last executing test programs: 10m22.65917533s ago: executing program 1 (id=62): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 10m20.930901739s ago: executing program 1 (id=64): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) 10m18.343074172s ago: executing program 1 (id=69): syz_emit_ethernet(0x46, &(0x7f0000000800)={@random="030000480700", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @rand_addr=' \x01\x00', {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 10m17.148409031s ago: executing program 1 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) 10m15.231257662s ago: executing program 1 (id=76): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0xffff6985}}, 0x10) 10m14.961201397s ago: executing program 1 (id=77): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff77, 0x10008095, 0x0, 0x0) 9m59.310839904s ago: executing program 32 (id=77): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff77, 0x10008095, 0x0, 0x0) 5m53.735212742s ago: executing program 3 (id=754): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4d3, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = timerfd_create(0x0, 0x800) timerfd_gettime(r2, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x23}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x18, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2080}, 0x1}) syz_io_uring_setup(0x1cd7, &(0x7f00000003c0)={0x0, 0xa0d1, 0x1000, 0x4, 0x1dc}, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, &(0x7f0000000180)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 5m52.721476221s ago: executing program 3 (id=756): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f", 0x6}], 0x1}}], 0x1, 0x0) 5m52.226726684s ago: executing program 3 (id=757): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x52e, &(0x7f0000000ac0)="$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") openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000080)}, 0x20) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) 5m47.22720776s ago: executing program 3 (id=766): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/59, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) 5m38.993461197s ago: executing program 3 (id=777): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000280)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) 5m37.566098185s ago: executing program 3 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(0x0, 0x66, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000100)) capset(&(0x7f0000000040)={0x20080522}, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 5m21.792236183s ago: executing program 33 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(0x0, 0x66, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000100)) capset(&(0x7f0000000040)={0x20080522}, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 14.187055298s ago: executing program 2 (id=1689): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80080) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040), 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 13.172348918s ago: executing program 2 (id=1690): syz_usb_connect(0x0, 0x2d, &(0x7f00000024c0)={{0x12, 0x1, 0x201, 0xe4, 0xb8, 0xf0, 0x8, 0x157e, 0x3205, 0xc9b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0xa, 0x20, 0x0, "", [{{0x9, 0x4, 0x12, 0x1, 0x1, 0x20, 0xb8, 0xb8, 0x3, [], [{{0x9, 0x5, 0x1, 0x18, 0x10, 0x6, 0x6, 0x21}}]}}]}}]}}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0}) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000000c0)=ANY=[], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 11.858682067s ago: executing program 5 (id=1693): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x9, 0x20010, r1, 0xe18ca000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r5, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, r6, 0x1, 0x0, 0x1000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendfile(r1, r0, 0x0, 0x80009) 11.60285413s ago: executing program 4 (id=1696): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000f40)=0xffffffff, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) landlock_restrict_self(0xffffffffffffffff, 0x0) 11.191098259s ago: executing program 4 (id=1698): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ptrace$getsig(0x4202, r1, 0x6, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)) r6 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) symlink(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='./cgroup\x00') 10.913119945s ago: executing program 6 (id=1700): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80080) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040), 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 10.1711826s ago: executing program 4 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000003f80)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r5) 10.140241565s ago: executing program 2 (id=1703): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 9.180292025s ago: executing program 4 (id=1704): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) 9.128462864s ago: executing program 2 (id=1705): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 7.310706069s ago: executing program 4 (id=1707): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r6) 6.699249241s ago: executing program 4 (id=1708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 6.610203455s ago: executing program 5 (id=1709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.599200437s ago: executing program 6 (id=1710): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 5.911410542s ago: executing program 2 (id=1711): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x102000, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) recvmsg(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x1a6) 5.772566326s ago: executing program 6 (id=1712): syz_usbip_server_init(0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(0xffffffffffffffff) readahead(r3, 0xfff, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), r4, 0x0, 0x1, 0x4}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) 5.663188294s ago: executing program 5 (id=1713): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ptrace$getsig(0x4202, r1, 0x6, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)) r6 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) symlink(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='./cgroup\x00') 5.62377693s ago: executing program 0 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000003f80)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r5) 4.656427023s ago: executing program 5 (id=1715): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 4.035097157s ago: executing program 0 (id=1716): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000010c0), 0x10) listen(r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002380), 0x0, 0x8000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, 0xf, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x7, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x5]}, 0x45c) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x40000) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvfrom$unix(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x1, 0xfffffffffffffff4, 0x8000000000000001, 0xf, 0x2588, 0x4, 0x7, 0xfffffffffffffffb}, &(0x7f0000000340)={0x80, 0x3, 0xcc9, 0x3, 0x3, 0x7, 0x101, 0x8000000000000001}, &(0x7f0000000380)={0x2, 0xa, 0x6, 0x8, 0x96, 0x8000, 0x0, 0x5}, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000400)={[0x68]}, 0x8}) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) semget(0x1, 0x4, 0x69c) 3.77742585s ago: executing program 5 (id=1717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c000180"], 0x88}}, 0x0) 3.032245675s ago: executing program 0 (id=1718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.031014865s ago: executing program 6 (id=1719): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x84rusted:'}, 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000003c0)={0x0, 0x0, 0x20000}) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x11, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r3, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.967104465s ago: executing program 5 (id=1720): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80080) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040), 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.024961593s ago: executing program 2 (id=1721): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x9, 0x20010, r1, 0xe18ca000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r5, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, r6, 0x1, 0x0, 0x1000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendfile(r1, r0, 0x0, 0x80009) 1.939295657s ago: executing program 0 (id=1722): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.876849288s ago: executing program 6 (id=1723): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x7, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.736337871s ago: executing program 0 (id=1724): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000340)="a8", 0xfe56}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r6 = socket(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) kexec_load(0x4, 0xfffffe1a, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 1.631256498s ago: executing program 6 (id=1725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000400)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendto(r3, 0x0, 0x0, 0x2004c8e5, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) fcntl$getown(r2, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x40}}, 0x800) 0s ago: executing program 0 (id=1726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000003f80)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r5) kernel console output (not intermixed with test programs): p_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 75.691201][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.719693][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.742337][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.817344][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.822541][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.901446][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.902173][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.902824][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.903470][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.946723][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.946746][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.946754][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.946765][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.946774][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.946785][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.946795][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.946806][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.948168][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.952491][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.952523][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.952549][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.952573][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.968465][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.282260][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.296184][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.296204][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.297094][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.466153][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 76.466189][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 76.466213][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 76.466237][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 76.466261][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 76.484386][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.484410][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.488363][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.557010][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.557032][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.558253][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.745727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 77.825737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 77.845735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.895735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.915740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.935728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.955737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.975734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 78.025735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 78.045739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 79.733141][ T4285] Bluetooth: hci4: command 0x0411 tx timeout [ 81.028761][ T4420] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 81.036769][ T4420] netlink: 'syz.0.17': attribute type 2 has an invalid length. [ 81.982963][ T4426] device syzkaller1 entered promiscuous mode [ 83.989693][ T4285] Bluetooth: hci1: Malformed LE Event: 0x02 [ 85.228421][ T4445] xt_CT: No such helper "pptp" [ 86.475394][ T4465] loop1: detected capacity change from 0 to 256 [ 86.550339][ T4465] ======================================================= [ 86.550339][ T4465] WARNING: The mand mount option has been deprecated and [ 86.550339][ T4465] and is ignored by this kernel. Remove the mand [ 86.550339][ T4465] option from the mount to silence this warning. [ 86.550339][ T4465] ======================================================= [ 86.788101][ T1538] cfg80211: failed to load regulatory.db [ 89.054210][ T4487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.377155][ T4485] xt_CT: No such helper "pptp" [ 93.004922][ T4540] netlink: 56 bytes leftover after parsing attributes in process `syz.4.57'. [ 93.014785][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 93.023924][ T4540] netlink: 31 bytes leftover after parsing attributes in process `syz.4.57'. [ 93.032821][ T4540] netlink: 'syz.4.57': attribute type 2 has an invalid length. [ 93.041312][ T4540] netlink: 31 bytes leftover after parsing attributes in process `syz.4.57'. [ 93.619900][ T26] audit: type=1326 audit(2000000013.520:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d1b9c819 code=0x7ffc0000 [ 93.915921][ T26] audit: type=1326 audit(2000000013.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fe0d1b9c819 code=0x7ffc0000 [ 93.939075][ T26] audit: type=1326 audit(2000000013.