last executing test programs: 4.93498793s ago: executing program 3 (id=1573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 4.695834435s ago: executing program 3 (id=1574): io_uring_setup(0x7b7e, &(0x7f00000002c0)={0x0, 0xe10b, 0x800, 0x1, 0x1a3}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@mptcp=@mp_join={0x1e, 0x0, 0x9}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0xffffffffffffff2c, "d58838000391"}]}}}}}}, 0xfd6c) 4.434942801s ago: executing program 3 (id=1575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x1, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.256104605s ago: executing program 3 (id=1576): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 3.56073955s ago: executing program 2 (id=1583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3.259883577s ago: executing program 1 (id=1585): socket$netlink(0x10, 0x3, 0x14) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r7, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r7}}, 0x18) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1b0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x8}, [@tmpl={0xc4, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x2, 0xc, 0x204, 0x3, 0xe}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x6, 0x0}, 0x3501, 0x4, 0x3, 0x2, 0x1, 0x1, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3503, 0x0, 0x2, 0x78, 0xfffffff7, 0x8, 0x2}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.008034563s ago: executing program 0 (id=1588): socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80001) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f0000002200), 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0xb400, 0xfffffffffffffff1, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000007, 0xb06c}, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) 2.582921692s ago: executing program 2 (id=1589): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x6020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x4, 0x2, 0x8, 0xfeffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x5, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0x6, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x8005, 0x1000005, 0x8, 0xd, 0x101, 0x1, 0x4, 0xee, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x100009, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7fc, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x1, 0x24], [0x9, 0x40bb33, 0xffffffff, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x0, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0xc, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0x3, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.466133965s ago: executing program 2 (id=1590): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20000, 0x0) 2.342464357s ago: executing program 2 (id=1591): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000140)=0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x4d6883) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.142241692s ago: executing program 2 (id=1592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 2.037151964s ago: executing program 0 (id=1593): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1424}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}]}}}]}, 0x44}}, 0x0) 1.835503719s ago: executing program 2 (id=1594): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000440), 0x0, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.7880028s ago: executing program 0 (id=1595): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002700), 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x8}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.716671602s ago: executing program 0 (id=1596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x75}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8}}, 0x0) 1.631033953s ago: executing program 0 (id=1597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 951.965368ms ago: executing program 3 (id=1598): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x6020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x4, 0x2, 0x8, 0xfeffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x5, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0x6, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x8005, 0x1000005, 0x8, 0xd, 0x101, 0x1, 0x4, 0xee, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x100009, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7fc, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x1, 0x24], [0x9, 0x40bb33, 0xffffffff, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x0, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0xc, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0x3, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 917.149209ms ago: executing program 3 (id=1599): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x23, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe957, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x218, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xa, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0xc], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x400, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0xcfc9, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x4, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0xc7e9, 0x7fffffff]}, 0x45c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) fcntl$lock(r3, 0x26, &(0x7f0000000080)) unshare(0x22020400) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 702.866414ms ago: executing program 1 (id=1600): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000140)=0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x4d6883) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 644.845125ms ago: executing program 0 (id=1601): socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80001) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f0000002200), 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0xb400, 0xfffffffffffffff1, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000007, 0xb06c}, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) 526.522748ms ago: executing program 1 (id=1602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 333.224573ms ago: executing program 1 (id=1603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 126.792477ms ago: executing program 1 (id=1604): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002700), 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x8}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x2) 0s ago: executing program 1 (id=1605): prctl$PR_SET_SECUREBITS(0x1c, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x8) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): 0-0000-0000-000000000000. [ 220.036298][ T5831] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 220.489698][ T6712] vxcan2: entered allmulticast mode [ 221.510643][ T5831] usb 3-1: can't read configurations, error -71 [ 222.033134][ T6725] serio: Serial port ttyS3 [ 224.344471][ T5831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 224.564234][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 224.629792][ T28] audit: type=1326 audit(1784384938.635:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f388fd9de99 code=0x0 [ 225.224249][ T5814] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.426876][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 225.440723][ T5814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.463846][ T5814] usb 2-1: config 1 has an invalid interface number: 232 but max is 0 [ 225.486687][ T5814] usb 2-1: config 1 has no interface number 0 [ 225.507565][ T5814] usb 2-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 225.548361][ T5814] usb 2-1: config 1 interface 232 has no altsetting 0 [ 225.577984][ T5814] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 225.606505][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.636961][ T5814] usb 2-1: Product: syz [ 225.641217][ T5814] usb 2-1: Manufacturer: syz [ 225.669621][ T5814] usb 2-1: SerialNumber: syz [ 225.695067][ T6740] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 226.315168][ T5814] hub 2-1:1.232: bad descriptor, ignoring hub [ 226.321353][ T5814] hub: probe of 2-1:1.232 failed with error -5 [ 226.330119][ T5814] option 2-1:1.232: GSM modem (1-port) converter detected [ 226.342228][ T5814] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 226.387258][ T5814] usb 2-1: USB disconnect, device number 4 [ 226.454899][ T6749] serio: Serial port ttyS3 [ 226.684641][ T5814] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 226.832933][ T5814] option 2-1:1.232: device disconnected [ 228.036374][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 228.486045][ T6760] serio: Serial port ttyS3 [ 228.997961][ T6764] loop3: detected capacity change from 0 to 1024 [ 229.024627][ T5831] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 229.032443][ T5831] usb 3-1: can't read configurations, error -71 [ 229.037695][ T6764] EXT4-fs: Ignoring removed bh option [ 229.079783][ T6764] EXT4-fs: Ignoring removed bh option [ 229.147101][ T6764] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 229.220789][ T6764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.392227][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.448301][ T5831] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 232.154230][ T5831] usb 3-1: device descriptor read/64, error -71 [ 232.314538][ T5831] usb usb3-port1: attempt power cycle [ 233.454983][ T6803] serio: Serial port ttyS3 [ 234.816349][ T6805] random: crng reseeded on system resumption [ 236.024165][ T6810] serio: Serial port ttyS3 [ 236.631037][ T6813] loop2: detected capacity change from 0 to 1024 [ 236.670413][ T6813] EXT4-fs: Ignoring removed bh option [ 236.717994][ T6813] EXT4-fs: Ignoring removed bh option [ 236.779752][ T6813] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 236.873022][ T6813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.810527][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.107325][ T6836] random: crng