3263] usb 7-1: USB disconnect, device number 9 [ 222.570178][ T3263] usblp0: removed [ 223.585727][ T7403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.416'. [ 224.583480][ T7408] syzkaller0: entered promiscuous mode [ 224.583606][ T7408] syzkaller0: entered allmulticast mode [ 224.728943][ T7411] jffs2: notice: (7411) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.014969][ T1748] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 225.165153][ T1748] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 225.165924][ T1748] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.165947][ T1748] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 225.165962][ T1748] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 225.166049][ T1748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.223657][ T7441] fuse: Unknown parameter '0xffffffffffffffff' [ 225.622039][ T7448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.418'. [ 227.194309][ T1748] cxacru_cm: 7 callbacks suppressed [ 227.194612][ T1748] cxacru 5-1:1.0: send of cm 0x90 failed (-104) [ 227.829889][ T5984] usb 5-1: USB disconnect, device number 6 [ 227.964444][ T1748] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 228.114559][ T1748] usb 7-1: Using ep0 maxpacket: 16 [ 228.115394][ T1748] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 228.118417][ T1748] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.118439][ T1748] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.118458][ T1748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.222427][ T7472] pim6reg: entered allmulticast mode [ 228.278920][ T1748] usb 7-1: config 0 descriptor?? [ 228.478429][ T7472] pim6reg: left allmulticast mode [ 228.562425][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 228.702184][ T7473] hsr_slave_1 (unregistering): left promiscuous mode [ 228.998020][ T1748] usbhid 7-1:0.0: can't add hid device: -71 [ 228.998077][ T1748] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 229.013741][ T1748] usb 7-1: USB disconnect, device number 10 [ 229.056352][ T7480] binder: 7479:7480 ioctl c00c6211 0 returned -14 [ 229.542529][ T7485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.511931][ T43] audit: type=1326 audit(1789568882.125:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 230.520299][ T43] audit: type=1326 audit(1789568882.135:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.437" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf702efec code=0x7ffc0000 [ 230.521002][ T43] audit: type=1326 audit(1789568882.135:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 230.522881][ T43] audit: type=1326 audit(1789568882.135:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.437" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702efec code=0x7ffc0000 [ 230.526207][ T43] audit: type=1326 audit(1789568882.145:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 230.527027][ T43] audit: type=1326 audit(1789568882.145:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.437" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702efec code=0x7ffc0000 [ 230.529853][ T43] audit: type=1326 audit(1789568882.145:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 230.530044][ T43] audit: type=1326 audit(1789568882.145:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.437" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702efec code=0x7ffc0000 [ 230.546904][ T43] audit: type=1326 audit(1789568882.155:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 231.292986][ T7497] syzkaller0: entered promiscuous mode [ 231.293001][ T7497] syzkaller0: entered allmulticast mode [ 231.563303][ T7505] Invalid ELF header magic: != ELF [ 233.605631][ T1748] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 233.613351][ T1748] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 233.866866][ T1748] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 234.064524][ T1484] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 234.120635][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 234.120653][ T43] audit: type=1326 audit(1789568885.735:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.120810][ T43] audit: type=1326 audit(1789568885.735:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.121359][ T43] audit: type=1326 audit(1789568885.735:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.121561][ T43] audit: type=1326 audit(1789568885.735:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.121768][ T43] audit: type=1326 audit(1789568885.735:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.122448][ T43] audit: type=1326 audit(1789568885.735:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.122547][ T43] audit: type=1326 