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d1b9c819 code=0x7ffc0000 [ 93.961339][ T26] audit: type=1326 audit(2000000013.630:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d1b9c819 code=0x7ffc0000 [ 94.174954][ T4545] loop2: detected capacity change from 0 to 512 [ 95.300091][ T4545] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 95.493693][ T4545] EXT4-fs (loop2): mount failed [ 99.129838][ T4583] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.469218][ T4595] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.203679][ T4311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.426975][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.470183][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.520801][ T4311] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 101.561536][ T4603] 9pnet_fd: p9_fd_create_tcp (4603): problem connecting socket to 127.0.0.1 [ 101.605796][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.635643][ T4311] usb 4-1: config 0 descriptor?? [ 103.250332][ T4618] overlayfs: missing 'workdir' [ 103.336196][ T4311] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 103.357034][ T4311] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 103.364743][ T4311] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 103.382219][ T4625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.82'. [ 103.393711][ T4311] arvo: probe of 0003:1E7D:30D4.0001 failed with error -71 [ 103.463048][ T4311] usb 4-1: USB disconnect, device number 2 [ 103.984096][ T4627] fido_id[4627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.098303][ T4653] 9pnet_fd: p9_fd_create_tcp (4653): problem connecting socket to 127.0.0.1 [ 107.565719][ C0] sched: RT throttling activated [ 110.208309][ T4676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.97'. [ 113.106367][ T4699] xt_CT: No such helper "pptp" [ 113.377883][ T4705] netlink: 36 bytes leftover after parsing attributes in process `syz.4.101'. [ 116.266814][ T4730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 120.871505][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.939276][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.958353][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.966920][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.975144][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 120.982580][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.963525][ T4756] chnl_net:caif_netlink_parms(): no params data found [ 123.012527][ T4772] xt_CT: No such helper "pptp" [ 123.097702][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 123.427041][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.441193][ T4790] loop3: detected capacity change from 0 to 256 [ 123.444721][ T4756] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.470824][ T4756] device bridge_slave_0 entered promiscuous mode [ 123.487951][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.495530][ T4756] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.519314][ T4756] device bridge_slave_1 entered promiscuous mode [ 123.520619][ T4356] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.803003][ T4796] kvm [4791]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 124.594032][ T4756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.687243][ T4805] input: syz0 as /devices/virtual/input/input6 [ 124.866176][ T4756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.965111][ T4756] team0: Port device team_slave_0 added [ 125.035467][ T4756] team0: Port device team_slave_1 added [ 125.180459][ T4813] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 125.188254][ T4813] netlink: 'syz.4.132': attribute type 2 has an invalid length. [ 125.206474][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 125.983638][ T4756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.078626][ T4756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.243113][ T4756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.277872][ T4756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.284878][ T4756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.072691][ T4756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.265836][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 127.758978][ T4756] device hsr_slave_0 entered promiscuous mode [ 127.766443][ T4831] xt_CT: No such helper "pptp" [ 127.782522][ T4756] device hsr_slave_1 entered promiscuous mode [ 127.793382][ T4756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.804503][ T4756] Cannot create hsr debugfs directory [ 128.055586][ T4409] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.070031][ T4409] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.136943][ T4857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.144'. [ 129.215298][ T4409] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.345795][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 129.515653][ T4864] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 129.524470][ T4864] netlink: 'syz.4.145': attribute type 2 has an invalid length. [ 129.581710][ T4409] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.298945][ T4756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.434425][ T4756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.451675][ T4756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.568371][ T4756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.785930][ T1538] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 131.115628][ T1538] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.278108][ T1538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.365096][ T1538] usb 5-1: Product: syz [ 131.385143][ T1538] usb 5-1: Manufacturer: syz [ 131.395770][ T1538] usb 5-1: SerialNumber: syz [ 131.423338][ T1538] usb 5-1: config 0 descriptor?? [ 131.856780][ T1538] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.437379][ T4756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.870049][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878569][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.928607][ T4756] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.251721][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.296771][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.307304][ T1538] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 133.334857][ T1538] usb 5-1: USB disconnect, device number 2 [ 133.335586][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.366889][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.380928][ T4646] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.388140][ T4646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.397323][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.515620][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.556526][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.576896][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.584058][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.606303][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.626363][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.646378][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.668700][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.678417][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.697529][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.752690][ T4756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.795083][ T4756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.870565][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.975532][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.008956][ T4921] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 134.017318][ T4921] netlink: 'syz.3.160': attribute type 2 has an invalid length. [ 134.199704][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.351792][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.549078][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.697721][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.086710][ T4936] xt_CT: No such helper "pptp" [ 137.589963][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.599252][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.613497][ T4756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.691723][ T4409] device hsr_slave_0 left promiscuous mode [ 137.721816][ T4409] device hsr_slave_1 left promiscuous mode [ 137.740257][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.755090][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.785430][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.806516][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.815843][ T1538] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.844923][ T4409] device bridge_slave_1 left promiscuous mode [ 137.863470][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.894268][ T4409] device bridge_slave_0 left promiscuous mode [ 137.903345][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.957501][ T4409] device veth1_macvtap left promiscuous mode [ 137.971709][ T4409] device veth0_macvtap left promiscuous mode [ 137.988618][ T4409] device veth1_vlan left promiscuous mode [ 137.995004][ T4409] device veth0_vlan left promiscuous mode [ 138.176934][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.188049][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.200557][ T1538] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.210277][ T1538] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 138.225902][ T1538] usb 4-1: Manufacturer: syz [ 138.259609][ T1538] usb 4-1: config 0 descriptor?? [ 138.513466][ T4994] xt_CT: No such helper "pptp" [ 138.884566][ T1538] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -22 [ 138.900222][ T1538] uclogic 0003:256C:006D.0002: failed probing parameters: -22 [ 138.908627][ T1538] uclogic: probe of 0003:256C:006D.0002 failed with error -22 [ 139.038055][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 139.095538][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 139.137981][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.175904][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.554983][ T4409] bond0 (unregistering): Released all slaves [ 139.881456][ T4981] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 140.296727][ T1538] usb 4-1: USB disconnect, device number 3 [ 142.882256][ T5033] binder_alloc: 5032: binder_alloc_buf, no vma [ 143.646307][ T5038] xt_CT: No such helper "pptp" [ 144.176744][ T5047] vivid-002: disconnect [ 144.371904][ T5044] vivid-002: reconnect [ 144.659073][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.701556][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.781883][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.796653][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.864974][ T4313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 144.873763][ T4756] device veth0_vlan entered promiscuous mode [ 144.887180][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.941116][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.006186][ T4756] device veth1_vlan entered promiscuous mode [ 145.206039][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.231169][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.285294][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.338548][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.396007][ T4756] device veth0_macvtap entered promiscuous mode [ 145.442388][ T4756] device veth1_macvtap entered promiscuous mode [ 145.671514][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.696497][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.777128][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.848941][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.075775][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.558169][ T5076] binder: BINDER_SET_CONTEXT_MGR already set [ 146.829137][ T5078] xt_CT: No such helper "pptp" [ 146.860184][ T5076] binder: 5075:5076 ioctl 4018620d 200000004a80 returned -16 [ 146.875709][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.936717][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.015747][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.092448][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.131138][ T4313] usb 3-1: Using ep0 maxpacket: 8 [ 147.140244][ T4313] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 147.166280][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.189680][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.198167][ T4313] pvrusb2: Hardware description: Terratec Grabster AV400 [ 147.215727][ T4313] pvrusb2: ********** [ 147.219794][ T4313] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 147.238971][ T4313] pvrusb2: Important functionality might not be entirely working. [ 147.247942][ T4756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.251898][ T4313] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 147.267451][ T4313] pvrusb2: ********** [ 147.282540][ T5087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.200'. [ 147.291923][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.317247][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.368115][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.395841][ T2308] pvrusb2: Invalid write control endpoint [ 147.411419][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.469583][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.505954][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.541255][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.566054][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.580577][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.594980][ T2308] pvrusb2: Invalid write control endpoint [ 147.603815][ T2308] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 147.613814][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.623978][ T2308] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 147.631835][ T2308] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 147.650448][ T4756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.663498][ T2308] pvrusb2: Device being rendered inoperable [ 147.684676][ T5053] pvrusb2: Attempted to execute control transfer when device not ok [ 147.705947][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.718599][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.727172][ T2308] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 147.738092][ T22] usb 3-1: USB disconnect, device number 2 [ 147.750196][ T4756] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.761671][ T2308] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 147.775756][ T4756] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.785209][ T4756] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.821181][ T2308] pvrusb2: Attached sub-driver cx25840 [ 147.844695][ T2308] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 147.851280][ T4756] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.876685][ T2308] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 148.325939][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.333914][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.541358][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.589468][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.617326][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.123245][ T5118] binder_alloc: 5117: binder_alloc_buf, no vma [ 149.132650][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.257570][ T5130] xt_CT: No such helper "pptp" [ 150.539183][ T5139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.212'. [ 151.426034][ T4377] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.019067][ T4377] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.049587][ T4377] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 152.085908][ T4377] usb 5-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 152.125888][ T4377] usb 5-1: Product: syz [ 152.140537][ T4377] usb 5-1: SerialNumber: syz [ 152.178081][ T4377] usb 5-1: config 0 descriptor?? [ 152.228446][ T4377] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 152.251489][ T4377] usb 5-1: Detected SIO [ 153.090908][ T4377] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 153.458961][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.467554][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.361410][ T5126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.493767][ T5126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.305241][ T5126] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.314584][ T5126] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.323875][ T5126] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.333627][ T5126] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.487930][ T4347] usb 5-1: USB disconnect, device number 3 [ 155.577169][ T4347] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.608889][ T4347] ftdi_sio 5-1:0.0: device disconnected [ 156.184306][ T5199] vivid-001: disconnect [ 156.487331][ T5197] vivid-001: reconnect [ 156.949196][ T5203] xt_CT: No such helper "pptp" [ 158.467830][ T5209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.226'. [ 160.468024][ T5235] 9pnet_fd: p9_fd_create_tcp (5235): problem connecting socket to 127.0.0.1 [ 161.369766][ T5246] vivid-002: disconnect [ 161.557378][ T5241] vivid-002: reconnect [ 161.798407][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 162.230938][ T5261] xt_CT: No such helper "pptp" [ 162.265846][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 162.359712][ T22] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 162.415738][ T22] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 162.455440][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 162.492121][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.673439][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.685594][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.695526][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 