reseeded on system resumption [ 241.685556][ T6848] serio: Serial port ttyS3 [ 241.954509][ T5811] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 243.034287][ T5814] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 243.566428][ T5811] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 245.016713][ T5811] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 245.034262][ T5811] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 245.043646][ T5811] usb 1-1: config 220 has no interface number 1 [ 245.054688][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 245.123439][ T5811] usb 1-1: config 220 interface 0 has no altsetting 0 [ 245.130462][ T5811] usb 1-1: config 220 interface 76 has no altsetting 0 [ 245.181447][ T5811] usb 1-1: string descriptor 0 read error: -71 [ 245.298932][ T5811] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 245.308345][ T5814] usb 2-1: device descriptor read/all, error -71 [ 245.315483][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.331660][ T5811] usb 1-1: can't set config #220, error -71 [ 245.359407][ T5811] usb 1-1: USB disconnect, device number 5 [ 245.534753][ T6858] loop0: detected capacity change from 0 to 1024 [ 245.595477][ T6858] EXT4-fs: Ignoring removed bh option [ 245.601389][ T6858] EXT4-fs: Ignoring removed bh option [ 245.669913][ T6858] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 245.793626][ T6858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.555954][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.589859][ T6876] random: crng reseeded on system resumption [ 250.768760][ T6920] random: crng reseeded on system resumption [ 253.537240][ T6950] loop2: detected capacity change from 0 to 1024 [ 253.728189][ T6950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.781003][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.945169][ T6967] random: crng reseeded on system resumption [ 254.961343][ T6968] serio: Serial port ttyS3 [ 256.014921][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.021303][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.364202][ T5814] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 260.557152][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 260.569932][ T5814] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 133, changing to 7 [ 260.612457][ T5814] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 260.639525][ T5814] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.663162][ T5814] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 260.673876][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.687262][ T5814] usb 3-1: Product: syz [ 260.691509][ T5814] usb 3-1: Manufacturer: ࠁ [ 260.708423][ T5814] usb 3-1: SerialNumber: syz [ 261.212305][ T5814] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 261.242932][ T5814] usb 3-1: USB disconnect, device number 8 [ 261.379751][ T6990] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.393289][ T6990] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.402953][ T6990] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.415480][ T6990] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.661171][ T7025] serio: Serial port ttyS3 [ 262.666248][ T5814] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 262.891373][ T5814] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 262.906177][ T5814] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 263.184891][ T5814] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 263.328419][ T5814] usb 2-1: config 220 has no interface number 1 [ 263.350013][ T5814] usb 2-1: config 220 interface 0 has no altsetting 0 [ 264.249810][ T5814] usb 2-1: config 220 interface 76 has no altsetting 0 [ 264.295534][ T5814] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 264.327804][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.370356][ T5814] usb 2-1: Product: syz [ 264.380187][ T5814] usb 2-1: Manufacturer: syz [ 264.399941][ T5814] usb 2-1: SerialNumber: syz [ 264.473111][ T7033] syzkaller0: entered promiscuous mode [ 264.479738][ T7033] syzkaller0: entered allmulticast mode [ 266.940512][ T5814] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 266.954146][ T5814] usb 2-1: No valid video chain found. [ 266.962354][ T7048] syzkaller0: entered promiscuous mode [ 266.977173][ T7048] syzkaller0: entered allmulticast mode [ 267.004338][ T5814] usb 2-1: USB disconnect, device number 7 [ 267.135444][ T7057] random: crng reseeded on system resumption [ 267.804375][ T7074] serio: Serial port ttyS3 [ 272.323860][ T7128] loop1: detected capacity change from 0 to 1024 [ 272.453427][ T7128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.048060][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.515699][ T7147] serio: Serial port ttyS3 [ 275.094276][ T7151] mmap: syz.0.326 (7151) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 276.868536][ T7152] input: syz1 as /devices/virtual/input/input5 [ 277.298953][ T7168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.329'. [ 277.322591][ T7168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.329'. [ 277.596838][ T7178] loop2: detected capacity change from 0 to 1024 [ 279.259899][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.532925][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.750353][ T7196] random: crng reseeded on system resumption [ 280.437809][ T7215] netlink: 556 bytes leftover after parsing attributes in process `syz.0.333'. [ 281.214885][ T5840] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 281.541023][ T5840] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.556208][ T5840] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 283.091748][ T5840] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.184577][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.643427][ T7259] loop3: detected capacity change from 0 to 1024 [ 284.666167][ T7259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.774319][ T5840] usb 3-1: can't set config #27, error -71 [ 286.580688][ T5840] usb 3-1: USB disconnect, device number 9 [ 286.650542][ T7269] netlink: 556 bytes leftover after parsing attributes in process `syz.2.348'. [ 286.824676][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.266327][ T7294] random: crng reseeded on system resumption [ 287.650039][ T7301] loop0: detected capacity change from 0 to 512 [ 287.762860][ T7301] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 287.771852][ T7301] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16 [ 288.368720][ T28] audit: type=1326 audit(1784385002.327:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.2.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f388fd9de99 code=0x0 [ 290.259202][ T7325] syz.0.359: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 290.335325][ T7325] CPU: 0 PID: 7325 Comm: syz.0.359 Not tainted syzkaller #0 [ 290.342674][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.352758][ T7325] Call Trace: [ 290.356076][ T7325] [ 290.359034][ T7325] dump_stack_lvl+0x18c/0x250 [ 290.363750][ T7325] ? show_regs_print_info+0x20/0x20 [ 290.368973][ T7325] ? load_image+0x420/0x420 [ 290.373497][ T7325] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.379937][ T7325] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 290.386469][ T7325] warn_alloc+0x246/0x340 [ 290.390827][ T7325] ? stack_trace_save+0xaa/0x100 [ 290.395912][ T7325] ? zone_watermark_ok_safe+0x230/0x230 [ 290.401526][ T7325] ? kasan_set_track+0x5f/0x70 [ 290.406349][ T7325] ? kasan_set_track+0x4e/0x70 [ 290.406730][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 290.411178][ T7325] ? __kasan_kmalloc+0x8f/0xa0 [ 290.411231][ T7325] ? xsk_init_queue+0xad/0x100 [ 290.428853][ T7325] ? xsk_setsockopt+0x413/0x750 [ 290.433723][ T7325] ? do_sock_setsockopt+0x175/0x1a0 [ 290.438941][ T7325] ? __x64_sys_setsockopt+0x182/0x200 [ 290.444334][ T7325] __vmalloc_node_range+0x129/0x1320 [ 290.449656][ T7325] ? free_vm_area+0x50/0x50 [ 290.454184][ T7325] vmalloc_user+0x74/0x80 [ 290.458531][ T7325] ? xskq_create+0xbf/0x170 [ 290.463084][ T7325] xskq_create+0xbf/0x170 [ 290.467435][ T7325] xsk_init_queue+0xad/0x100 [ 290.472055][ T7325] xsk_setsockopt+0x413/0x750 [ 290.476773][ T7325] ? xsk_poll+0x670/0x670 [ 290.481121][ T7325] ? __fget_files+0x28/0x460 [ 290.485734][ T7325] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 290.491294][ T7325] ? security_socket_setsockopt+0x7e/0xa0 [ 290.497033][ T7325] ? xsk_poll+0x670/0x670 [ 290.501382][ T7325] do_sock_setsockopt+0x175/0x1a0 [ 290.506432][ T7325] ? __fdget+0x180/0x210 [ 290.510693][ T7325] __x64_sys_setsockopt+0x182/0x200 [ 290.515920][ T7325] do_syscall_64+0x55/0xb0 [ 290.520373][ T7325] ? clear_bhb_loop+0x40/0x90 [ 290.525070][ T7325] ? clear_bhb_loop+0x40/0x90 [ 290.529764][ T7325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.535697][ T7325] RIP: 0033:0x7f5a6a19de99 [ 290.540131][ T7325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.559851][ T7325] RSP: 002b:00007f5a6b065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.568285][ T7325] RAX: ffffffffffffffda RBX: 00007f5a6a426090 RCX: 00007f5a6a19de99 [ 290.576270][ T7325] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 290.584250][ T7325] RBP: 00007f5a6a233eaf R08: 0000000000000029 R09: 0000000000000000 [ 290.592232][ T7325] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.600214][ T7325] R13: 00007f5a6a426128 R14: 00007f5a6a426090 R15: 00007ffe1615a368 [ 290.608220][ T7325] [ 290.621869][ T7325] Mem-Info: [ 290.625189][ T7325] active_anon:7186 inactive_anon:15 isolated_anon:0 [ 290.625189][ T7325] active_file:1199 inactive_file:40199 isolated_file:0 [ 290.625189][ T7325] unevictable:768 dirty:77 writeback:0 [ 290.625189][ T7325] slab_reclaimable:10161 slab_unreclaimable:92545 [ 290.625189][ T7325] mapped:27801 shmem:1361 pagetables:654 [ 290.625189][ T7325] sec_pagetables:0 bounce:0 [ 290.625189][ T7325] kernel_misc_reclaimable:0 [ 290.625189][ T7325] free:1363262 free_pcp:6958 free_cma:0 [ 290.719775][ T7325] Node 0 active_anon:29544kB inactive_anon:60kB active_file:4796kB