audit(1789568885.735:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.122749][ T43] audit: type=1326 audit(1789568885.735:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.224655][ T1484] usb 7-1: Using ep0 maxpacket: 16 [ 234.225463][ T1484] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 234.226951][ T1484] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.230087][ T1484] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.230108][ T1484] usb 7-1: Product: syz [ 234.230119][ T1484] usb 7-1: Manufacturer: syz [ 234.230132][ T1484] usb 7-1: SerialNumber: syz [ 234.232596][ T1484] usb 7-1: config 0 descriptor?? [ 234.236547][ T1484] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 234.236574][ T1484] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 234.369058][ T7526] ceph: No mds server is up or the cluster is laggy [ 234.376786][ T1748] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 234.612643][ T43] audit: type=1326 audit(1789568886.225:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.612688][ T43] audit: type=1326 audit(1789568886.225:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 234.849021][ T1484] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 234.984665][ T7555] [ 234.985489][ T7555] ====================================================== [ 234.987721][ T7555] WARNING: possible circular locking dependency detected [ 234.989898][ T7555] syzkaller #0 Tainted: G L [ 234.991933][ T7555] ------------------------------------------------------ [ 234.994321][ T7555] syz.4.450/7555 is trying to acquire lock: [ 234.996476][ T7555] ffffffff903fe7e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 235.000058][ T7555] [ 235.000058][ T7555] but task is already holding lock: [ 235.002377][ T7555] ffff888013412280 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 235.005610][ T7555] [ 235.005610][ T7555] which lock already depends on the new lock. [ 235.005610][ T7555] [ 235.008844][ T7555] [ 235.008844][ T7555] the existing dependency chain (in reverse order) is: [ 235.011640][ T7555] [ 235.011640][ T7555] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 235.014342][ T7555] lock_acquire+0x1d1/0x380 [ 235.015949][ T7555] down_write+0x8b/0x1f0 [ 235.017487][ T7555] configfs_depend_item_unlocked+0xf3/0x6a0 [ 235.019576][ T7555] usbg_make_tpg+0x251/0x610 [ 235.021322][ T7555] target_fabric_make_tpg+0xab/0x8c0 [ 235.023491][ T7555] configfs_mkdir+0x525/0xd40 [ 235.025460][ T7555] vfs_mkdir+0x364/0x850 [ 235.027350][ T7555] filename_mkdirat+0x48b/0x5e0 [ 235.029160][ T7555] __ia32_sys_mkdir+0x6a/0x90 [ 235.030883][ T7555] __do_fast_syscall_32+0x13a/0x8b0 [ 235.032678][ T7555] do_fast_syscall_32+0x32/0x70 [ 235.034363][ T7555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.037147][ T7555] [ 235.037147][ T7555] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 235.040298][ T7555] lock_acquire+0x1d1/0x380 [ 235.042305][ T7555] __mutex_lock+0x1a4/0x1bd0 [ 235.044287][ T7555] tcm_alloc_inst+0x5f/0x1e0 [ 235.046090][ T7555] try_get_usb_function_instance+0x136/0x1f0 [ 235.048491][ T7555] usb_get_function_instance+0x16/0x70 [ 235.051047][ T7555] function_make+0x18c/0x3f0 [ 235.053318][ T7555] configfs_mkdir+0x525/0xd40 [ 235.055440][ T7555] vfs_mkdir+0x364/0x850 [ 235.057093][ T7555] filename_mkdirat+0x48b/0x5e0 [ 235.059011][ T7555] __ia32_sys_mkdir+0x6a/0x90 [ 235.061098][ T7555] __do_fast_syscall_32+0x13a/0x8b0 [ 235.063437][ T7555] do_fast_syscall_32+0x32/0x70 [ 235.065612][ T7555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.068364][ T7555] [ 235.068364][ T7555] -> #1 (func_lock){+.+.}-{4:4}: [ 235.071519][ T7555] lock_acquire+0x1d1/0x380 [ 235.073923][ T7555] __mutex_lock+0x1a4/0x1bd0 [ 235.075921][ T7555] try_get_usb_function_instance+0x26/0x1f0 [ 235.078025][ T7555] usb_get_function_instance+0x16/0x70 [ 235.079927][ T7555] function_make+0x18c/0x3f0 [ 235.081910][ T7555] configfs_mkdir+0x525/0xd40 [ 235.083577][ T7555] vfs_mkdir+0x364/0x850 [ 235.085127][ T7555] filename_mkdirat+0x48b/0x5e0 [ 235.086908][ T7555] __ia32_sys_mkdirat+0x88/0xc0 [ 235.088787][ T7555] __do_fast_syscall_32+0x13a/0x8b0 [ 235.090803][ T7555] do_fast_syscall_32+0x32/0x70 [ 235.092765][ T7555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.095729][ T7555] [ 235.095729][ T7555] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 235.098745][ T7555] check_prev_add+0xeb/0xe60 [ 235.100960][ T7555] __lock_acquire+0x1528/0x1f40 [ 235.102844][ T7555] lock_acquire+0x1d1/0x380 [ 235.104444][ T7555] __mutex_lock+0x1a4/0x1bd0 [ 235.106506][ T7555] uvcg_streaming_header_allow_link+0x7c/0x650 [ 235.108839][ T7555] configfs_symlink+0x695/0x1340 [ 235.110658][ T7555] vfs_symlink+0x178/0x4d0 [ 235.112703][ T7555] filename_symlinkat+0x2a6/0x560 [ 235.114639][ T7555] __ia32_sys_symlinkat+0x9b/0xe0 [ 235.116649][ T7555] __do_fast_syscall_32+0x13a/0x8b0 [ 235.118928][ T7555] do_fast_syscall_32+0x32/0x70 [ 235.120907][ T7555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.123792][ T7555] [ 235.123792][ T7555] other info that might help us debug this: [ 235.123792][ T7555] [ 235.127943][ T7555] Chain exists of: [ 235.127943][ T7555] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#24 [ 235.127943][ T7555] [ 235.134404][ T7555] Possible unsafe locking scenario: [ 235.134404][ T7555] [ 235.138377][ T7555] CPU0 CPU1 [ 235.140991][ T7555] ---- ---- [ 235.143047][ T7555] lock(&sb->s_type->i_mutex_key#24); [ 235.144787][ T7555] lock(tpg_instances_lock); [ 235.147113][ T7555] lock(&sb->s_type->i_mutex_key#24); [ 235.149591][ T7555] lock(gadget_subsys.su_mutex); [ 235.151178][ T7555] [ 235.151178][ T7555] *** DEADLOCK *** [ 235.151178][ T7555] [ 235.154473][ T7555] locks held by syz.4.450/7555: 2, last CPU#0: [ 235.157092][ T7555] #0: ffff88802275c460 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 235.161089][ T7555] #1: ffff888013412280 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 235.165715][ T7555] [ 235.165715][ T7555] stack backtrace: [ 235.168450][ T7555] CPU: 0 UID: 0 PID: 7555 Comm: syz.4.450 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.172985][ T7555] Tainted: [L]=SOFTLOCKUP [ 235.174826][ T7555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.179123][ T7555] Call Trace: [ 235.180773][ T7555] [ 235.182204][ T7555] dump_stack_lvl+0x100/0x190 [ 235.184492][ T7555] print_circular_bug.cold+0x178/0x1be [ 235.186821][ T7555] check_noncircular+0x146/0x160 [ 235.188932][ T7555] check_prev_add+0xeb/0xe60 [ 235.190953][ T7555] ? stack_trace_save+0x8e/0xc0 [ 235.193033][ T7555] __lock_acquire+0x1528/0x1f40 [ 235.195116][ T7555] ? kasan_save_track+0x14/0x30 [ 235.197085][ T7555] ? kasan_save_free_info+0x3b/0x70 [ 235.199258][ T7555] lock_acquire+0x1d1/0x380 [ 235.201046][ T7555] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 235.203541][ T7555] ? __pfx___might_resched+0x10/0x10 [ 235.205764][ T7555] __mutex_lock+0x1a4/0x1bd0 [ 235.207666][ T7555] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 235.210321][ T7555] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 235.212890][ T7555] ? __lock_acquire+0x5c0/0x1f40 [ 235.214994][ T7555] ? __pfx___mutex_lock+0x10/0x10 [ 235.217205][ T7555] ? make_vfsuid+0xec/0x140 [ 235.219221][ T7555] ? __pfx___might_resched+0x10/0x10 [ 235.221424][ T7555] ? make_vfsgid+0xf1/0x140 [ 235.223261][ T7555] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 235.225805][ T7555] ? security_inode_permission+0xbf/0x250 [ 235.228196][ T7555] uvcg_streaming_header_allow_link+0x7c/0x650 [ 235.230433][ T7555] ? inode_permission+0x374/0x620 [ 235.232034][ T7555] ? mntput_no_expire+0xe7/0x220 [ 235.233805][ T7555] configfs_symlink+0x695/0x1340 [ 235.235918][ T7555] ? bpf_lsm_inode_permission+0x9/0x10 [ 235.238207][ T7555] ? security_inode_permission+0xbf/0x250 [ 235.240564][ T7555] ? __pfx_configfs_symlink+0x10/0x10 [ 235.242749][ T7555] vfs_symlink+0x178/0x4d0 [ 235.244641][ T7555] filename_symlinkat+0x2a6/0x560 [ 235.246583][ T7555] ? __pfx_filename_symlinkat+0x10/0x10 [ 235.248432][ T7555] ? strncpy_from_user+0x19d/0x2d0 [ 235.250295][ T7555] ? do_getname+0x191/0x390 [ 235.251811][ T7555] __ia32_sys_symlinkat+0x9b/0xe0 [ 235.253377][ T7555] __do_fast_syscall_32+0x13a/0x8b0 [ 235.255106][ T7555] do_fast_syscall_32+0x32/0x70 [ 235.256658][ T7555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.258659][ T7555] RIP: 0023:0xf702efec [ 235.258906][ T1484] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 235.258929][ T1484] em28xx 7-1:0.0: board has no eeprom [ 235.264095][ T7555] Code: Unable to access opcode bytes at 0xf702efc2. [ 235.266219][ T7555] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 235.268821][ T7555] RAX: ffffffffffffffda RBX: 0000000080001500 RCX: 00000000ffffff9c [ 235.271734][ T7555] RDX: 0000000080001600 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.274303][ T7555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.277611][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.280993][ T7555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.284324][ T7555] [ 235.314423][ T1484] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 235.314447][ T1484] em28xx 7-1:0.0: dvb set to bulk mode. [ 235.314840][ T5823] em28xx 7-1:0.0: Binding DVB extension [ 235.322121][ T1484] usb 7-1: USB disconnect, device number 11 [ 235.322579][ T1484] em28xx 7-1:0.0: Disconnecting em28xx [ 235.455356][ T5823] em28xx 7-1:0.0: Registering input extension [ 235.455462][ T1484] em28xx 7-1:0.0: Closing input extension [ 235.463156][ T1484] em28xx: Freeing device