162.705616][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.804912][ T22] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 162.957940][ T5276] loop3: detected capacity change from 0 to 256 [ 163.034674][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.456579][ T22] usb 3-1: config 0 descriptor?? [ 163.603058][ T5281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 163.678092][ T22] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 164.078343][ T22] usb 3-1: USB disconnect, device number 3 [ 164.496841][ T22] usblp0: removed [ 164.547772][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.246'. [ 166.809226][ T5328] loop5: detected capacity change from 0 to 256 [ 167.741987][ T5336] xt_CT: No such helper "pptp" [ 169.570683][ T5356] 9pnet_fd: p9_fd_create_tcp (5356): problem connecting socket to 127.0.0.1 [ 170.683844][ T5383] loop5: detected capacity change from 0 to 256 [ 171.364444][ T4356] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.708933][ T5401] binder: Binderfs stats mode cannot be changed during a remount [ 175.381877][ T5430] loop4: detected capacity change from 0 to 256 [ 175.417859][ T4356] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.601665][ T5407] 9pnet_fd: p9_fd_create_tcp (5407): problem connecting socket to 127.0.0.1 [ 175.758832][ T5443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'. [ 175.913670][ T5450] loop2: detected capacity change from 0 to 512 [ 176.085471][ T5450] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 176.106761][ T5450] EXT4-fs (loop2): mount failed [ 177.848405][ T5474] xt_CT: No such helper "pptp" [ 178.093104][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 179.832475][ T5501] xt_CT: No such helper "pptp" [ 180.543126][ T5517] loop0: detected capacity change from 0 to 256 [ 181.291418][ T5532] netlink: 'syz.2.311': attribute type 12 has an invalid length. [ 181.331328][ T5532] netlink: 'syz.2.311': attribute type 29 has an invalid length. [ 181.409595][ T5532] netlink: 148 bytes leftover after parsing attributes in process `syz.2.311'. [ 181.482711][ T5532] netlink: 59 bytes leftover after parsing attributes in process `syz.2.311'. [ 181.543325][ T5537] Bluetooth: MGMT ver 1.22 [ 182.840019][ T5556] trusted_key: encrypted_key: insufficient parameters specified [ 184.266140][ T5570] xt_CT: No such helper "pptp" [ 185.618900][ T5605] trusted_key: encrypted_key: insufficient parameters specified [ 186.946591][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 186.958520][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 188.059121][ T5639] fuse: Bad value for 'fd' [ 188.555012][ T5641] autofs4:pid:5641:autofs_fill_super: called with bogus options [ 189.424783][ T5669] loop0: detected capacity change from 0 to 512 [ 189.602352][ T5669] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 189.625122][ T5669] EXT4-fs (loop0): mount failed [ 190.697440][ T5685] binder: 5682:5685 ioctl 4018620d 0 returned -22 [ 191.280703][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 191.287738][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 191.294603][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 191.670960][ T5701] binder: BINDER_SET_CONTEXT_MGR already set [ 191.736133][ T5701] binder: 5699:5701 ioctl 4018620d 200000004a80 returned -16 [ 191.788634][ T5707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.354'. [ 191.890033][ T5702] xt_CT: No such helper "pptp" [ 194.357076][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.363513][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.896176][ T5769] xt_CT: No such helper "pptp" [ 197.649234][ T5787] overlayfs: missing 'workdir' [ 199.881999][ T5863] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 200.016023][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 200.176273][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 200.760612][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.085954][ T22] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 201.095057][ T22] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 201.222309][ T22] usb 6-1: Product: syz [ 201.250539][ T22] usb 6-1: SerialNumber: syz [ 201.276713][ T22] usb 6-1: config 0 descriptor?? [ 201.301376][ T22] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 201.316467][ T22] usb 6-1: Detected SIO [ 201.332741][ T22] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 202.076198][ T22] usb 6-1: USB disconnect, device number 2 [ 202.110745][ T22] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 202.128122][ T22] ftdi_sio 6-1:0.0: device disconnected [ 204.990788][ T22] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 205.181433][ T5918] tipc: Started in network mode [ 205.186738][ T5918] tipc: Node identity 46de0ff0f1b1, cluster identity 4711 [ 205.195071][ T5918] tipc: Enabled bearer , priority 0 [ 205.214432][ T5918] device syzkaller0 entered promiscuous mode [ 205.288195][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.332786][ T5918] tipc: Resetting bearer [ 205.344689][ T22] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 205.368630][ T22] usb 4-1: can't read configurations, error -71 [ 205.396688][ T5917] tipc: Resetting bearer [ 205.473281][ T5917] tipc: Disabling bearer [ 210.492230][ T5984] xt_CT: No such helper "pptp" [ 210.798273][ T5997] netlink: 'syz.5.410': attribute type 1 has an invalid length. [ 213.955616][ T6029] loop2: detected capacity change from 0 to 512 [ 214.146597][ T6029] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 214.226806][ T6029] EXT4-fs (loop2): mount failed [ 214.292618][ T6045] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 216.660836][ T6073] fuse: Bad value for 'fd' [ 216.671746][ T6068] xt_CT: No such helper "pptp" [ 224.122977][ T6148] xt_CT: No such helper "pptp" [ 224.144477][ T6153] loop0: detected capacity change from 0 to 512 [ 224.423750][ T6153] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 224.541964][ T6153] EXT4-fs (loop0): mount failed [ 224.945973][ T4314] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 225.284186][ T6175] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 225.291108][ T6175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.298589][ T6178] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 225.305132][ T6178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.442013][ T4314] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 225.444985][ T6175] vhci_hcd vhci_hcd.0: Device attached [ 225.454169][ T4314] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.494068][ T4314] usb 6-1: config 0 has no interfaces? [ 225.505826][ T4314] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 225.523100][ T4314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.532312][ T6178] vhci_hcd vhci_hcd.0: Device attached [ 225.557441][ T4314] usb 6-1: config 0 descriptor?? [ 225.695836][ T4377] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 227.612480][ T6176] vhci_hcd: connection reset by peer [ 227.612482][ T6180] vhci_hcd: connection closed [ 227.618486][ T5845] vhci_hcd: stop threads [ 227.663570][ T5845] vhci_hcd: release socket [ 227.690871][ T5845] vhci_hcd: disconnect device [ 227.710477][ T5845] vhci_hcd: stop threads [ 227.730456][ T5845] vhci_hcd: release socket [ 227.752218][ T5845] vhci_hcd: disconnect device [ 228.559822][ T4311] usb 6-1: USB disconnect, device number 3 [ 229.395970][ T4314] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 229.615926][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 229.627288][ T4314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 229.721741][ T4314] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 229.743540][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 229.752103][ T4314] usb 1-1: Product: syz [ 229.757460][ T4314] usb 1-1: Manufacturer: syz [ 229.762124][ T4314] usb 1-1: SerialNumber: syz [ 229.778745][ T4314] usb 1-1: config 0 descriptor?? [ 229.784437][ T6234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 229.947031][ T6240] loop2: detected capacity change from 0 to 512 [ 230.016548][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.465'. [ 230.918171][ T4314] usb 1-1: USB disconnect, device number 2 [ 230.936399][ T6240] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 231.226354][ T6240] EXT4-fs (loop2): mount failed [ 231.255753][ T4377] vhci_hcd: vhci_device speed not set [ 232.143956][ T6273] device ipip0 entered promiscuous mode [ 232.395580][ T6273] team0: Device ipip0 is of different type [ 234.193298][ T6294] input: syz0 as /devices/virtual/input/input12 [ 234.388441][ T6295] fuse: Bad value for 'fd' [ 234.946425][ T6305] loop0: detected capacity change from 0 to 256 [ 236.027941][ T4356] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.134053][ T6307] loop2: detected capacity change from 0 to 512 [ 236.980798][ T6307] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 237.028543][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 237.082038][ T6307] EXT4-fs (loop2): mount failed [ 241.803577][ T6368] loop4: detected capacity change from 0 to 256 [ 241.949516][ T6364] loop0: detected capacity change from 0 to 512 [ 241.988198][ T4356] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.615756][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 243.042598][ T6364] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 243.076801][ T6364] EXT4-fs (loop0): mount failed [ 244.001859][ T6399] vivid-000: disconnect [ 244.376316][ T6395] vivid-000: reconnect [ 246.526291][ T6414] syz.0.507 uses obsolete (PF_INET,SOCK_PACKET) [ 249.956087][ T6456] vivid-002: disconnect [ 250.327041][ T6460] loop5: detected capacity change from 0 to 256 [ 251.020624][ T6451] vivid-002: reconnect [ 251.135866][ T4356] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.119115][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 252.149154][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 252.408388][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 252.414493][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 252.456138][ T6464] xt_CT: No such helper "pptp" [ 252.650494][ T6479] ceph: No mds server is up or the cluster is laggy [ 252.696187][ T6493] binder: 6492:6493 ioctl 4018620d 0 returned -22 [ 252.747732][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 252.763309][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 254.980411][ T6525] loop2: detected capacity change from 0 to 256 [ 255.776261][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.782851][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.387493][ T4356] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.806222][ T6540] binder: 6539:6540 ioctl 4018620d 0 returned -22 [ 258.328425][ T6553] device syzkaller1 entered promiscuous mode [ 260.040395][ T6546] kvm [6545]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 260.520165][ T6575] loop3: detected capacity change from 0 to 256 [ 261.237638][ T4356] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.480530][ T6581] vivid-001: disconnect [ 261.941622][ T6579] vivid-001: reconnect [ 262.852967][ T6602] binder: BINDER_SET_CONTEXT_MGR already set [ 262.915762][ T6602] binder: 6601:6602 ioctl 4018620d 200000004a80 returned -16 [ 264.153218][ T6623] loop3: detected capacity change from 0 to 256 [ 264.372094][ T6622] xt_CT: No such helper "pptp" [ 264.863204][ T4356] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.261158][ T6632] device syzkaller1 entered promiscuous mode [ 268.192610][ T6649] vivid-001: disconnect [ 268.690031][ T6641] vivid-001: reconnect [ 269.149675][ T6659] device syzkaller1 entered promiscuous mode [ 270.637603][ T6662] binder: BINDER_SET_CONTEXT_MGR already set [ 270.643652][ T6662] binder: 6661:6662 ioctl 4018620d 200000004a80 returned -16 [ 270.993852][ T6678] loop0: detected capacity change from 0 to 256 [ 271.717624][ T4356] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.508991][ T6697] netlink: 56 bytes leftover after parsing attributes in process `syz.3.569'. [ 272.518301][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 272.527416][ T6697] netlink: 43 bytes leftover after parsing attributes in process `syz.3.569'. [ 272.536468][ T6697] netlink: 43 bytes leftover after parsing attributes in process `syz.3.569'. [ 273.185710][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 274.041796][ T6711] xt_CT: No such helper "pptp" [ 274.197307][ T48] Bluetooth: hci2: Malformed LE Event: 0x0b [ 274.576443][ T6729] binder: BINDER_SET_CONTEXT_MGR already set [ 274.601598][ T6729] binder: 6728:6729 ioctl 4018620d 200000004a80 returned -16 [ 274.645808][ T4313] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 274.835784][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 274.842525][ T4313] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 274.996242][ T4313] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 275.012172][ T6740] device syzkaller1 entered promiscuous mode [ 275.145102][ T6743] loop5: detected capacity change from 0 to 256 [ 276.103657][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.529343][ T4313] usb 5-1: Product: syz [ 277.698216][ T4313] usb 5-1: Manufacturer: syz [ 277.702860][ T4313] usb 5-1: SerialNumber: syz [ 277.762965][ T4313] usb 5-1: config 0 descriptor?? [ 277.809061][ T4313] usb 5-1: can't set config #0, error -71 [ 277.815028][ T4356] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.923020][ T4313] usb 5-1: USB disconnect, device number 4 [ 278.618451][ T124] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 279.622663][ T124] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 279.662478][ T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.849456][ T124] usb 3-1: Product: syz [ 279.854711][ T124] usb 3-1: Manufacturer: syz [ 279.887550][ T124] usb 3-1: SerialNumber: syz [ 279.923654][ T124] usb 3-1: config 0 descriptor?? [ 280.155005][ T124] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 281.993996][ T124] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 282.012074][ T124] usb 3-1: USB disconnect, device number 4 [ 283.137938][ T6809] loop4: detected capacity change from 0 to 512 [ 283.257823][ T6814] loop2: detected capacity change from 0 to 256 [ 284.003220][ T4356] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.024511][ T6809] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 284.110569][ T6809] EXT4-fs (loop4): mount failed [ 284.531673][ T6821] xt_CT: No such helper "pptp" [ 284.942364][ T4626] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.847222][ T6836] device syzkaller1 entered promiscuous mode [ 289.788196][ T6865] binder: 6864:6865 ioctl c0306201 0 returned -14 [ 292.709995][ T6896] device syzkaller1 entered promiscuous mode [ 296.935497][ T6925] xt_CT: No such helper "pptp" [ 297.498520][ T6931] Zero length message leads to an empty skb [ 299.597979][ T6951] overlayfs: missing 'workdir' [ 302.612145][ T4316] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 302.805738][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 302.812634][ T4316] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 302.855844][ T6973] device syzkaller1 entered promiscuous mode [ 304.402646][ T4316] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 304.484339][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 304.592567][ T4316] usb 5-1: Product: syz [ 304.640309][ T4316] usb 5-1: Manufacturer: syz [ 304.693661][ T4316] usb 5-1: SerialNumber: syz [ 304.835513][ T4316] usb 5-1: config 0 descriptor?? [ 304.939121][ T4316] usb 5-1: can't set config #0, error -71 [ 305.101697][ T4316] usb 5-1: USB disconnect, device number 5 [ 306.567743][ T6985] binder: Binderfs stats mode cannot be changed during a remount [ 307.811528][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 311.721231][ T7025] xt_CT: No such helper "pptp" [ 312.000499][ T7032] device syzkaller1 entered promiscuous mode [ 314.211921][ T7044] fuse: Bad value for 'fd' [ 314.837520][ T7058] binder: Binderfs stats mode cannot be changed during a remount [ 316.018168][ T4349] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 316.257137][ T4349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.292083][ T4349] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 316.332061][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 