inactive_file:160592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111204kB dirty:304kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10668kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no [ 290.806041][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 290.829716][ T27] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.857325][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.873384][ T7325] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 290.904101][ T27] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 290.919051][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.949860][ T7325] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.953044][ T27] usb 2-1: config 0 descriptor?? [ 291.052377][ T7325] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 291.069035][ T7325] Node 0 DMA32 free:1540644kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27160kB inactive_anon:0kB active_file:4796kB inactive_file:159804kB unevictable:1536kB writepending:304kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:13596kB local_pcp:12584kB free_cma:0kB [ 291.117680][ T7325] lowmem_reserve[]: 0 0 0 0 0 [ 291.122512][ T7325] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 291.166192][ T7325] lowmem_reserve[]: 0 0 0 0 0 [ 291.180865][ T7325] Node 1 Normal free:3895160kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17664kB local_pcp:8352kB free_cma:0kB [ 291.218658][ T7325] lowmem_reserve[]: 0 0 0 0 0 [ 291.223686][ T7325] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 291.256885][ T7325] Node 0 DMA32: 267*4kB (UME) 132*8kB (UME) 610*16kB (UME) 320*32kB (UME) 159*64kB (UME) 64*128kB (UM) 34*256kB (UME) 18*512kB (ME) 9*1024kB (M) 5*2048kB (UME) 357*4096kB (UM) = 1540140kB [ 291.286985][ T7325] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 291.309447][ T7325] Node 1 Normal: 248*4kB (UME) 49*8kB (UME) 39*16kB (UME) 101*32kB (UME) 30*64kB (UE) 9*128kB (UME) 1*256kB (U) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3895160kB [ 291.333259][ T7325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.350558][ T7325] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.373785][ T7325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.410958][ T7325] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.420838][ T7325] 42589 total pagecache pages [ 291.434426][ T7325] 0 pages in swap cache [ 291.442373][ T7325] Free swap = 124680kB [ 291.459257][ T7325] Total swap = 124996kB [ 291.471759][ T7325] 2097051 pages RAM [ 291.482380][ T7325] 0 pages HighMem/MovableOnly [ 291.494088][ T7325] 416953 pages reserved [ 291.519866][ T7325] 0 pages cma reserved [ 291.523166][ T27] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 291.946669][ T7327] input: syz1 as /devices/virtual/input/input6 [ 292.433411][ T8] usb 2-1: USB disconnect, device number 8 [ 292.738141][ T7354] random: crng reseeded on system resumption [ 293.031793][ T7358] loop0: detected capacity change from 0 to 512 [ 293.115186][ T7357] serio: Serial port ttyS3 [ 293.160361][ T7358] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 293.169367][ T7358] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16 [ 293.418073][ T5986] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.933420][ T7395] loop1: detected capacity change from 0 to 512 [ 297.956166][ T7395] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 297.964994][ T7395] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 298.665925][ T7402] random: crng reseeded on system resumption [ 300.670451][ T7425] syzkaller0: entered promiscuous mode [ 300.687564][ T7425] syzkaller0: entered allmulticast mode [ 302.029919][ T7435] syz.1.395 uses obsolete (PF_INET,SOCK_PACKET) [ 302.344395][ T7439] loop2: detected capacity change from 0 to 512 [ 302.557715][ T7442] serio: Serial port ttyS3 [ 302.819489][ T7439] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 303.232377][ T7439] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16 [ 304.068847][ T7450] syzkaller0: entered promiscuous mode [ 304.091950][ T7450] syzkaller0: entered allmulticast mode [ 304.952003][ T7458] random: crng reseeded on system resumption [ 306.340144][ T7465] serio: Serial port ttyS3 [ 307.347534][ T7474] loop3: detected capacity change from 0 to 1024 [ 307.540139][ T7474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.190030][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.247003][ T7479] syzkaller0: entered promiscuous mode [ 308.252564][ T7479] syzkaller0: entered allmulticast mode [ 308.686332][ T7485] syzkaller0: entered promiscuous mode [ 308.709654][ T7485] syzkaller0: entered allmulticast mode [ 308.860284][ T7487] serio: Serial port ttyS3 [ 309.259709][ T7494] random: crng reseeded on system resumption [ 310.298838][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 310.309321][ T7499] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 310.453012][ T7501] loop0: detected capacity change from 0 to 512 [ 310.526388][ T7501] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 310.609497][ T7501] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16 [ 310.752259][ T7507] loop2: detected capacity change from 0 to 16 [ 310.809531][ T7507] erofs: (device loop2): mounted with root inode @ nid 36. [ 310.943973][ T52] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 311.001302][ T7507] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 311.024669][ T28] audit: type=1800 audit(1784385023.591:18): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.418" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 311.939003][ T5813] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 312.147511][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 312.165827][ T5813] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 312.189783][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.211287][ T5813] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.241451][ T5813] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 312.261763][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.283560][ T5813] usb 4-1: Product: syz [ 312.291896][ T5813] usb 4-1: Manufacturer: syz [ 312.309503][ T5813] usb 4-1: SerialNumber: syz [ 312.326065][ T5813] usb 4-1: config 0 descriptor?? [ 312.606224][ T5764] usb 4-1: USB disconnect, device number 11 [ 313.381784][ T7516] syzkaller0: entered promiscuous mode [ 313.387381][ T7516] syzkaller0: entered allmulticast mode [ 313.777140][ T7520] serio: Serial port ttyS3 [ 314.258922][ T7529] random: crng reseeded on system resumption [ 315.441552][ T7537] loop1: detected capacity change from 0 to 1024 [ 315.693891][ T7537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.320088][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.489976][ T7548] syzkaller0: entered promiscuous mode [ 316.496293][ T7548] syzkaller0: entered allmulticast mode [ 316.563943][ T5814] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 316.790730][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 316.799729][ T5814] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 316.819194][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.832747][ T5814] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.845438][ T5814] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 316.854543][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.863399][ T5814] usb 4-1: Product: syz [ 316.868069][ T5814] usb 4-1: Manufacturer: syz [ 316.872723][ T5814] usb 4-1: SerialNumber: syz [ 316.891646][ T5814] usb 4-1: config 0 descriptor?? [ 317.132651][ T27] usb 4-1: USB disconnect, device number 12 [ 317.650205][ T7557] loop1: detected capacity change from 0 to 512 [ 317.713205][ T7557] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 317.756304][ T7557] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 318.387792][ T7562] serio: Serial port ttyS3 [ 319.358893][ T7569] random: crng reseeded on system resumption [ 320.252791][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.263390][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.522279][ T7576] binder: 7575:7576 ioctl 4018620d 0 returned -22 [ 320.542090][ T7576] binder: 7575:7576 ioctl c0306201 0 returned -14 [ 320.755566][ T5814] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 320.964344][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.992873][ T5814] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 321.005256][ T5813] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 321.026381][ T5814] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 321.058453][ T5814] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 321.080400][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.088509][ T5814] usb 4-1: Product: syz [ 321.112908][ T5814] usb 4-1: Manufacturer: syz [ 321.117765][ T5814] usb 4-1: SerialNumber: syz [ 321.210562][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 321.228848][ T5813] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 321.248121][ T5813] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.271592][ T5813] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 321.298077][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.315381][ T5813] usb 2-1: Product: syz [ 321.320370][ T5813] usb 2-1: Manufacturer: syz [ 321.325677][ T5813] usb 2-1: SerialNumber: syz [ 321.339858][ T5813] usb 2-1: config 0 descriptor?? [ 321.443349][ T7573] bridge0: entered promiscuous mode [ 321.593573][ T5813] usb 2-1: USB disconnect, device number 9 [ 321.703014][ T7589] serio: Serial port ttyS3 [ 321.820470][ T5814] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 321.835403][ T5814] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 321.849101][ T7592] loop2: detected capacity change from 0 to 512 [ 321.855800][ T5814] usb 4-1: failed to enable PITCH for EP 0x1 [ 321.873566][ T5814] usb 4-1: unit 2 not found! [ 321.884651][ T5814] usb 4-1: unit 0 not found! [ 321.901087][ T7592] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 321.952526][ T7592] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16 [ 322.015523][ T5814] usb 4-1: USB disconnect, device number 13 [ 322.149634][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.490705][ T7607] random: crng reseeded on system resumption [ 324.734445][ T7627] syzkaller0: entered promiscuous mode [ 324.740060][ T7627] syzkaller0: entered allmulticast mode [ 324.932145][ T5814] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 325.175992][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 325.200532][ T5814] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 325.216077][ T5814] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.254684][ T5814] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 325.266700][ T7633] input: syz1 as /devices/virtual/input/input7 [ 325.283321][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.291513][ T5814] usb 1-1: Product: syz [ 325.301490][ T5814] usb 1-1: Manufacturer: syz [ 325.315867][ T5814] usb 1-1: SerialNumber: syz [ 325.327747][ T5814] usb 1-1: config 0 descriptor?? [ 326.482136][ T5764] usb 1-1: USB disconnect, device number 6 [ 328.087253][ T7661] syzkaller0: entered promiscuous mode [ 328.097943][ T7661] syzkaller0: entered allmulticast mode [ 328.686379][ T7665] random: crng reseeded on system resumption [ 330.634127][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 330.861565][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 330.874229][ T8] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 330.893395][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.919775][ T8] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 330.933884][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.943003][ T8] usb 4-1: Product: syz [ 330.947224][ T8] usb 4-1: Manufacturer: syz [ 330.956840][ T8] usb 4-1: SerialNumber: syz [ 330.964257][ T8] usb 4-1: config 0 descriptor?? [ 331.098734][ T7690] syzkaller0: entered promiscuous mode [ 331.104933][ T7690] syzkaller0: entered allmulticast mode [ 331.121944][ T5831] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 331.201185][ T8] usb 4-1: USB disconnect, device number 14 [ 331.327754][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 331.340395][ T5831] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.357342][ T5831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 331.367158][ T5831] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 331.380808][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.397108][ T5831] usb 2-1: config 0 descriptor?? [ 332.562293][ T7684] input: syz1 as /devices/virtual/input/input8 [ 332.688871][ T5831] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 333.082033][ C0] hrtimer: interrupt took 56780 ns [ 333.717306][ T7720] random: crng reseeded on system resumption [ 334.202846][ T5814] usb 2-1: USB disconnect, device number 10 [ 335.447988][ T7742] syzkaller0: entered promiscuous mode [ 335.453562][ T7742] syzkaller0: entered allmulticast mode [ 335.736037][ T5840] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 335.959146][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.987485][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.006175][ T5840] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 336.057158][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.121117][ T5840] usb 3-1: config 0 descriptor?? [ 336.981647][ T28] audit: type=1326 audit(1784385047.512:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388fd9de99 code=0x7ffc0000 [ 337.075167][ T28] audit: type=1326 audit(1784385047.512:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388fd9de99 code=0x7ffc0000 [ 337.210626][ T28] audit: type=1326 audit(1784385047.586:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388fd9de99 code=0x7ffc0000 [ 337.257461][ T5840] playstation 0003:054C:0BA0.0003: item fetching failed at offset 0/7 [ 337.304059][ T5840] playstation 0003:054C:0BA0.0003: Parse failed [ 337.333360][ T28] audit: type=1326 audit(1784385047.586:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388fd9de99 code=0x7ffc0000 [ 337.354021][ T5840] playstation: probe of 0003:054C:0BA0.0003 failed with error -22 [ 337.391782][ T28] audit: type=1326 audit(1784385047.586:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f388fd9de99 code=0x7ffc0000 [ 337.445101][ T28] audit: type=1326 audit(1784385047.586:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388fd9de99 code=0x7ffc0000 [ 337.491862][ T28] audit: type=1326 audit(1784385047.586:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388fd9de99 code=0x7ffc0000 [ 337.519511][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.532418][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.548153][ T28] audit: type=1326 audit(1784385047.586:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388fd9de99 code=0x7ffc0000 [ 337.578048][ T7741] libceph: secret too big 32 [ 337.594004][ T28] audit: type=1326 audit(1784385047.586:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f388fd9db2b code=0x7ffc0000 [ 337.618511][ T28] audit: type=1326 audit(1784385047.586:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f388fd9db2b code=0x7ffc0000 [ 337.642442][ T5831] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 337.678246][ T9] usb 3-1: USB disconnect, device number 10 [ 337.837619][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 337.845375][ T5831] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.869953][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 337.876655][ T5831] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 337.899441][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.917631][ T5831] usb 1-1: config 0 descriptor?? [ 338.097107][ T7773] loop1: detected capacity change from 0 to 1024 [ 338.246608][ T7773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.974504][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.011940][ T5831] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 339.226586][ T7764] input: syz1 as /devices/virtual/input/input9 [ 339.313339][ T7784] random: crng reseeded on system resumption [ 341.844178][ T9] usb 1-1: USB disconnect, device number 7 [ 343.361324][ T7791] overlayfs: missing 'lowerdir' [ 344.839035][ T7814] random: crng reseeded on system resumption [ 347.241532][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 347.408170][ T7834] loop2: detected capacity change from 0 to 16 [ 348.370759][ T7834] erofs: (device loop2): mounted with root inode @ nid 36. [ 348.387856][ T52] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 348.404711][ T7833] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 348.416348][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 348.416363][ T28] audit: type=1800 audit(1784385058.120:148): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.509" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 348.506943][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 348.574968][ T27] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.604754][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.631038][ T27] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 348.658449][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.678191][ T27] usb 2-1: config 0 descriptor?? [ 349.784628][ T7843] loop3: detected capacity change from 0 to 1024 [ 351.893208][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 351.905261][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 351.930654][ T27] usb 2-1: USB disconnect, device number 11 [ 352.753293][ T7843] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 353.376422][ T7855] random: crng reseeded on system resumption [ 353.872383][ T7856] overlayfs: missing 'workdir' [ 355.505837][ T7877] loop1: detected capacity change from 0 to 1024 [ 355.633455][ T7877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.046473][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 356.355013][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.404021][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 356.411876][ T27] usb 1-1: descriptor type invalid, skip [ 356.428687][ T27] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 356.457877][ T27] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 356.504241][ T27] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59 [ 356.522378][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.542022][ T27] usb 1-1: Product: syz [ 356.565673][ T27] usb 1-1: Manufacturer: syz [ 356.570380][ T27] usb 1-1: SerialNumber: syz [ 356.948712][ T7892] loop2: detected capacity change from 0 to 16 [ 356.968314][ T7892] erofs: (device loop2): mounted with root inode @ nid 36. [ 357.036643][ T52] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 357.079873][ T7869] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 357.420894][ T28] audit: type=1800 audit(1784385066.410:149): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.524" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 357.747183][ T27] usb 1-1: USB disconnect, device number 8 [ 358.799754][ T7915] overlayfs: missing 'workdir' [ 359.576188][ T7917] random: crng reseeded on system resumption [ 360.723762][ T7941] loop1: detected capacity change from 0 to 16 [ 360.733797][ T7941] erofs: (device loop1): mounted with root inode @ nid 36. [ 360.779386][ T52] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 360.850793][ T7941] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 360.863989][ T28] audit: type=1800 audit(1784385069.614:150): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.539" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 362.482306][ T7956] overlayfs: missing 'workdir' [ 365.694747][ T7986] loop3: detected capacity change from 0 to 1024 [ 365.910420][ T7986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.637848][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.245865][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 367.465485][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 367.484536][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 367.509730][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.524397][ T8] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 367.533970][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.542433][ T8] usb 4-1: Product: syz [ 367.546809][ T8] usb 4-1: Manufacturer: syz [ 367.551973][ T8] usb 4-1: SerialNumber: syz [ 369.121973][ T8] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 369.140274][ T8] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 369.173201][ T8] usb 4-1: failed to enable PITCH for EP 0x1 [ 369.180286][ T8] usb 4-1: unit 2 not found! [ 369.190495][ T8] usb 4-1: unit 0 not found! [ 369.307954][ T8] usb 4-1: USB disconnect, device number 15 [ 369.462800][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.156208][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 371.329673][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 371.355362][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 371.371293][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 371.384034][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 371.416430][ T8] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 371.437860][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.456701][ T8] usb 3-1: Product: syz [ 371.470506][ T8] usb 3-1: Manufacturer: syz [ 371.486351][ T8] usb 3-1: SerialNumber: syz [ 371.535796][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 371.543562][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.556067][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.567108][ T27] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 371.609872][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.644656][ T27] usb 1-1: config 0 descriptor?? [ 371.836319][ T8057] bridge0: entered promiscuous mode [ 372.023717][ T8] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 372.043267][ T8] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 372.059187][ T8] usb 3-1: failed to enable PITCH for EP 0x1 [ 372.074337][ T8] usb 3-1: unit 2 not found! [ 372.079620][ T8] usb 3-1: unit 0 not found! [ 372.140923][ T8] usb 3-1: USB disconnect, device number 11 [ 372.227895][ T27] ntrig 0003:1B96:0008.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0 [ 372.288593][ T7594] udevd[7594]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.583065][ T27] usb 1-1: USB disconnect, device number 9 [ 373.065863][ T8093] loop3: detected capacity change from 0 to 1024 [ 373.849867][ T8093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.081707][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.914854][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 375.120622][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 375.131966][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 375.149399][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 375.171348][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 375.194563][ T8] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 375.212411][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.228142][ T8] usb 4-1: Product: syz [ 375.236937][ T8] usb 4-1: Manufacturer: syz [ 375.245421][ T8] usb 4-1: SerialNumber: syz [ 375.315633][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 375.328769][ T27] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.340459][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 375.347149][ T27] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 375.356845][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.369371][ T27] usb 2-1: config 0 descriptor?? [ 375.819928][ T8] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 375.828818][ T8] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 375.989651][ T8128] loop0: detected capacity change from 0 to 1024 [ 376.141355][ T8128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.602523][ T8] usb 4-1: failed to enable PITCH for EP 0x1 [ 376.610778][ T8] usb 4-1: unit 2 not found! [ 376.622579][ T8] usb 4-1: unit 0 not found! [ 376.687125][ T8] usb 4-1: USB disconnect, device number 16 [ 376.799047][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.005137][ T7594] udevd[7594]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.189702][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 377.217627][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 377.236409][ T8140] netlink: 'syz.3.607': attribute type 30 has an invalid length. [ 377.252451][ T8140] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.262183][ T8140] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.266190][ T27] usb 2-1: USB disconnect, device number 12 [ 377.271401][ T8140] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.285781][ T8140] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.345530][ T8140] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.354794][ T8140] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.364215][ T8140] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.373484][ T8140] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.571394][ T8141] netlink: 'syz.3.607': attribute type 30 has an invalid length. [ 377.616254][ T8141] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.625347][ T8141] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.634198][ T8141] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.643076][ T8141] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.666972][ T8141] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.675894][ T8141] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.684871][ T8141] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.693927][ T8141] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.837764][ T8148] bridge_slave_0: left allmulticast mode [ 377.873661][ T8148] bridge_slave_0: left promiscuous mode [ 377.884734][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.900757][ T8148] bridge_slave_1: left allmulticast mode [ 377.910487][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.937730][ T8148] bond0: (slave bond_slave_0): Releasing backup interface [ 377.971819][ T8148] bond0: (slave bond_slave_1): Releasing backup interface [ 378.086764][ T8148] team0: Port device team_slave_0 removed [ 378.125257][ T8148] team0: Port device team_slave_1 removed [ 378.147777][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.175271][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.184815][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.197646][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.030975][ T787] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 379.250724][ T787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.264095][ T787] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 379.283148][ T787] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 379.297657][ T787] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 379.318216][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.326616][ T787] usb 2-1: Product: syz [ 379.338160][ T787] usb 2-1: Manufacturer: syz [ 379.343832][ T787] usb 2-1: SerialNumber: syz [ 379.986684][ T8167] bridge0: entered promiscuous mode [ 380.399583][ T787] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 380.428362][ T787] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 380.489318][ T787] usb 2-1: failed to enable PITCH for EP 0x1 [ 380.508464][ T787] usb 2-1: unit 2 not found! [ 380.513158][ T787] usb 2-1: unit 0 not found! [ 380.600861][ T787] usb 2-1: USB disconnect, device number 13 [ 380.734798][ T8080] udevd[8080]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.770598][ T8197] syzkaller0: entered promiscuous mode [ 380.794010][ T8197] syzkaller0: entered allmulticast mode [ 381.552139][ T8212] serio: Serial port ttyS3 [ 382.402821][ T8227] loop3: detected capacity change from 0 to 1024 [ 383.511099][ T8227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.709359][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.219568][ T5840] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 384.452914][ T5840] usb 3-1: unable to get BOS descriptor or descriptor too short [ 384.467841][ T5840] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 384.484168][ T5840] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.510126][ T5840] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 384.523835][ T8243] syzkaller0: entered promiscuous mode [ 384.536407][ T8243] syzkaller0: entered allmulticast mode [ 384.543195][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.553571][ T5840] usb 3-1: Product: syz [ 384.566432][ T5840] usb 3-1: Manufacturer: syz [ 384.572148][ T5840] usb 3-1: SerialNumber: syz [ 385.318891][ T5840] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 385.335481][ T5840] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 385.365201][ T5840] usb 3-1: failed to enable PITCH for EP 0x1 [ 385.385479][ T5840] usb 3-1: unit 2 not found! [ 385.396861][ T5840] usb 3-1: unit 0 not found! [ 385.490678][ T5840] usb 3-1: USB disconnect, device number 12 [ 385.674877][ T8260] loop3: detected capacity change from 0 to 1024 [ 385.704107][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.948524][ T8260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.024249][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.032210][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.590480][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.346354][ T8277] syzkaller0: entered promiscuous mode [ 387.361631][ T8277] syzkaller0: entered allmulticast mode [ 389.289896][ T8289] loop2: detected capacity change from 0 to 1024 [ 390.258744][ T8289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.735131][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.875133][ T5813] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 391.122970][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 391.134157][ T5813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 391.167250][ T5813] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 391.205449][ T5813] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 391.226092][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.239227][ T5813] usb 2-1: Product: syz [ 391.243480][ T5813] usb 2-1: Manufacturer: syz [ 391.259540][ T5813] usb 2-1: SerialNumber: syz [ 391.386307][ T8305] bridge_slave_0: left allmulticast mode [ 391.433758][ T8305] bridge_slave_0: left promiscuous mode [ 391.441813][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.521397][ T8305] bridge_slave_1: left allmulticast mode [ 391.548427][ T8305] bridge_slave_1: left promiscuous mode [ 391.654902][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.786082][ T8305] bond0: (slave bond_slave_0): Releasing backup interface [ 391.826211][ T8305] bond0: (slave bond_slave_1): Releasing backup interface [ 392.054197][ T8305] team0: Port device team_slave_0 removed [ 392.172547][ T8305] team0: Port device team_slave_1 removed [ 392.217558][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.270739][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.334957][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.389181][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.955936][ T8315] syzkaller0: entered promiscuous mode [ 394.025595][ T8328] loop0: detected capacity change from 0 to 1024 [ 394.152022][ T8328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.205714][ T8315] syzkaller0: entered allmulticast mode [ 394.879219][ T5813] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 394.886546][ T5813] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 394.920735][ T5813] usb 2-1: failed to enable PITCH for EP 0x1 [ 394.939782][ T5813] usb 2-1: unit 2 not found! [ 394.975594][ T5813] usb 2-1: unit 0 not found! [ 395.149541][ T5813] usb 2-1: USB disconnect, device number 14 [ 395.188981][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.309879][ T8080] udevd[8080]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.326535][ T8341] serio: Serial port ttyS3 [ 400.973497][ T8375] loop3: detected capacity change from 0 to 1024 [ 401.185799][ T8375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.463275][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 401.496104][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.694291][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 401.912167][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 401.932969][ T8390] syzkaller0: entered promiscuous mode [ 401.951337][ T8390] syzkaller0: entered allmulticast mode [ 402.023248][ T8391] serio: Serial port ttyS3 [ 403.034667][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 403.829257][ T9] usb 2-1: string descriptor 0 read error: -71 [ 403.835684][ T9] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 403.868399][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.929678][ T9] usb 2-1: can't set config #1, error -71 [ 403.955600][ T9] usb 2-1: USB disconnect, device number 15 [ 404.841019][ T8410] loop1: detected capacity change from 0 to 1024 [ 404.918797][ T8410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.975579][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.474360][ T8423] serio: Serial port ttyS3 [ 407.240822][ T8427] syzkaller0: entered promiscuous mode [ 407.257588][ T8427] syzkaller0: entered allmulticast mode [ 409.096923][ T8459] syzkaller0: entered promiscuous mode [ 409.118785][ T8459] syzkaller0: entered allmulticast mode [ 410.592657][ T8483] serio: Serial port ttyS3 [ 412.876052][ T8496] loop3: detected capacity change from 0 to 1024 [ 413.114652][ T8496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.415042][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.852048][ T8507] loop2: detected capacity change from 0 to 16 [ 413.906883][ T8507] erofs: (device loop2): mounted with root inode @ nid 36. [ 413.973073][ T52] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 414.008749][ T8507] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 414.165527][ T28] audit: type=1800 audit(1784385118.820:151): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.714" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 415.535918][ T8528] serio: Serial port ttyS3 [ 416.748585][ T8541] netlink: 556 bytes leftover after parsing attributes in process `syz.0.726'. [ 418.444699][ T8551] tipc: Started in network mode [ 418.456804][ T8551] tipc: Node identity d209afbcab22, cluster identity 4711 [ 418.479918][ T8551] tipc: Enabled bearer , priority 0 [ 418.498895][ T8551] syzkaller0: entered promiscuous mode [ 418.510543][ T8551] syzkaller0: entered allmulticast mode [ 418.582124][ T8551] tipc: Resetting bearer [ 418.631259][ T8550] tipc: Resetting bearer [ 418.752297][ T8550] tipc: Disabling bearer [ 419.668741][ T8560] loop0: detected capacity change from 0 to 1024 [ 419.833278][ T8560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.659292][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.125771][ T8580] input: syz1 as /devices/virtual/input/input10 [ 421.821352][ T8589] serio: Serial port ttyS3 [ 421.826593][ T8585] netlink: 556 bytes leftover after parsing attributes in process `syz.2.738'. [ 423.368271][ T8601] loop2: detected capacity change from 0 to 1024 [ 423.445615][ T8601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.224266][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.928509][ T8625] netlink: 556 bytes leftover after parsing attributes in process `syz.3.757'. [ 428.524082][ T8635] loop0: detected capacity change from 0 to 1024 [ 429.198127][ T8635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.381807][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.024462][ T8668] loop2: detected capacity change from 0 to 1024 [ 433.924346][ T8668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.213276][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.269934][ T8705] loop1: detected capacity change from 0 to 512 [ 435.293401][ T8705] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 435.302354][ T8705] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 438.546527][ T8714] netlink: 556 bytes leftover after parsing attributes in process `syz.3.776'. [ 438.732235][ T8715] loop1: detected capacity change from 0 to 1024 [ 439.579993][ T8715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.766303][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.441572][ T8731] netlink: 184 bytes leftover after parsing attributes in process `syz.1.785'. [ 440.685687][ T5764] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 440.778531][ T8742] loop3: detected capacity change from 0 to 512 [ 440.978967][ T8742] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 440.987822][ T8742] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16 [ 441.101196][ T5764] usb 1-1: Using ep0 maxpacket: 16 [ 441.129102][ T5764] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.210444][ T5764] usb 1-1: config 0 interface 0 has no altsetting 0 [ 446.225188][ T5764] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 446.234717][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.257330][ T5764] usb 1-1: config 0 descriptor?? [ 446.379741][ T5764] usb 1-1: can't set config #0, error -71 [ 446.388368][ T5764] usb 1-1: USB disconnect, device number 10 [ 446.676517][ T8754] loop3: detected capacity change from 0 to 1024 [ 447.483499][ T8754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.677565][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.732667][ T8761] syzkaller0: entered promiscuous mode [ 447.753216][ T8761] syzkaller0: entered allmulticast mode [ 449.780423][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 449.993362][ T8777] netlink: 556 bytes leftover after parsing attributes in process `syz.3.798'. [ 450.024403][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 450.037731][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.055333][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.062909][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 450.077039][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.103635][ T9] usb 2-1: config 0 descriptor?? [ 450.836417][ T8792] loop2: detected capacity change from 0 to 1024 [ 450.846600][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.858137][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.766891][ T9] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 451.916262][ T8792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.989626][ T8782] input: syz1 as /devices/virtual/input/input11 [ 452.127791][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.131061][ T8797] syzkaller0: entered promiscuous mode [ 452.156200][ T8797] syzkaller0: entered allmulticast mode [ 452.686559][ T8804] batman_adv: batadv0: Adding interface: dummy0 [ 452.693115][ T8804] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.725965][ T8804] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 453.633990][ T8818] tipc: Started in network mode [ 453.655888][ T8818] tipc: Node identity be11e3e47395, cluster identity 4711 [ 453.684315][ T5840] usb 2-1: USB disconnect, device number 16 [ 453.709417][ T8818] tipc: Enabled bearer , priority 0 [ 453.779862][ T8822] syzkaller0: entered promiscuous mode [ 453.785903][ T8822] syzkaller0: entered allmulticast mode [ 456.109510][ T8827] tipc: Resetting bearer [ 457.806302][ T8816] tipc: Resetting bearer [ 457.928439][ T8816] tipc: Disabling bearer [ 458.052255][ T5814] tipc: Node number set to 3448038372 [ 458.301102][ T8842] syzkaller0: entered promiscuous mode [ 458.306944][ T8842] syzkaller0: entered allmulticast mode [ 458.390150][ T787] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 458.628321][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 458.647114][ T787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 458.683844][ T787] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 458.707516][ T8859] netlink: 556 bytes leftover after parsing attributes in process `syz.1.819'. [ 458.729433][ T787] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 458.739203][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.757400][ T787] usb 4-1: Product: syz [ 458.761734][ T787] usb 4-1: Manufacturer: syz [ 458.766729][ T787] usb 4-1: SerialNumber: syz [ 459.014984][ T5831] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 