316.356024][ T4349] usb 1-1: Product: syz [ 316.375874][ T4349] usb 1-1: SerialNumber: syz [ 316.413714][ T4349] usb 1-1: config 0 descriptor?? [ 316.433100][ T4349] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 316.468980][ T4349] usb 1-1: Detected SIO [ 316.492804][ T4349] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 316.634492][ T4349] usb 1-1: USB disconnect, device number 3 [ 316.676237][ T4349] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 316.704542][ T4349] ftdi_sio 1-1:0.0: device disconnected [ 317.086014][ T7071] loop2: detected capacity change from 0 to 256 [ 317.190264][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.197092][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.167379][ T4356] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.542541][ T7076] device syzkaller1 entered promiscuous mode [ 319.917199][ T7089] device syzkaller1 entered promiscuous mode [ 322.378321][ T7099] binder: Binderfs stats mode cannot be changed during a remount [ 323.260762][ T7113] loop3: detected capacity change from 0 to 256 [ 324.014650][ T4356] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.511308][ T7116] vivid-004: disconnect [ 325.323258][ T7114] vivid-004: reconnect [ 325.570355][ T7126] device syzkaller1 entered promiscuous mode [ 327.681494][ T7130] xt_CT: No such helper "pptp" [ 329.850684][ T7153] loop2: detected capacity change from 0 to 512 [ 330.603200][ T7153] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 330.692822][ T7153] EXT4-fs (loop2): mount failed [ 332.377183][ T7175] vivid-001: disconnect [ 332.486548][ T7179] device syzkaller1 entered promiscuous mode [ 334.010246][ T7169] vivid-001: reconnect [ 335.413977][ T7192] binder: Binderfs stats mode cannot be changed during a remount [ 335.924616][ T7194] device syzkaller1 entered promiscuous mode [ 336.269799][ T7197] kvm [7196]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x30000ffa9 [ 337.419337][ T7205] xt_CT: No such helper "pptp" [ 338.944305][ T7222] loop3: detected capacity change from 0 to 256 [ 339.984190][ T4626] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 340.282549][ T7224] loop2: detected capacity change from 0 to 512 [ 340.433241][ T7224] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 340.514481][ T7224] EXT4-fs (loop2): mount failed [ 340.675543][ T7233] device syzkaller1 entered promiscuous mode [ 342.078492][ T7241] binder: Binderfs stats mode cannot be changed during a remount [ 343.915648][ T7253] overlayfs: missing 'workdir' [ 345.093413][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 345.592111][ T7266] loop4: detected capacity change from 0 to 256 [ 347.131417][ T7270] xt_CT: No such helper "pptp" [ 349.504452][ T7288] xt_CT: No such helper "pptp" [ 349.681494][ T7283] xt_CT: No such helper "pptp" [ 351.393893][ T7315] loop2: detected capacity change from 0 to 256 [ 352.474455][ T7318] overlayfs: missing 'workdir' [ 353.554015][ T7327] loop2: detected capacity change from 0 to 512 [ 353.652598][ T7327] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 354.094813][ T7314] xt_CT: No such helper "pptp" [ 354.133652][ T7327] EXT4-fs (loop2): mount failed [ 355.218147][ T7342] binder: 7341:7342 ioctl 4018620d 0 returned -22 [ 356.828842][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.735'. [ 357.545947][ T7367] loop4: detected capacity change from 0 to 256 [ 358.641151][ T7368] overlayfs: missing 'workdir' [ 359.936985][ T7376] xt_CT: No such helper "pptp" [ 360.533992][ T7390] xt_CT: No such helper "pptp" [ 360.632742][ T7386] xt_CT: No such helper "pptp" [ 364.506663][ T7413] loop3: detected capacity change from 0 to 512 [ 365.432199][ T7420] loop5: detected capacity change from 0 to 256 [ 366.483465][ T7413] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 366.529827][ T7413] EXT4-fs (loop3): mount failed [ 367.276003][ T7432] overlayfs: missing 'workdir' [ 370.046653][ T7446] xt_CT: No such helper "pptp" [ 371.176148][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 371.200331][ T7454] binder: 7453:7454 ioctl 4018620d 0 returned -22 [ 371.419817][ T7462] device syzkaller1 entered promiscuous mode [ 373.243766][ T7467] xt_CT: No such helper "pptp" [ 374.169009][ T7480] loop2: detected capacity change from 0 to 256 [ 374.721472][ T4356] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 378.247259][ T7493] overlayfs: missing 'workdir' [ 378.806237][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.812592][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.324230][ T7499] binder: 7498:7499 ioctl c0306201 0 returned -14 [ 379.450079][ T7500] xt_CT: No such helper "pptp" [ 379.944381][ T7505] xt_CT: No such helper "pptp" [ 380.591623][ T7521] loop5: detected capacity change from 0 to 256 [ 382.398877][ T7525] loop2: detected capacity change from 0 to 512 [ 382.859137][ T7525] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 383.795270][ T7525] EXT4-fs (loop2): mount failed [ 385.604516][ T7547] binder: 7546:7547 ioctl c0306201 0 returned -14 [ 386.306636][ T7551] xt_CT: No such helper "pptp" [ 386.335075][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 386.977609][ T7561] device syzkaller1 entered promiscuous mode [ 387.789606][ T7565] xt_CT: No such helper "pptp" [ 388.382047][ T7578] loop4: detected capacity change from 0 to 256 [ 391.638024][ T7586] device syzkaller1 entered promiscuous mode [ 393.494745][ T7592] binder: 7591:7592 ioctl c0306201 0 returned -14 [ 394.569696][ T7601] xt_CT: No such helper "pptp" [ 396.377222][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.409220][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.417795][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.425955][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.434809][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 396.442201][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.569581][ T5842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.545730][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 398.968773][ T7635] loop2: detected capacity change from 0 to 256 [ 398.989528][ T5842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.007451][ T4356] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 401.161522][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 401.322929][ T5842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.714605][ T5842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.018358][ T7619] chnl_net:caif_netlink_parms(): no params data found [ 402.339080][ T7656] xt_CT: No such helper "pptp" [ 403.185696][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 403.392612][ T7619] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.213271][ T7619] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.246962][ T7619] device bridge_slave_0 entered promiscuous mode [ 404.275033][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.428859][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.446894][ T7619] device bridge_slave_1 entered promiscuous mode [ 404.574462][ T7687] loop4: detected capacity change from 0 to 256 [ 405.526498][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 405.559163][ T4356] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 406.429913][ T7696] overlayfs: missing 'workdir' [ 407.583863][ T7619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.828020][ T7619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.321787][ T7619] team0: Port device team_slave_0 added [ 409.903071][ T7619] team0: Port device team_slave_1 added [ 410.964266][ T7619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.022976][ T7619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.100807][ T7619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.202156][ T7619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.237722][ T7619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.293158][ T7619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.664798][ T7619] device hsr_slave_0 entered promiscuous mode [ 411.697095][ T7619] device hsr_slave_1 entered promiscuous mode [ 411.756645][ T7728] device syzkaller1 entered promiscuous mode [ 413.065530][ T7750] xt_CT: No such helper "pptp" [ 415.204090][ T5842] device hsr_slave_0 left promiscuous mode [ 415.230965][ T5842] device hsr_slave_1 left promiscuous mode [ 415.246060][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.273904][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.311748][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.329653][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.386419][ T5842] device bridge_slave_1 left promiscuous mode [ 415.394361][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.072394][ T5842] device bridge_slave_0 left promiscuous mode [ 416.100700][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.151071][ T7776] overlayfs: missing 'workdir' [ 416.326389][ T5842] device veth1_macvtap left promiscuous mode [ 416.332516][ T5842] device veth0_macvtap left promiscuous mode [ 416.359428][ T5842] device veth1_vlan left promiscuous mode [ 416.372329][ T5842] device veth0_vlan left promiscuous mode [ 421.274242][ T5842] team0 (unregistering): Port device team_slave_1 removed [ 421.596939][ T5842] team0 (unregistering): Port device team_slave_0 removed [ 421.673843][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.749543][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.378988][ T5842] bond0 (unregistering): Released all slaves [ 423.019457][ T7619] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 423.025170][ T7826] xt_CT: No such helper "pptp" [ 423.211497][ T7619] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 423.339920][ T7619] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 424.524664][ T7619] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 424.623111][ T7844] device syzkaller1 entered promiscuous mode [ 424.974604][ T7619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.052841][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.067535][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.099704][ T7619] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.145311][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.173536][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.198856][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.206054][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.265864][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.324692][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.356348][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.385451][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.392644][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.442297][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.476796][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 425.513958][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 425.528753][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.506060][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.655796][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.677304][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.706560][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.885398][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.940266][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.012417][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.071144][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.160595][ T7883] device syzkaller1 entered promiscuous mode [ 429.376545][ T7889] xt_CT: No such helper "pptp" [ 429.502670][ T7880] overlayfs: missing 'workdir' [ 431.380554][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.905750][ T1538] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 431.953177][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.148299][ T1538] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.163359][ T7619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.217611][ T1538] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 432.265649][ T1538] usb 1-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 432.413709][ T1538] usb 1-1: Product: syz [ 432.418351][ T1538] usb 1-1: SerialNumber: syz [ 432.435505][ T1538] usb 1-1: config 0 descriptor?? [ 432.451226][ T1538] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 433.192758][ T1538] usb 1-1: Detected SIO [ 433.215884][ T1538] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 433.263845][ T1538] usb 1-1: USB disconnect, device number 4 [ 433.447048][ T1538] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 433.470079][ T1538] ftdi_sio 1-1:0.0: device disconnected [ 433.921895][ T7934] xt_CT: No such helper "pptp" [ 434.323580][ T7946] vivid-001: disconnect [ 436.252170][ T7941] vivid-001: reconnect [ 436.541148][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.607031][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.683676][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.717509][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.772910][ T7619] device veth0_vlan entered promiscuous mode [ 436.781049][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.802072][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.840244][ T7619] device veth1_vlan entered promiscuous mode [ 437.450485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 437.517365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 437.729397][ T7619] device veth0_macvtap entered promiscuous mode [ 437.741549][ T7619] device veth1_macvtap entered promiscuous mode [ 437.753641][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.000730][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.045796][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 438.121655][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.240670][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.320593][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.166516][ T7986] overlayfs: missing 'workdir' [ 439.585654][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.704028][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.792389][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.865843][ T7619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.873336][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 439.897325][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 439.908975][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.075965][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.082317][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.095778][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.107361][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.173590][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.202773][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.225707][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.242032][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.273412][ T7619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.314743][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 440.338070][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.383293][ T7619] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.412272][ T7619] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.460838][ T7619] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.489954][ T7619] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.707722][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 440.782796][ T5859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.810189][ T5859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.847814][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 440.873679][ T5859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.926044][ T5859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.945186][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 441.392260][ T8017] loop6: detected capacity change from 0 to 512 [ 441.531897][ T8017] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 441.556624][ T8017] EXT4-fs (loop6): mount failed [ 442.055886][ T8027] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 442.062477][ T8027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.186816][ T8027] vhci_hcd vhci_hcd.0: Device attached [ 442.220747][ T8033] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 442.227328][ T8033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.400047][ T8033] vhci_hcd vhci_hcd.0: Device attached [ 442.466296][ T33] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 443.445126][ T8035] vhci_hcd: connection closed [ 443.447272][ T5855] vhci_hcd: stop threads [ 443.458320][ T8029] vhci_hcd: connection reset by peer [ 443.491088][ T5855] vhci_hcd: release socket [ 443.506049][ T5855] vhci_hcd: disconnect device [ 443.529737][ T5855] vhci_hcd: stop threads [ 443.534068][ T5855] vhci_hcd: release socket [ 443.643245][ T5855] vhci_hcd: disconnect device [ 444.507833][ T8057] overlayfs: missing 'workdir' [ 445.509266][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.901'. [ 445.546268][ T8068] binder: Binderfs stats mode cannot be changed during a remount [ 446.744257][ T8073] xt_CT: No such helper "pptp" [ 447.825683][ T33] vhci_hcd: vhci_device speed not set [ 448.941129][ T8101] overlayfs: missing 'workdir' [ 450.846703][ T8115] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 450.853253][ T8115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.913644][ T8115] vhci_hcd vhci_hcd.0: Device attached [ 451.005947][ T8118] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 451.012580][ T8118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 451.115794][ T8118] vhci_hcd vhci_hcd.0: Device attached [ 451.185744][ T4313] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 451.738945][ T8121] vhci_hcd: connection closed [ 451.739178][ T5849] vhci_hcd: stop threads [ 451.742745][ T8116] vhci_hcd: connection reset by peer [ 451.744328][ T5849] vhci_hcd: release socket [ 451.826526][ T5849] vhci_hcd: disconnect device [ 451.851988][ T5849] vhci_hcd: stop threads [ 451.865890][ T5849] vhci_hcd: release socket [ 451.895753][ T5849] vhci_hcd: disconnect device [ 453.875526][ T8149] loop4: detected capacity change from 0 to 512 [ 454.135009][ T8149] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 454.166873][ T8149] EXT4-fs (loop4): mount failed [ 456.150927][ T8174] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 456.157509][ T8174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.190698][ T8174] vhci_hcd vhci_hcd.0: Device attached [ 456.305662][ T4313] vhci_hcd: vhci_device speed not set [ 456.455819][ T33] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 456.904208][ T8179] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 456.910789][ T8179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.978346][ T8179] vhci_hcd vhci_hcd.0: Device attached [ 456.983905][ T8181] vhci_hcd: connection closed [ 456.984064][ T8175] vhci_hcd: connection reset by peer [ 456.996953][ T5857] vhci_hcd: stop threads [ 457.001336][ T5857] vhci_hcd: release socket [ 457.027713][ T5857] vhci_hcd: disconnect device [ 457.057655][ T5857] vhci_hcd: stop threads [ 457.061960][ T5857] vhci_hcd: release socket [ 457.080017][ T5857] vhci_hcd: disconnect device [ 459.429593][ T8214] xt_CT: No such helper "pptp" [ 461.595767][ T33] vhci_hcd: vhci_device speed not set [ 463.092479][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.6.936'. [ 463.817852][ T8251] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 463.824422][ T8251] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 463.914369][ T8251] vhci_hcd vhci_hcd.0: Device attached [ 463.957394][ T8258] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 463.963989][ T8258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.117460][ T8258] vhci_hcd vhci_hcd.0: Device attached [ 464.426177][ T8266] binder: Binderfs stats mode cannot be changed during a remount [ 464.816109][ T4316] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 465.465653][ T8260] vhci_hcd: connection closed [ 465.465812][ T8252] vhci_hcd: connection reset by peer [ 465.477345][ T5855] vhci_hcd: stop threads [ 465.481631][ T5855] vhci_hcd: release socket [ 465.487505][ T5855] vhci_hcd: disconnect device [ 465.493219][ T5855] vhci_hcd: stop threads [ 465.514191][ T5855] vhci_hcd: release socket [ 465.691246][ T5855] vhci_hcd: disconnect device [ 466.224133][ T8273] xt_CT: No such helper "pptp" [ 466.405738][ T8279] binder: BINDER_SET_CONTEXT_MGR already set [ 466.411783][ T8279] binder: 8278:8279 ioctl 4018620d 200000004a80 returned -16 [ 467.481892][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.948'. [ 469.985641][ T4316] vhci_hcd: vhci_device speed not set [ 471.441433][ T8324] xt_CT: No such helper "pptp" [ 471.571330][ T8357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.959'. [ 473.171366][ T8385] binder: Binderfs stats mode cannot be changed during a remount [ 475.574806][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.972'. [ 480.880502][ T8509] binder: Binderfs stats mode cannot be changed during a remount [ 480.908951][ T8506] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 480.915528][ T8506] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 480.934172][ T8511] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 480.940998][ T8511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 480.954394][ T8506] vhci_hcd vhci_hcd.0: Device attached [ 481.067554][ T8511] vhci_hcd vhci_hcd.0: Device attached [ 481.461598][ T4317] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 481.667729][ T8512] vhci_hcd: connection closed [ 481.667961][ T5849] vhci_hcd: stop threads [ 481.677881][ T8507] vhci_hcd: connection reset by peer [ 481.731465][ T5849] vhci_hcd: release socket [ 481.736534][ T5849] vhci_hcd: disconnect device [ 481.741520][ T5849] vhci_hcd: stop threads [ 481.751073][ T5849] vhci_hcd: release socket [ 481.759398][ T5849] vhci_hcd: disconnect device [ 482.087826][ T8524] NILFS (nullb0): couldn't find nilfs on the device [ 485.200093][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1012'. [ 485.389140][ T8573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 485.396193][ T8573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 485.455765][ T8573] vhci_hcd vhci_hcd.0: Device attached [ 485.464297][ T8577] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 485.470859][ T8577] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 485.586107][ T8577] vhci_hcd vhci_hcd.0: Device attached [ 485.805978][ T4376] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 486.088262][ T8578] vhci_hcd: connection closed [ 486.088497][ T4399] vhci_hcd: stop threads [ 486.097767][ T8575] vhci_hcd: connection reset by peer [ 486.105619][ T4399] vhci_hcd: release socket [ 486.110180][ T4399] vhci_hcd: disconnect device [ 486.115114][ T4399] vhci_hcd: stop threads [ 486.137162][ T4399] vhci_hcd: release socket [ 486.146838][ T4399] vhci_hcd: disconnect device [ 486.652998][ T4317] vhci_hcd: vhci_device speed not set [ 489.265728][ T4285] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 489.949127][ T8631] binder: 8630:8631 ioctl c0306201 0 returned -14 [ 490.947488][ T4376] vhci_hcd: vhci_device speed not set [ 491.757772][ T8648] wg1 speed is unknown, defaulting to 1000 [ 491.764013][ T8648] wg1 speed is unknown, defaulting to 1000 [ 491.773310][ T8648] wg1 speed is unknown, defaulting to 1000 [ 491.785099][ T8648] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 491.821864][ T8648] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 491.853612][ T8648] wg1 speed is unknown, defaulting to 1000 [ 492.051444][ T8648] wg1 speed is unknown, defaulting to 1000 [ 492.107195][ T8648] wg1 speed is unknown, defaulting to 1000 [ 492.209974][ T8659] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 492.216554][ T8659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 492.239359][ T8659] vhci_hcd vhci_hcd.0: Device attached [ 492.248531][ T8648] wg1 speed is unknown, defaulting to 1000 [ 492.254995][ T8648] wg1 speed is unknown, defaulting to 1000 [ 492.265845][ T8653] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 492.272399][ T8653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 492.307798][ T8664] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 492.326054][ T8664] tipc: Enabled bearer , priority 10 [ 492.505807][ T4349] usb 33-2: new low-speed USB device number 2 using vhci_hcd [ 493.022616][ T8653] vhci_hcd vhci_hcd.0: Device attached [ 493.228862][ T8661] vhci_hcd: connection reset by peer [ 493.234415][ T5842] vhci_hcd: stop threads [ 493.239240][ T8655] vhci_hcd: connection closed [ 493.239248][ T5842] vhci_hcd: release socket [ 493.239318][ T5842] vhci_hcd: disconnect device [ 493.293351][ T5842] vhci_hcd: stop threads [ 493.308031][ T5842] vhci_hcd: release socket [ 493.313797][ T5842] vhci_hcd: disconnect device [ 493.457997][ T4317] tipc: Node number set to 3077509104 [ 495.482263][ T4313] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 495.685776][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 495.693145][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.739637][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.773646][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.869600][ T4313] usb 1-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 496.226651][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.238611][ T4313] usb 1-1: config 0 descriptor?? [ 496.495838][ T4313] usbhid 1-1:0.0: can't add hid device: -71 [ 496.501923][ T4313] usbhid: probe of 1-1:0.0 failed with error -71 [ 496.564149][ T4313] usb 1-1: USB disconnect, device number 5 [ 497.468197][ T8732] vivid-004: disconnect [ 497.472767][ T8731] vivid-004: reconnect [ 498.880206][ T4349] vhci_hcd: vhci_device speed not set [ 498.886186][ T8752] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1060'. [ 498.895582][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'. [ 498.905090][ T8752] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1060'. [ 498.914170][ T8752] netlink: 'syz.5.1060': attribute type 2 has an invalid length. [ 498.923334][ T8752] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1060'. [ 500.216556][ T4285] Bluetooth: hci1: hcon ffff88807aeba000 sent 1 < count 2047 [ 500.224057][ T4285] Bluetooth: hci1: hcon ffff88807aeba000 sent 0 < count 9 [ 500.543596][ T8786] vivid-001: disconnect [ 500.557757][ T8780] vivid-001: reconnect [ 501.509175][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.515606][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.408256][ T8834] xt_CT: No such helper "pptp" [ 505.157092][ T8848] vivid-004: disconnect [ 505.161741][ T8847] vivid-004: reconnect [ 507.433339][ T8870] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 508.402120][ T8894] vivid-001: disconnect [ 508.407800][ T8893] vivid-001: reconnect [ 509.661428][ T8919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1110'. [ 509.681450][ T8919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1110'. [ 509.928966][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1112'. [ 510.491045][ T1538] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 510.675645][ T1538] usb 1-1: Using ep0 maxpacket: 32 [ 510.711271][ T1538] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 510.760357][ T1538] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 510.782999][ T1538] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 510.800381][ T1538] usb 1-1: Product: syz [ 510.805912][ T1538] usb 1-1: Manufacturer: syz [ 510.810627][ T1538] usb 1-1: SerialNumber: syz [ 510.858231][ T1538] usb 1-1: config 0 descriptor?? [ 510.864027][ T8923] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 512.925691][ T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 512.937356][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'. [ 513.115597][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 513.123708][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.135628][ T14] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 513.144802][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.189959][ T14] usb 7-1: config 0 descriptor?? [ 513.200232][ T4316] usb 1-1: USB disconnect, device number 6 [ 513.505859][ T14] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 513.575483][ T8989] binder: Binderfs stats mode cannot be changed during a remount [ 514.286436][ T8992] xt_CT: No such helper "pptp" [ 515.091300][ T4349] usb 7-1: USB disconnect, device number 2 [ 516.526066][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1130'. [ 518.947011][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 520.866086][ T1538] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 520.880536][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1143'. [ 521.055765][ T1538] usb 7-1: Using ep0 maxpacket: 32 [ 521.066721][ T1538] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 521.094641][ T9038] misc userio: The device must be registered before sending interrupts [ 521.103329][ T1538] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 521.115960][ T9036] loop2: detected capacity change from 0 to 512 [ 521.125320][ T1538] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 522.399757][ T1538] usb 7-1: Product: syz [ 522.414243][ T1538] usb 7-1: Manufacturer: syz [ 522.428496][ T1538] usb 7-1: SerialNumber: syz [ 522.433342][ T9036] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 522.458139][ T1538] usb 7-1: config 0 descriptor?? [ 522.636163][ T9036] EXT4-fs (loop2): mount failed [ 522.751152][ T1538] usb 7-1: can't set config #0, error -71 [ 522.770915][ T1538] usb 7-1: USB disconnect, device number 3 [ 523.504065][ T9055] fuse: Unknown parameter 'group_id00000000000000000000' [ 525.864797][ T9074] xt_CT: No such helper "pptp" [ 526.081530][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1156'. [ 526.113194][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.247964][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.375867][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.522925][ T9103] fuse: Unknown parameter 'group_id00000000000000000000' [ 527.627633][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1161'. [ 530.255682][ T4349] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 530.479975][ T4349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.510722][ T9126] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 530.512420][ T4349] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 530.517268][ T9126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 530.549906][ T9126] vhci_hcd vhci_hcd.0: Device attached [ 530.592717][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 530.615840][ T4349] usb 1-1: Product: syz [ 530.620244][ T4349] usb 1-1: SerialNumber: syz [ 530.651263][ T4349] usb 1-1: config 0 descriptor?? [ 530.681875][ T4349] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 530.701563][ T4349] usb 1-1: Detected SIO [ 530.717047][ T4349] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 530.815827][ T4311] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 531.040849][ T4376] usb 1-1: USB disconnect, device number 7 [ 531.190427][ T4376] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 531.298539][ T4376] ftdi_sio 1-1:0.0: device disconnected [ 531.452913][ T9127] vhci_hcd: connection reset by peer [ 531.459118][ T5828] vhci_hcd: stop threads [ 531.463901][ T5828] vhci_hcd: release socket [ 531.471684][ T5828] vhci_hcd: disconnect device [ 532.765789][ T9149] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 532.772349][ T9149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.830823][ T9151] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 532.837396][ T9151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.845186][ T9149] vhci_hcd vhci_hcd.0: Device attached [ 532.979730][ T9151] vhci_hcd vhci_hcd.0: Device attached [ 533.065952][ T4349] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 533.950937][ T14] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 533.996181][ T4349] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 534.029503][ T4349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.070317][ T4349] usb 7-1: config 0 descriptor?? [ 534.294308][ T4349] [drm] vendor descriptor length:6 data:06 5f 01 74 75 6e 00 00 00 00 00 [ 534.304239][ T4349] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 534.400397][ T9155] vhci_hcd: connection closed [ 534.403427][ T5845] vhci_hcd: stop threads [ 534.417601][ T9152] vhci_hcd: connection reset by peer [ 534.423186][ T5845] vhci_hcd: release socket [ 534.438246][ T5845] vhci_hcd: disconnect device [ 534.448291][ T5845] vhci_hcd: stop threads [ 534.463692][ T5845] vhci_hcd: release socket [ 534.473880][ T5845] vhci_hcd: disconnect device [ 534.479477][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1179'. [ 534.494582][ T4349] [drm:udl_init] *ERROR* Selecting channel failed [ 534.527402][ T4349] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 534.536839][ T4349] [drm] Initialized udl on minor 2 [ 534.672422][ T4349] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 534.684618][ T4349] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 534.699497][ T4349] usb 7-1: USB disconnect, device number 4 [ 534.707591][ T4313] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 534.743369][ T4313] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 534.780474][ T4313] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 535.083408][ T9182] device syzkaller1 entered promiscuous mode [ 535.415770][ T4376] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 535.669065][ T4376] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.706982][ T4376] usb 7-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 535.878621][ T4376] usb 7-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 536.010711][ T4376] usb 7-1: Product: syz [ 536.025947][ T4311] vhci_hcd: vhci_device speed not set [ 536.088564][ T4376] usb 7-1: SerialNumber: syz [ 536.172832][ T4376] usb 7-1: config 0 descriptor?? [ 536.214648][ T4376] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 536.243590][ T4376] usb 7-1: Detected SIO [ 536.263807][ T4376] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 536.476888][ T4376] usb 7-1: USB disconnect, device number 5 [ 537.244411][ T4376] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 537.255845][ T4376] ftdi_sio 7-1:0.0: device disconnected [ 539.185728][ T14] vhci_hcd: vhci_device speed not set [ 540.667224][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1202'. [ 542.005717][ T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 542.350005][ T9263] fuse: Bad value for 'fd' [ 543.395644][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.828589][ T14] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 543.855012][ T14] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 543.883466][ T14] usb 6-1: Product: syz [ 543.888274][ T14] usb 6-1: SerialNumber: syz [ 543.895337][ T14] usb 6-1: config 0 descriptor?? [ 543.914525][ T14] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 544.043609][ T14] usb 6-1: Detected SIO [ 544.075045][ T14] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 544.518645][ T14] usb 6-1: USB disconnect, device number 4 [ 544.578279][ T14] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 544.626012][ T14] ftdi_sio 6-1:0.0: device disconnected [ 545.860845][ T9299] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1216'. [ 545.870000][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'. [ 545.879095][ T9299] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1216'. [ 548.209449][ T9329] device syzkaller1 entered promiscuous mode [ 548.274556][ T4376] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 548.930836][ T4376] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.952992][ T4376] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 548.984650][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 548.995576][ T4376] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 549.003787][ T4376] usb 6-1: Product: syz [ 549.019787][ T4376] usb 6-1: SerialNumber: syz [ 549.032760][ T4376] usb 6-1: config 0 descriptor?? [ 549.051531][ T4376] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 549.074007][ T4376] usb 6-1: Detected SIO [ 549.085861][ T4376] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 549.896988][ T4349] usb 6-1: USB disconnect, device number 5 [ 549.918168][ T4349] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 549.931890][ T4349] ftdi_sio 6-1:0.0: device disconnected [ 549.945719][ T4376] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 550.030086][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1236'. [ 550.175676][ T4376] usb 7-1: Using ep0 maxpacket: 8 [ 550.185241][ T4376] usb 7-1: unable to get BOS descriptor or descriptor too short [ 550.204707][ T4376] usb 7-1: config 5 has an invalid interface number: 18 but max is 0 [ 550.243469][ T4376] usb 7-1: config 5 has no interface number 0 [ 550.280917][ T4376] usb 7-1: config 5 interface 18 has no altsetting 0 [ 550.302583][ T4376] usb 7-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 550.320358][ T4376] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.986755][ T4376] usb 7-1: Product: syz [ 550.991000][ T4376] usb 7-1: Manufacturer: syz [ 551.055207][ T4376] usb 7-1: SerialNumber: syz [ 551.282785][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.313673][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.015790][ T9389] device syzkaller1 entered promiscuous mode [ 553.472781][ T4376] usb 7-1: Could not find all expected endpoints [ 553.482284][ T4376] usb 7-1: USB disconnect, device number 6 [ 555.087269][ T4349] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 555.286909][ T4349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.309145][ T4349] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 555.351632][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 555.389200][ T4349] usb 5-1: Product: syz [ 555.397169][ T4349] usb 5-1: SerialNumber: syz [ 555.411889][ T4349] usb 5-1: config 0 descriptor?? [ 555.425118][ T4349] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 555.454014][ T4349] usb 5-1: Detected SIO [ 555.467832][ T4349] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 555.628146][ T4349] usb 5-1: USB disconnect, device number 6 [ 556.010478][ T4349] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 556.274317][ T4349] ftdi_sio 5-1:0.0: device disconnected [ 556.355966][ T9442] xt_CT: No such helper "pptp" [ 556.558897][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1263'. [ 557.832548][ T9458] device syzkaller1 entered promiscuous mode [ 559.577320][ T9481] xt_CT: No such helper "pptp" [ 560.053998][ T9497] binder: Binderfs stats mode cannot be changed during a remount [ 560.205604][ T4316] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 560.214128][ T9503] device syzkaller1 entered promiscuous mode [ 560.397329][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.478836][ T4316] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 560.491918][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 560.502049][ T4316] usb 5-1: Product: syz [ 560.506513][ T4316] usb 5-1: SerialNumber: syz [ 560.513375][ T4316] usb 5-1: config 0 descriptor?? [ 560.522273][ T4316] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 560.530754][ T4316] usb 5-1: Detected SIO [ 560.543613][ T4316] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 560.732858][ T4316] usb 5-1: USB disconnect, device number 7 [ 560.753257][ T4316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 560.776878][ T4316] ftdi_sio 5-1:0.0: device disconnected [ 561.460509][ T9515] xt_CT: No such helper "pptp" [ 562.935623][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 562.949196][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.965708][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.215766][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 563.360839][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 563.382638][ T9545] binder: Binderfs stats mode cannot be changed during a remount [ 563.403056][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 563.420748][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 563.444122][ T14] usb 1-1: Product: syz [ 563.451152][ T14] usb 1-1: Manufacturer: syz [ 563.456238][ T14] usb 1-1: SerialNumber: syz [ 563.469432][ T14] usb 1-1: config 0 descriptor?? [ 563.476610][ T9519] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 565.134640][ T9564] xt_CT: No such helper "pptp" [ 565.328064][ T9569] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1297'. [ 565.738492][ T4311] usb 1-1: USB disconnect, device number 8 [ 566.433900][ T9585] device syzkaller1 entered promiscuous mode [ 568.188641][ T9597] binder: Binderfs stats mode cannot be changed during a remount [ 569.295638][ T1538] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 569.545680][ T1538] usb 5-1: Using ep0 maxpacket: 32 [ 570.532605][ T1538] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 570.658890][ T1538] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 570.697678][ T1538] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 570.729049][ T1538] usb 5-1: Product: syz [ 570.733726][ T1538] usb 5-1: Manufacturer: syz [ 570.751122][ T1538] usb 5-1: SerialNumber: syz [ 570.784371][ T1538] usb 5-1: config 0 descriptor?? [ 570.804209][ T9599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 571.656692][ T9629] trusted_key: encrypted_key: keylen parameter is missing [ 572.511189][ T4349] usb 5-1: USB disconnect, device number 8 [ 573.018583][ T9642] device syzkaller1 entered promiscuous mode [ 575.720558][ T9663] xt_CT: No such helper "pptp" [ 576.128223][ T9677] device syzkaller1 entered promiscuous mode [ 577.095587][ T4311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 577.355684][ T4311] usb 1-1: Using ep0 maxpacket: 8 [ 577.378870][ T4311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 577.936669][ T1538] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 577.986854][ T4311] usb 1-1: config 5 has an invalid interface number: 18 but max is 0 [ 577.995158][ T4311] usb 1-1: config 5 has no interface number 0 [ 578.039876][ T4311] usb 1-1: config 5 interface 18 has no altsetting 0 [ 578.103082][ T4311] usb 1-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 578.143797][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.165611][ T1538] usb 5-1: Using ep0 maxpacket: 32 [ 578.181839][ T1538] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 578.194331][ T4311] usb 1-1: Product: syz [ 578.212094][ T1538] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 578.224210][ T4311] usb 1-1: Manufacturer: syz [ 578.230138][ T1538] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 578.238546][ T1538] usb 5-1: Product: syz [ 578.243156][ T1538] usb 5-1: Manufacturer: syz [ 578.248090][ T1538] usb 5-1: SerialNumber: syz [ 578.254534][ T4311] usb 1-1: SerialNumber: syz [ 578.257310][ T1538] usb 5-1: config 0 descriptor?? [ 578.265100][ T9696] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 578.531870][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.543176][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.174221][ T9720] kvm [9719]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 580.225424][ T4316] usb 5-1: USB disconnect, device number 9 [ 581.114916][ T4311] usb 1-1: Could not find all expected endpoints [ 581.127960][ T9735] xt_CT: No such helper "pptp" [ 581.590610][ T4311] usb 1-1: USB disconnect, device number 9 [ 585.152868][ T9783] loop6: detected capacity change from 0 to 512 [ 585.174681][ T9782] vivid-004: disconnect [ 585.181610][ T9781] vivid-004: reconnect [ 585.293203][ T9783] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 585.321627][ T9783] EXT4-fs (loop6): mount failed [ 586.805995][ T9801] fuse: Bad value for 'fd' [ 587.040321][ T9808] Unsupported ieee802154 address type: 0 [ 590.656608][ T9835] vivid-000: disconnect [ 591.063570][ T9833] vivid-000: reconnect [ 591.781436][ T9844] fuse: Bad value for 'rootmode' [ 591.967979][ T9848] Unsupported ieee802154 address type: 0 [ 596.483393][ T9858] syz.5.1368 (9858): drop_caches: 2 [ 597.134112][ T9891] Unsupported ieee802154 address type: 0 [ 598.395664][ T1538] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 598.628791][ T1538] usb 1-1: unable to get BOS descriptor or descriptor too short [ 598.650583][ T1538] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.696299][ T1538] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.736829][ T1538] usb 1-1: config 1 interface 0 has no altsetting 0 [ 598.776819][ T1538] usb 1-1: string descriptor 0 read error: -22 [ 598.783112][ T1538] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.844982][ T1538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.909349][ T1538] cdc_ether 1-1:1.0: skipping garbage [ 598.914756][ T1538] cdc_ether 1-1:1.0: skipping garbage [ 598.949670][ T1538] usb 1-1: bad CDC descriptors [ 599.758912][ T1538] usb 1-1: USB disconnect, device number 10 [ 601.775840][ T9930] Unsupported ieee802154 address type: 0 [ 603.664906][ T9941] vivid-001: disconnect [ 603.669586][ T9940] vivid-001: reconnect [ 605.797053][ T9972] loop6: detected capacity change from 0 to 512 [ 606.082302][ T9972] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 606.173029][ T9972] EXT4-fs (loop6): mount failed [ 608.427878][ T124] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 608.655698][ T124] usb 6-1: Using ep0 maxpacket: 8 [ 608.669174][ T124] usb 6-1: unable to get BOS descriptor or descriptor too short [ 608.847172][ T124] usb 6-1: config 5 has an invalid interface number: 18 but max is 0 [ 609.010993][ T124] usb 6-1: config 5 has no interface number 0 [ 609.674867][ T124] usb 6-1: config 5 interface 18 has no altsetting 0 [ 609.744983][ T124] usb 6-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 609.801277][ T124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.823698][ T124] usb 6-1: Product: syz [ 609.835754][ T124] usb 6-1: Manufacturer: syz [ 609.845827][ T124] usb 6-1: SerialNumber: syz [ 610.774930][ T124] usb 6-1: Could not find all expected endpoints [ 610.790929][ T124] usb 6-1: USB disconnect, device number 6 [ 611.004019][T10013] device syzkaller1 entered promiscuous mode [ 616.837656][T10067] device syzkaller1 entered promiscuous mode [ 617.246977][T10074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1440'. [ 619.581535][ T33] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 619.626252][T10096] trusted_key: encrypted_key: insufficient parameters specified [ 620.435655][ T33] usb 5-1: Using ep0 maxpacket: 8 [ 620.444698][ T33] usb 5-1: unable to get BOS descriptor or descriptor too short [ 620.479817][ T33] usb 5-1: config 4 interface 0 has no altsetting 0 [ 620.631008][T10098] process 'syz.6.1444' launched './file2' with NULL argv: empty string added [ 620.678173][ T33] usb 5-1: string descriptor 0 read error: -22 [ 621.422715][ T33] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 621.449087][ T33] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 621.505860][ T33] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 621.579842][ T33] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 621.860281][ T124] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 622.439832][ T33] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 622.515146][ T33] usb 5-1: media controller created [ 622.575625][ T124] usb 1-1: Using ep0 maxpacket: 32 [ 622.631737][ T124] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 622.631809][ T33] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.749012][ T33] zl10353_read_register: readreg error (reg=127, ret==0) [ 622.807822][ T124] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 622.827078][ T124] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 622.888499][ T33] usb 5-1: USB disconnect, device number 10 [ 622.911156][T10127] device syzkaller1 entered promiscuous mode [ 624.387717][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.394183][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.483589][ T124] usb 1-1: Product: syz [ 624.542157][ T124] usb 1-1: Manufacturer: syz [ 624.547026][ T124] usb 1-1: SerialNumber: syz [ 624.591276][ T124] usb 1-1: config 0 descriptor?? [ 624.598184][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 624.606891][ T124] usb 1-1: can't set config #0, error -32 [ 624.622556][ T4314] usb 1-1: USB disconnect, device number 11 [ 624.917109][T10136] trusted_key: encrypted_key: insufficient parameters specified [ 625.268888][ T33] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 625.939823][ T33] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.123502][ T33] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 626.144823][ T33] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 626.187143][ T33] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 626.196689][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 626.204924][ T33] usb 5-1: Product: syz [ 626.209410][ T33] usb 5-1: Manufacturer: syz [ 626.214097][ T33] usb 5-1: SerialNumber: syz [ 626.227196][ T33] usb 5-1: config 0 descriptor?? [ 626.246396][ T33] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 626.254248][ T33] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 626.261415][ T33] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 628.815538][T10161] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1464'. [ 629.064450][ T33] usb 5-1: USB disconnect, device number 11 [ 630.994074][T10190] trusted_key: encrypted_key: keylen parameter is missing [ 632.759545][T10220] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1481'. [ 636.460530][T10245] trusted_key: encrypted_key: insufficient parameters specified [ 636.725988][T10251] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 637.718916][T10257] ubi16: attaching mtd0 [ 637.775413][T10257] ubi16: scanning is finished [ 637.803043][T10257] ubi16: empty MTD device detected [ 638.551256][T10268] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1496'. [ 638.956010][T10257] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 639.683689][T10257] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 639.722415][T10257] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 639.759822][T10257] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 639.767801][T10257] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 639.775198][T10257] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 639.810152][T10257] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2102914210 [ 639.847926][T10257] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 640.009868][T10280] trusted_key: encrypted_key: keylen parameter is missing [ 640.738287][T10266] ubi16: background thread "ubi_bgt16d" started, PID 10266 [ 640.859372][T10283] trusted_key: encrypted_key: insufficient parameters specified [ 642.001585][T10288] sctp: failed to load transform for md5: -4 [ 642.003822][T10293] sctp: failed to load transform for md5: -2 [ 643.980966][T10326] binder: Binderfs stats mode cannot be changed during a remount [ 644.184583][T10329] trusted_key: encrypted_key: insufficient parameters specified [ 644.613434][T10335] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 644.623903][T10335] SQUASHFS error: Failed to read block 0x0: -5 [ 645.514274][T10342] device syzkaller1 entered promiscuous mode [ 645.685693][ T4311] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 645.895795][ T4311] usb 1-1: Using ep0 maxpacket: 8 [ 645.904061][ T4311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 645.942524][ T4311] usb 1-1: config 5 has an invalid interface number: 18 but max is 0 [ 645.985594][ T4311] usb 1-1: config 5 has no interface number 0 [ 646.003697][ T4311] usb 1-1: config 5 interface 18 has no altsetting 0 [ 646.038502][ T4311] usb 1-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 646.084530][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.120352][ T4311] usb 1-1: Product: syz [ 646.124759][ T4311] usb 1-1: Manufacturer: syz [ 646.132009][ T4311] usb 1-1: SerialNumber: syz [ 646.363973][T10338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.432961][T10338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.575697][ T4311] usb 1-1: Could not find all expected endpoints [ 646.598753][ T4311] usb 1-1: USB disconnect, device number 12 [ 648.392987][T10373] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1525'. [ 649.723625][T10386] device syzkaller1 entered promiscuous mode [ 650.175852][ T4311] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 650.445695][ T4311] usb 6-1: Using ep0 maxpacket: 8 [ 650.454457][ T4311] usb 6-1: unable to get BOS descriptor or descriptor too short [ 650.920849][ T4311] usb 6-1: config 5 has an invalid interface number: 18 but max is 0 [ 651.019793][ T4311] usb 6-1: config 5 has no interface number 0 [ 651.089884][ T4311] usb 6-1: config 5 interface 18 has no altsetting 0 [ 651.225613][ T4311] usb 6-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 651.252974][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.268610][ T4311] usb 6-1: Product: syz [ 651.275587][ T4311] usb 6-1: Manufacturer: syz [ 651.281413][ T4311] usb 6-1: SerialNumber: syz [ 651.298581][T10407] fuse: Unknown parameter '0x0000000000000003' [ 652.296599][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.332477][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.421716][ T4311] usb 6-1: Could not find all expected endpoints [ 652.432065][ T4311] usb 6-1: USB disconnect, device number 7 [ 652.536945][T10419] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 652.546475][T10419] SQUASHFS error: Failed to read block 0x0: -5 [ 653.740100][T10437] Unsupported ieee802154 address type: 0 [ 654.421331][T10444] device syzkaller1 entered promiscuous mode [ 654.942116][ T26] audit: type=1326 audit(2000000269.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.6.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52a39c819 code=0x7ffc0000 [ 655.025363][ T26] audit: type=1326 audit(2000000269.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.6.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52a39c819 code=0x7ffc0000 [ 655.141430][ T26] audit: type=1326 audit(2000000269.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.6.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fe52a39c819 code=0x7ffc0000 [ 655.145639][ T4314] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 655.235848][ T26] audit: type=1326 audit(2000000269.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.6.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52a39c819 code=0x7ffc0000 [ 655.265786][ T26] audit: type=1326 audit(2000000269.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.6.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52a39c819 code=0x7ffc0000 [ 655.417390][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 655.426894][ T4314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 655.453708][ T4314] usb 3-1: config 5 has an invalid interface number: 18 but max is 0 [ 655.477537][ T4314] usb 3-1: config 5 has no interface number 0 [ 655.604177][ T4314] usb 3-1: config 5 interface 18 has no altsetting 0 [ 655.627562][ T4314] usb 3-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 655.649732][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.682538][ T4314] usb 3-1: Product: syz [ 655.705365][ T4314] usb 3-1: Manufacturer: syz [ 655.725057][ T4314] usb 3-1: SerialNumber: syz [ 656.139511][T10460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.218957][T10460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.261932][ T4314] usb 3-1: Could not find all expected endpoints [ 656.286332][ T4314] usb 3-1: USB disconnect, device number 5 [ 656.708537][T10481] Unsupported ieee802154 address type: 0 [ 656.915519][T10483] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 660.340614][T10517] Unsupported ieee802154 address type: 0 [ 661.397222][T10520] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 661.599151][T10509] device syzkaller1 entered promiscuous mode [ 661.825593][ T124] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 662.178712][ T124] usb 7-1: Using ep0 maxpacket: 8 [ 662.191806][ T124] usb 7-1: unable to get BOS descriptor or descriptor too short [ 662.506797][ T124] usb 7-1: config 5 has an invalid interface number: 18 but max is 0 [ 662.585672][ T124] usb 7-1: config 5 has no interface number 0 [ 662.591851][ T124] usb 7-1: config 5 interface 18 has no altsetting 0 [ 662.636130][ T124] usb 7-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 662.665864][ T124] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.673912][ T124] usb 7-1: Product: syz [ 662.696275][ T124] usb 7-1: Manufacturer: syz [ 662.705771][ T124] usb 7-1: SerialNumber: syz [ 664.705991][T10544] xt_CT: No such helper "pptp" [ 664.912250][T10549] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 664.918836][T10549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 664.936969][ T124] usb 7-1: Could not find all expected endpoints [ 664.962610][ T124] usb 7-1: USB disconnect, device number 7 [ 665.021042][T10549] vhci_hcd vhci_hcd.0: Device attached [ 665.100858][T10554] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 665.107416][T10554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.145804][T10554] vhci_hcd vhci_hcd.0: Device attached [ 665.319316][ T4314] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 665.728483][T10556] vhci_hcd: connection closed [ 665.728726][ T5842] vhci_hcd: stop threads [ 665.732297][T10550] vhci_hcd: connection reset by peer [ 665.752546][ T5842] vhci_hcd: release socket [ 665.771410][ T5842] vhci_hcd: disconnect device [ 665.792499][ T5842] vhci_hcd: stop threads [ 665.817078][ T5842] vhci_hcd: release socket [ 665.850948][ T5842] vhci_hcd: disconnect device [ 666.076464][T10567] Unsupported ieee802154 address type: 0 [ 667.332849][T10575] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 667.836166][T10582] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 667.845625][T10582] SQUASHFS error: Failed to read block 0x0: -5 [ 669.595699][T10589] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 670.326376][T10597] binder: Binderfs stats mode cannot be changed during a remount [ 670.476934][ T4314] vhci_hcd: vhci_device speed not set [ 670.808860][T10602] Unsupported ieee802154 address type: 0 [ 673.757497][ T4314] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 673.951824][T10631] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 673.958402][T10631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 673.976124][ T4314] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 673.991357][ T4314] usb 5-1: config index 0 descriptor too short (expected 65505, got 72) [ 674.007088][ T4314] usb 5-1: config index 1 descriptor too short (expected 65505, got 72) [ 674.022056][ T4314] usb 5-1: config index 2 descriptor too short (expected 65505, got 72) [ 674.022368][T10631] vhci_hcd vhci_hcd.0: Device attached [ 674.039096][ T4314] usb 5-1: config index 3 descriptor too short (expected 65505, got 72) [ 674.144136][ T4314] usb 5-1: config index 4 descriptor too short (expected 65505, got 72) [ 674.609183][ T4314] usb 5-1: config index 5 descriptor too short (expected 65505, got 72) [ 674.619891][ T4314] usb 5-1: config index 6 descriptor too short (expected 65505, got 72) [ 674.633236][T10636] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 674.639769][T10636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 674.667530][ T4314] usb 5-1: config index 7 descriptor too short (expected 65505, got 72) [ 674.685564][ T4316] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 674.699373][T10636] vhci_hcd vhci_hcd.0: Device attached [ 674.727826][ T4314] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 674.747552][T10639] vhci_hcd: connection closed [ 674.747751][T10632] vhci_hcd: connection reset by peer [ 674.751166][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.771784][ T5842] vhci_hcd: stop threads [ 674.776154][ T5842] vhci_hcd: release socket [ 674.781013][ T5842] vhci_hcd: disconnect device [ 674.787494][ T4314] usb 5-1: Product: syz [ 674.791753][ T5842] vhci_hcd: stop threads [ 674.796239][ T5842] vhci_hcd: release socket [ 674.800719][ T5842] vhci_hcd: disconnect device [ 674.805580][ T4314] usb 5-1: Manufacturer: syz [ 674.810455][ T4314] usb 5-1: SerialNumber: syz [ 674.847640][ T4314] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 675.035622][ T1538] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 675.124219][ T4314] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 675.318375][ T1538] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 675.335718][ T1538] usb 1-1: config 0 has no interface number 0 [ 675.342002][ T1538] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 676.071011][ T1538] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 676.095613][ T1538] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 676.103962][ T1538] usb 1-1: Manufacturer: syz [ 676.109572][ T1538] usb 1-1: SerialNumber: syz [ 676.126003][ T1538] usb 1-1: config 0 descriptor?? [ 676.225574][ T4314] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 676.234823][ T4314] ath9k_htc: Failed to initialize the device [ 676.258071][ T4311] usb 5-1: USB disconnect, device number 12 [ 676.474602][ T4311] usb 5-1: ath9k_htc: USB layer deinitialized [ 677.223601][ T1538] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 677.236842][ T1538] usb 1-1: USB disconnect, device number 13 [ 677.705459][ C1] hrtimer: interrupt took 533377 ns [ 679.198831][ T4347] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 679.805603][ T4347] usb 6-1: Using ep0 maxpacket: 32 [ 679.821255][ T4347] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 679.856056][ T4316] vhci_hcd: vhci_device speed not set [ 679.908324][ T4347] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 679.932188][ T4347] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 679.949250][T10697] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.958575][T10697] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.967393][T10697] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.976125][T10697] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.994404][ T4347] usb 6-1: Product: syz [ 680.000199][T10697] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.009260][T10697] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.015622][ T4347] usb 6-1: Manufacturer: syz [ 680.018510][T10697] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.031664][T10697] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.033052][ T4347] usb 6-1: SerialNumber: syz [ 680.063095][ T4347] usb 6-1: config 0 descriptor?? [ 680.079067][T10685] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 681.906522][ T4316] usb 6-1: USB disconnect, device number 8 [ 682.204899][T10720] trusted_key: encrypted_key: insufficient parameters specified [ 684.325705][ T1538] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 684.520327][ T1538] usb 1-1: config 0 has no interfaces? [ 684.529837][ T1538] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 684.585652][ T1538] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 684.601652][ T1538] usb 1-1: Manufacturer: syz [ 684.695123][ T1538] usb 1-1: config 0 descriptor?? [ 684.972895][ T4314] usb 1-1: USB disconnect, device number 14 [ 685.060909][T10756] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 685.067488][T10756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 685.137930][T10756] vhci_hcd vhci_hcd.0: Device attached [ 685.155726][T10763] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 685.162302][T10763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 685.180278][T10763] vhci_hcd vhci_hcd.0: Device attached [ 685.488684][ T124] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 685.839367][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.845966][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.532070][T10764] vhci_hcd: connection closed [ 686.533688][T10757] vhci_hcd: connection reset by peer [ 686.559930][ T5838] vhci_hcd: stop threads [ 686.564231][ T5838] vhci_hcd: release socket [ 686.585698][ T5838] vhci_hcd: disconnect device [ 686.624917][ T5838] vhci_hcd: stop threads [ 686.755526][ T5838] vhci_hcd: release socket [ 686.829792][T10773] trusted_key: encrypted_key: insufficient parameters specified [ 687.547890][ T5838] vhci_hcd: disconnect device [ 688.471480][T10782] trusted_key: encrypted_key: keylen parameter is missing [ 689.873911][T10804] binder: Binderfs stats mode cannot be changed during a remount [ 691.185771][ T124] vhci_hcd: vhci_device speed not set [ 694.616073][T10843] trusted_key: encrypted_key: keylen parameter is missing [ 694.998142][T10848] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 695.055601][T10848] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1663'. [ 695.118737][T10848] bridge0: port 2(bridge_slave_1) entered listening state [ 696.206088][T10865] binder: Binderfs stats mode cannot be changed during a remount [ 697.056335][T10882] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 697.062917][T10882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 697.075666][T10882] vhci_hcd vhci_hcd.0: Device attached [ 697.106513][T10885] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 697.113100][T10885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 697.195178][T10885] vhci_hcd vhci_hcd.0: Device attached [ 697.825592][ T4311] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 697.862093][T10889] vhci_hcd: connection closed [ 697.875675][T10884] vhci_hcd: connection reset by peer [ 697.895744][T10898] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1673'. [ 697.915577][ T4399] vhci_hcd: stop threads [ 697.940521][ T4399] vhci_hcd: release socket [ 697.966676][ T4399] vhci_hcd: disconnect device [ 698.002876][ T4399] vhci_hcd: stop threads [ 698.032677][ T4399] vhci_hcd: release socket [ 698.054150][ T4399] vhci_hcd: disconnect device [ 698.322080][T10901] trusted_key: encrypted_key: keylen parameter is missing [ 701.503100][T10940] trusted_key: encrypted_key: insufficient parameters specified [ 702.173794][T10942] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 702.180371][T10942] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 702.201036][T10942] vhci_hcd vhci_hcd.0: Device attached [ 702.235893][T10942] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 702.242489][T10942] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 702.271526][T10942] vhci_hcd vhci_hcd.0: Device attached [ 702.476119][ T1538] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 703.319646][ T4311] vhci_hcd: vhci_device speed not set [ 703.689408][T10946] vhci_hcd: connection closed [ 703.696227][ T5859] vhci_hcd: stop threads [ 703.696979][T10943] vhci_hcd: connection reset by peer [ 703.702991][ T5859] vhci_hcd: release socket [ 704.020800][ T5859] vhci_hcd: disconnect device [ 704.285725][ T33] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 704.365555][ T5859] vhci_hcd: stop threads [ 704.369868][ T5859] vhci_hcd: release socket [ 704.409325][ T5859] vhci_hcd: disconnect device [ 704.675744][ T33] usb 3-1: Using ep0 maxpacket: 8 [ 704.683813][ T33] usb 3-1: unable to get BOS descriptor or descriptor too short [ 704.701344][ T33] usb 3-1: config 5 has an invalid interface number: 18 but max is 0 [ 704.714009][ T33] usb 3-1: config 5 has no interface number 0 [ 704.725795][ T33] usb 3-1: config 5 interface 18 has no altsetting 0 [ 704.738487][ T33] usb 3-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 704.788124][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.796755][ T33] usb 3-1: Product: syz [ 704.801033][ T33] usb 3-1: Manufacturer: syz [ 704.806478][ T33] usb 3-1: SerialNumber: syz [ 705.069945][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.104620][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.181643][ T33] usb 3-1: Could not find all expected endpoints [ 705.219257][ T33] usb 3-1: USB disconnect, device number 6 [ 707.585355][T11015] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 707.585755][ T1538] vhci_hcd: vhci_device speed not set [ 707.591911][T11015] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 707.610311][T11015] vhci_hcd vhci_hcd.0: Device attached [ 708.139124][T11019] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 708.145710][T11019] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 709.195679][T11019] vhci_hcd vhci_hcd.0: Device attached [ 709.625698][ T4311] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 709.707623][T11020] vhci_hcd: connection closed [ 709.715540][ T5838] vhci_hcd: stop threads [ 709.724462][ T5838] vhci_hcd: release socket [ 709.729158][T11016] vhci_hcd: connection reset by peer [ 709.775549][ T5838] vhci_hcd: disconnect device [ 709.782460][ T5838] vhci_hcd: stop threads [ 709.805855][ T5838] vhci_hcd: release socket [ 709.822137][ T5838] vhci_hcd: disconnect device [ 710.841627][T11036] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 710.848196][T11036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 710.870017][T11036] vhci_hcd vhci_hcd.0: Device attached [ 711.485725][ T4347] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 712.407727][T11037] vhci_hcd: connection reset by peer [ 712.413334][ T5838] vhci_hcd: stop threads [ 712.448983][ T5838] vhci_hcd: release socket [ 712.469247][ T5838] vhci_hcd: disconnect device [ 712.967566][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1717'. [ 713.220372][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1717'. [ 713.609889][T11064] trusted_key: encrypted_key: keylen parameter is missing [ 714.805585][ T4311] vhci_hcd: vhci_device speed not set [ 716.545752][ C0] ------------[ cut here ]------------ [ 716.551648][ C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 716.562559][ C0] WARNING: CPU: 0 PID: 11086 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 716.572669][ C0] Modules linked in: [ 716.576615][ C0] CPU: 0 PID: 11086 Comm: syz.0.1726 Not tainted syzkaller #0 [ 716.584063][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 716.594140][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 716.600493][ C0] Code: ef e8 38 ae bd fd 4c 8b 45 00 48 c7 c7 00 1b df 8a 48 c7 c6 c0 17 df 8a 48 c7 c2 60 1c df 8a 8b 0c 24 4d 89 e9 e8 b4 11 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 b5 53 0a [ 716.620135][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010246 [ 716.626217][ C0] RAX: 1932fed11f77b600 RBX: ffffffff96eba118 RCX: ffff888079d5bb80 [ 716.634228][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 716.642229][ C0] RBP: ffffffff8a8dee20 R08: ffffc90000007687 R09: 1ffff92000000ed0 [ 716.650219][ C0] R10: dffffc0000000000 R11: fffff52000000ed1 R12: ffff88807d7e6600 [ 716.658256][ C0] R13: ffffffff892b8f80 R14: ffff88807d7e6000 R15: ffff88807d7e6490 [ 716.666246][ C0] FS: 00007f7fbe12b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 716.675179][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.681802][ C0] CR2: 000000110c2bb0c3 CR3: 000000005655e000 CR4: 00000000003526f0 [ 716.689826][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.697835][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 716.705866][ C0] Call Trace: [ 716.709175][ C0] [ 716.712012][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 716.717403][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 716.722505][ C0] __kmem_cache_free+0xb6/0x1f0 [ 716.727367][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 716.732294][ C0] ? call_timer_fn+0x194/0x670 [ 716.737077][ C0] call_timer_fn+0x1ac/0x670 [ 716.741676][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 716.746728][ C0] ? call_timer_fn+0xcf/0x670 [ 716.751399][ C0] ? __run_timers+0x800/0x800 [ 716.756093][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 716.761286][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 716.766496][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 716.771506][ C0] __run_timers+0x53e/0x800 [ 716.776017][ C0] ? detach_timer+0x350/0x350 [ 716.780685][ C0] ? lock_chain_count+0x20/0x20 [ 716.785547][ C0] run_timer_softirq+0x63/0xf0 [ 716.790300][ C0] handle_softirqs+0x2a1/0x930 [ 716.795052][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 716.799918][ C0] ? do_softirq+0x210/0x210 [ 716.804412][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 716.809620][ C0] __irq_exit_rcu+0x13b/0x230 [ 716.814283][ C0] ? irq_exit_rcu+0x20/0x20 [ 716.818792][ C0] irq_exit_rcu+0x5/0x20 [ 716.823020][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 716.828670][ C0] [ 716.831588][ C0] [ 716.834507][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 716.840497][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 716.846312][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0e b0 2c f7 48 89 df e8 56 78 2d f7 e8 21 cf 50 f7 fb bf 01 00 00 00 a6 dc 20 f7 65 8b 05 f7 5f ca 75 85 c0 74 02 5b c3 e8 44 74 c8 [ 716.865934][ C0] RSP: 0018:ffffc90004ac7590 EFLAGS: 00000286 [ 716.871990][ C0] RAX: 1932fed11f77b600 RBX: ffff888053ff89c0 RCX: 1932fed11f77b600 [ 716.879971][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c10a0 RDI: 0000000000000001 [ 716.887963][ C0] RBP: ffffc90004ac7710 R08: ffffffff90af9277 R09: 1ffffffff215f24e [ 716.895941][ C0] R10: dffffc0000000000 R11: fffffbfff215f24f R12: ffffea000131ac08 [ 716.903904][ C0] R13: 00000003fffffffc R14: 0000000000000cc0 R15: dffffc0000000000 [ 716.911897][ C0] shmem_add_to_page_cache+0xa91/0x1c50 [ 716.917455][ C0] ? xas_load+0x127/0x140 [ 716.921782][ C0] ? put_page+0x270/0x270 [ 716.926151][ C0] shmem_get_folio_gfp+0x158e/0x3400 [ 716.931443][ C0] shmem_fault+0x1b6/0x780 [ 716.935871][ C0] ? shmem_fallocate+0xfa0/0xfa0 [ 716.940819][ C0] ? filemap_map_pages+0x1af/0x11c0 [ 716.946030][ C0] ? filemap_read_folio+0x770/0x770 [ 716.951219][ C0] ? count_memcg_event_mm+0x8a/0x3c0 [ 716.956534][ C0] __do_fault+0x13b/0x4e0 [ 716.960857][ C0] ? handle_mm_fault+0x29b1/0x3ee0 [ 716.965986][ C0] handle_mm_fault+0x2407/0x3ee0 [ 716.970920][ C0] ? numa_migrate_prep+0x250/0x250 [ 716.976061][ C0] __get_user_pages+0x40d/0xec0 [ 716.980908][ C0] ? populate_vma_page_range+0x2b0/0x2b0 [ 716.986556][ C0] populate_vma_page_range+0x214/0x2b0 [ 716.992006][ C0] __mm_populate+0x25c/0x380 [ 716.996605][ C0] ? check_vma_flags+0x4d0/0x4d0 [ 717.001537][ C0] ? up_write+0x1bb/0x420 [ 717.005992][ C0] vm_mmap_pgoff+0x212/0x2d0 [ 717.010597][ C0] ? account_locked_vm+0xe0/0xe0 [ 717.015564][ C0] ? ksys_mmap_pgoff+0xe6/0x6f0 [ 717.020499][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 717.025758][ C0] do_syscall_64+0x4c/0xa0 [ 717.030173][ C0] ? clear_bhb_loop+0x60/0xb0 [ 717.034847][ C0] ? clear_bhb_loop+0x60/0xb0 [ 717.039549][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.045471][ C0] RIP: 0033:0x7f7fbd19c819 [ 717.049895][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.069514][ C0] RSP: 002b:00007f7fbe12b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 717.077955][ C0] RAX: ffffffffffffffda RBX: 00007f7fbd415fa0 RCX: 00007f7fbd19c819 [ 717.085980][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 717.093964][ C0] RBP: 00007f7fbd232c91 R08: ffffffffffffffff R09: 0000000000000000 [ 717.101952][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 717.109929][ C0] R13: 00007f7fbd416038 R14: 00007f7fbd415fa0 R15: 00007ffd16cd3fb8 [ 717.117920][ C0] [ 717.120938][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 717.128232][ C0] CPU: 0 PID: 11086 Comm: syz.0.1726 Not tainted syzkaller #0 [ 717.135675][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.145747][ C0] Call Trace: [ 717.149016][ C0] [ 717.151851][ C0] dump_stack_lvl+0x188/0x24e [ 717.156549][ C0] ? memcpy+0x3c/0x60 [ 717.160514][ C0] ? show_regs_print_info+0x12/0x12 [ 717.165704][ C0] ? load_image+0x400/0x400 [ 717.170201][ C0] panic+0x2e5/0x730 [ 717.174083][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 717.178578][ C0] __warn+0x2f8/0x4f0 [ 717.182541][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 717.188244][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 717.193955][ C0] report_bug+0x2ba/0x4f0 [ 717.198275][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 717.203983][ C0] handle_bug+0x3a/0x70 [ 717.208127][ C0] exc_invalid_op+0x16/0x40 [ 717.212618][ C0] asm_exc_invalid_op+0x16/0x20 [ 717.217453][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 717.223766][ C0] Code: ef e8 38 ae bd fd 4c 8b 45 00 48 c7 c7 00 1b df 8a 48 c7 c6 c0 17 df 8a 48 c7 c2 60 1c df 8a 8b 0c 24 4d 89 e9 e8 b4 11 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 b5 53 0a [ 717.243362][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010246 [ 717.249415][ C0] RAX: 1932fed11f77b600 RBX: ffffffff96eba118 RCX: ffff888079d5bb80 [ 717.257371][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 717.265327][ C0] RBP: ffffffff8a8dee20 R08: ffffc90000007687 R09: 1ffff92000000ed0 [ 717.273286][ C0] R10: dffffc0000000000 R11: fffff52000000ed1 R12: ffff88807d7e6600 [ 717.281245][ C0] R13: ffffffff892b8f80 R14: ffff88807d7e6000 R15: ffff88807d7e6490 [ 717.289205][ C0] ? rose_transmit_link+0x730/0x730 [ 717.294415][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 717.299778][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 717.304879][ C0] __kmem_cache_free+0xb6/0x1f0 [ 717.309722][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 717.314648][ C0] ? call_timer_fn+0x194/0x670 [ 717.319398][ C0] call_timer_fn+0x1ac/0x670 [ 717.323972][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 717.328993][ C0] ? call_timer_fn+0xcf/0x670 [ 717.333657][ C0] ? __run_timers+0x800/0x800 [ 717.338350][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 717.343554][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 717.348760][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 717.353827][ C0] __run_timers+0x53e/0x800 [ 717.358357][ C0] ? detach_timer+0x350/0x350 [ 717.363024][ C0] ? lock_chain_count+0x20/0x20 [ 717.367875][ C0] run_timer_softirq+0x63/0xf0 [ 717.372629][ C0] handle_softirqs+0x2a1/0x930 [ 717.377388][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 717.382227][ C0] ? do_softirq+0x210/0x210 [ 717.386727][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 717.391909][ C0] __irq_exit_rcu+0x13b/0x230 [ 717.396576][ C0] ? irq_exit_rcu+0x20/0x20 [ 717.401069][ C0] irq_exit_rcu+0x5/0x20 [ 717.405296][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 717.410919][ C0] [ 717.413843][ C0] [ 717.416760][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 717.422731][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 717.428540][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0e b0 2c f7 48 89 df e8 56 78 2d f7 e8 21 cf 50 f7 fb bf 01 00 00 00 a6 dc 20 f7 65 8b 05 f7 5f ca 75 85 c0 74 02 5b c3 e8 44 74 c8 [ 717.448149][ C0] RSP: 0018:ffffc90004ac7590 EFLAGS: 00000286 [ 717.454203][ C0] RAX: 1932fed11f77b600 RBX: ffff888053ff89c0 RCX: 1932fed11f77b600 [ 717.462171][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c10a0 RDI: 0000000000000001 [ 717.470133][ C0] RBP: ffffc90004ac7710 R08: ffffffff90af9277 R09: 1ffffffff215f24e [ 717.478103][ C0] R10: dffffc0000000000 R11: fffffbfff215f24f R12: ffffea000131ac08 [ 717.486060][ C0] R13: 00000003fffffffc R14: 0000000000000cc0 R15: dffffc0000000000 [ 717.494028][ C0] shmem_add_to_page_cache+0xa91/0x1c50 [ 717.499569][ C0] ? xas_load+0x127/0x140 [ 717.503895][ C0] ? put_page+0x270/0x270 [ 717.508219][ C0] shmem_get_folio_gfp+0x158e/0x3400 [ 717.513507][ C0] shmem_fault+0x1b6/0x780 [ 717.517915][ C0] ? shmem_fallocate+0xfa0/0xfa0 [ 717.522840][ C0] ? filemap_map_pages+0x1af/0x11c0 [ 717.528024][ C0] ? filemap_read_folio+0x770/0x770 [ 717.533206][ C0] ? count_memcg_event_mm+0x8a/0x3c0 [ 717.538485][ C0] __do_fault+0x13b/0x4e0 [ 717.542796][ C0] ? handle_mm_fault+0x29b1/0x3ee0 [ 717.547896][ C0] handle_mm_fault+0x2407/0x3ee0 [ 717.552830][ C0] ? numa_migrate_prep+0x250/0x250 [ 717.557935][ C0] __get_user_pages+0x40d/0xec0 [ 717.562778][ C0] ? populate_vma_page_range+0x2b0/0x2b0 [ 717.568401][ C0] populate_vma_page_range+0x214/0x2b0 [ 717.573861][ C0] __mm_populate+0x25c/0x380 [ 717.578455][ C0] ? check_vma_flags+0x4d0/0x4d0 [ 717.583375][ C0] ? up_write+0x1bb/0x420 [ 717.587690][ C0] vm_mmap_pgoff+0x212/0x2d0 [ 717.592274][ C0] ? account_locked_vm+0xe0/0xe0 [ 717.597207][ C0] ? ksys_mmap_pgoff+0xe6/0x6f0 [ 717.602075][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 717.607259][ C0] do_syscall_64+0x4c/0xa0 [ 717.611665][ C0] ? clear_bhb_loop+0x60/0xb0 [ 717.616329][ C0] ? clear_bhb_loop+0x60/0xb0 [ 717.620998][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.626878][ C0] RIP: 0033:0x7f7fbd19c819 [ 717.631279][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.650887][ C0] RSP: 002b:00007f7fbe12b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 717.659294][ C0] RAX: ffffffffffffffda RBX: 00007f7fbd415fa0 RCX: 00007f7fbd19c819 [ 717.667251][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 717.675206][ C0] RBP: 00007f7fbd232c91 R08: ffffffffffffffff R09: 0000000000000000 [ 717.683169][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 717.691131][ C0] R13: 00007f7fbd416038 R14: 00007f7fbd415fa0 R15: 00007ffd16cd3fb8 [ 717.699102][ C0] [ 717.702530][ C0] Kernel Offset: disabled [ 717.706940][ C0] Rebooting in 86400 seconds..