459.212486][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 459.223606][ T5831] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.249252][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 459.267578][ T5831] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 459.286726][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.308216][ T5831] usb 1-1: config 0 descriptor?? [ 459.782903][ T5831] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 460.219225][ T8858] input: syz1 as /devices/virtual/input/input12 [ 461.758503][ T5840] usb 1-1: USB disconnect, device number 11 [ 462.089494][ T8871] loop0: detected capacity change from 0 to 1024 [ 462.268075][ T8871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.798061][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.098683][ T787] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 464.211745][ T787] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 464.418489][ T787] usb 4-1: failed to enable PITCH for EP 0x1 [ 464.532125][ T787] usb 4-1: unit 2 not found! [ 464.601250][ T787] usb 4-1: unit 0 not found! [ 465.076744][ T787] usb 4-1: USB disconnect, device number 17 [ 465.764656][ T7594] udevd[7594]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.215741][ T5811] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 466.442282][ T8905] loop3: detected capacity change from 0 to 1024 [ 466.511703][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 466.536677][ T5811] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.553985][ T8906] netlink: 556 bytes leftover after parsing attributes in process `syz.2.831'. [ 467.056393][ T5811] usb 1-1: config 0 interface 0 has no altsetting 0 [ 467.063287][ T5811] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 467.116040][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.246531][ T8905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.288008][ T5811] usb 1-1: config 0 descriptor?? [ 467.450509][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.712217][ T8911] syzkaller0: entered promiscuous mode [ 467.718260][ T5811] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 467.742909][ T8911] syzkaller0: entered allmulticast mode [ 468.128646][ T8899] input: syz1 as /devices/virtual/input/input13 [ 469.534523][ T5764] usb 1-1: USB disconnect, device number 12 [ 471.254531][ T5831] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 471.773957][ T8939] loop0: detected capacity change from 0 to 1024 [ 471.882702][ T8939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.301931][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 472.344263][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.349411][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 472.508518][ T8946] loop1: detected capacity change from 0 to 1024 [ 472.566606][ T8946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.318399][ T5831] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.339343][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.352662][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.404557][ T5831] usb 3-1: config 0 descriptor?? [ 473.445547][ T5831] usb 3-1: can't set config #0, error -71 [ 473.454097][ T5831] usb 3-1: USB disconnect, device number 13 [ 474.219009][ T5811] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 474.262335][ T8965] netlink: 556 bytes leftover after parsing attributes in process `syz.2.845'. [ 474.644871][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 474.663939][ T5811] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.724969][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 474.795608][ T5811] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 474.906104][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.070487][ T5811] usb 2-1: config 0 descriptor?? [ 475.552296][ T5811] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 476.559535][ T8959] input: syz1 as /devices/virtual/input/input14 [ 476.594885][ T8977] capability: warning: `syz.3.854' uses deprecated v2 capabilities in a way that may be insecure [ 476.726809][ T5840] usb 2-1: USB disconnect, device number 17 [ 476.874249][ T5764] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 477.073963][ T5764] usb 1-1: Using ep0 maxpacket: 16 [ 477.095597][ T5764] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.119750][ T5764] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.174816][ T5764] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 477.211245][ T5764] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 477.246482][ T5764] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.266310][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 477.277432][ T5764] usb 1-1: SerialNumber: syz [ 477.290059][ T5764] hub 1-1:1.0: bad descriptor, ignoring hub [ 477.302046][ T5764] hub: probe of 1-1:1.0 failed with error -5 [ 477.310650][ T5764] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 477.921867][ T9003] raw-gadget.1 gadget.0: fail, usb_ep_set_halt returned -11 [ 479.334883][ T9003] tty tty20: ldisc open failed (-12), clearing slot 19 [ 479.415561][ T9007] tipc: Enabled bearer , priority 0 [ 479.465811][ T9007] syzkaller0: entered promiscuous mode [ 479.473739][ T9007] syzkaller0: entered allmulticast mode [ 479.596194][ T9007] tipc: Resetting bearer [ 479.630546][ T9006] tipc: Resetting bearer [ 479.678537][ T9006] tipc: Disabling bearer [ 479.857810][ T5840] usb 1-1: USB disconnect, device number 13 [ 480.286350][ T5840] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 480.527627][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 480.534936][ T5840] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.573802][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 480.595205][ T5840] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 480.620552][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.649453][ T5840] usb 1-1: config 0 descriptor?? [ 480.823973][ T9016] netlink: 556 bytes leftover after parsing attributes in process `syz.2.866'. [ 481.052493][ T9032] netlink: 5 bytes leftover after parsing attributes in process `syz.3.872'. [ 481.277955][ T9032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.740274][ T9010] input: syz1 as /devices/virtual/input/input15 [ 483.602589][ T5840] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 483.742126][ T5840] usb 1-1: USB disconnect, device number 14 [ 483.937883][ T9038] fido_id[9038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 485.249041][ T9075] netlink: 556 bytes leftover after parsing attributes in process `syz.0.883'. [ 485.438210][ T5814] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 485.644750][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 485.663402][ T5814] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.686219][ T5814] usb 4-1: config 0 interface 0 has no altsetting 0 [ 485.703846][ T5814] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 485.723881][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.754554][ T5814] usb 4-1: config 0 descriptor?? [ 485.789963][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 486.088723][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 486.140303][ T9] usb 3-1: config 0 has no interfaces? [ 486.154141][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 486.191809][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.232536][ T5814] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 486.251560][ T9] usb 3-1: config 0 descriptor?? [ 486.563806][ T5764] usb 3-1: USB disconnect, device number 14 [ 486.604152][ T9073] input: syz1 as /devices/virtual/input/input16 [ 487.041689][ T5840] usb 4-1: USB disconnect, device number 18 [ 487.898345][ T9101] loop0: detected capacity change from 0 to 1024 [ 489.371090][ T9101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.579607][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.371682][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 490.579618][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 490.606221][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.662585][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 490.669317][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 490.692967][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.722183][ T9] usb 3-1: config 0 descriptor?? [ 491.212121][ T9] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 491.665350][ T9115] input: syz1 as /devices/virtual/input/input17 [ 491.877414][ T9143] loop3: detected capacity change from 0 to 1024 [ 492.672230][ T9144] process 'syz.1.901' launched './file0' with NULL argv: empty string added [ 493.681368][ T9143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.996729][ T28] audit: type=1800 audit(1784385196.775:152): pid=9144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.901" name="/" dev="fuse" ino=4 res=0 errno=0 [ 494.104950][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.141192][ T5764] usb 3-1: USB disconnect, device number 15 [ 494.535245][ T28] audit: type=1804 audit(1784385197.281:153): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.904" name="/newroot/235/file0" dev="fuse" ino=1 res=1 errno=0 [ 494.930450][ T9170] batman_adv: batadv0: Removing interface: dummy0 [ 496.086252][ T9184] loop1: detected capacity change from 0 to 1024 [ 496.262128][ T5814] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 496.930706][ T9184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.014977][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 497.042116][ T5814] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.132539][ T5814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 497.143913][ T5814] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 497.153069][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.160199][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.178744][ T5814] usb 3-1: config 0 descriptor?? [ 497.653903][ T5814] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 497.835928][ T9209] random: crng reseeded on system resumption [ 498.353925][ T9181] input: syz1 as /devices/virtual/input/input18 [ 498.887784][ T5811] usb 3-1: USB disconnect, device number 16 [ 499.516929][ T9221] tipc: Enabled bearer , priority 0 [ 499.536001][ T9221] syzkaller0: entered promiscuous mode [ 499.542216][ T9221] syzkaller0: entered allmulticast mode [ 499.634242][ T9222] tipc: Resetting bearer [ 499.702957][ T9220] tipc: Resetting bearer [ 499.781107][ T9220] tipc: Disabling bearer [ 499.998757][ T9228] loop3: detected capacity change from 0 to 1024 [ 500.183498][ T9228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.863840][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.098780][ T9242] random: crng reseeded on system resumption [ 501.295603][ T5831] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 501.533490][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 501.546421][ T5831] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.562974][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 501.570809][ T5831] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 501.584712][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.597692][ T5831] usb 3-1: config 0 descriptor?? [ 502.074615][ T5831] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 502.557849][ T9237] input: syz1 as /devices/virtual/input/input19 [ 502.893719][ T5811] usb 3-1: USB disconnect, device number 17 [ 503.332327][ T9284] random: crng reseeded on system resumption [ 504.789441][ T5831] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 504.875329][ T5811] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 505.017397][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 505.030056][ T5831] usb 2-1: config 0 has no interfaces? [ 505.039401][ T5831] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 505.058536][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.090323][ T5831] usb 2-1: config 0 descriptor?? [ 505.094234][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 505.117578][ T5811] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.137964][ T5811] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.166826][ T5811] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 505.210752][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.244486][ T5811] usb 1-1: config 0 descriptor?? [ 505.472678][ T5831] usb 2-1: USB disconnect, device number 18 [ 505.716763][ T5811] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 505.914968][ T9311] loop3: detected capacity change from 0 to 1024 [ 506.127707][ T9311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.750084][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.791576][ T9297] input: syz1 as /devices/virtual/input/input20 [ 507.203096][ T9322] random: crng reseeded on system resumption [ 508.163649][ T5764] usb 1-1: USB disconnect, device number 15 [ 509.561309][ T9360] batman_adv: batadv0: Adding interface: dummy0 [ 509.567725][ T9360] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.598183][ T9360] batman_adv: batadv0: Interface activated: dummy0 [ 509.660050][ T9361] batadv0: mtu less than device minimum [ 509.698151][ T9361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.710646][ T9361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.722352][ T9361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.734474][ T9361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.746255][ T9361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.758118][ T9361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.769982][ T9361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.781770][ T9361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.793466][ T9361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.117598][ T9369] random: crng reseeded on system resumption [ 511.230832][ T5764] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 511.482716][ T5764] usb 2-1: Using ep0 maxpacket: 16 [ 511.522568][ T5764] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.587307][ T5764] usb 2-1: config 0 interface 0 has no altsetting 0 [ 511.600338][ T5764] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 511.609470][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.633416][ T5764] usb 2-1: config 0 descriptor?? [ 511.788875][ T9385] batman_adv: batadv0: Adding interface: dummy0 [ 511.796301][ T9385] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.821561][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.829107][ T9385] batman_adv: batadv0: Interface activated: dummy0 [ 512.123798][ T5764] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 512.475964][ T9397] random: crng reseeded on system resumption [ 513.575320][ T9395] syzkaller0: entered promiscuous mode [ 513.584644][ T9365] input: syz1 as /devices/virtual/input/input21 [ 513.598553][ T9395] syzkaller0: entered allmulticast mode [ 513.852582][ T8] usb 2-1: USB disconnect, device number 19 [ 513.986045][ T9406] loop0: detected capacity change from 0 to 1024 [ 514.144522][ T9406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.482744][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.505641][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.800175][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.126243][ T9437] batman_adv: batadv0: Adding interface: dummy0 [ 517.134365][ T9437] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.163795][ T9437] batman_adv: batadv0: Interface activated: dummy0 [ 517.228583][ T9443] random: crng reseeded on system resumption [ 518.301423][ T9437] net_ratelimit: 30 callbacks suppressed [ 518.301524][ T9437] batadv0: mtu less than device minimum [ 518.338737][ T9437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.352003][ T9437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.364652][ T9437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.377436][ T9437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.390079][ T9437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.402716][ T9437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.415312][ T9437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.427970][ T9437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.440621][ T9437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.737856][ T9454] loop1: detected capacity change from 0 to 1024 [ 519.019345][ T9454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.547915][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.711799][ T9461] syzkaller0: entered promiscuous mode [ 519.742766][ T9461] syzkaller0: entered allmulticast mode [ 521.902110][ T9487] loop2: detected capacity change from 0 to 16 [ 521.915944][ T9487] erofs: (device loop2): mounted with root inode @ nid 36. [ 521.936478][ T52] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 521.948454][ T9487] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 521.961868][ T28] audit: type=1800 audit(1784385222.655:154): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1002" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 523.415414][ T9515] serio: Serial port ttyS3 [ 525.087228][ T9520] syzkaller0: entered promiscuous mode [ 525.110984][ T9520] syzkaller0: entered allmulticast mode [ 525.748447][ T9531] loop0: detected capacity change from 0 to 1024 [ 526.493850][ T9531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.776446][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.994592][ T9537] loop1: detected capacity change from 0 to 16 [ 527.012798][ T9537] erofs: (device loop1): mounted with root inode @ nid 36. [ 527.026483][ T52] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 527.042193][ T9537] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 527.066889][ T28] audit: type=1800 audit(1784385227.345:155): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1015" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 528.871319][ T9552] serio: Serial port ttyS3 [ 529.307519][ T9526] syzkaller0: entered promiscuous mode [ 529.325667][ T9526] syzkaller0: entered allmulticast mode [ 533.258616][ T9579] syzkaller0: entered promiscuous mode [ 533.264509][ T9579] syzkaller0: entered allmulticast mode [ 533.445674][ T9581] syzkaller0: entered promiscuous mode [ 533.468179][ T9581] syzkaller0: entered allmulticast mode [ 533.733094][ T9586] loop0: detected capacity change from 0 to 1024 [ 534.553173][ T9586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.780489][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.261421][ T9603] net_ratelimit: 11 callbacks suppressed [ 536.261438][ T9603] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85 [ 538.154928][ T9614] syzkaller0: entered promiscuous mode [ 538.168752][ T9614] syzkaller0: entered allmulticast mode [ 538.597940][ T9627] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85 [ 539.036509][ T9636] syzkaller0: entered promiscuous mode [ 539.044645][ T9636] syzkaller0: entered allmulticast mode [ 539.452425][ T28] audit: type=1804 audit(1784385238.792:156): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1049" name="/newroot/261/file0" dev="fuse" ino=1 res=1 errno=0 [ 540.581841][ T9654] loop2: detected capacity change from 0 to 1024 [ 540.813018][ T9654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.450490][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.139849][ T9630] IPVS: Error connecting to the multicast addr [ 543.167087][ T9663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1045'. [ 543.340183][ T9680] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85 [ 544.240429][ T9703] syzkaller0: entered promiscuous mode [ 544.247381][ T9703] syzkaller0: entered allmulticast mode [ 547.417050][ T9708] tipc: Enabling of bearer rejected, failed to enable media [ 548.396608][ T9742] syzkaller0: entered promiscuous mode [ 548.402390][ T9742] syzkaller0: entered allmulticast mode [ 552.725054][ T9745] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 553.278780][ T9746] batman_adv: batadv0: Interface deactivated: dummy0 [ 554.415127][ T9746] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.424609][ T9746] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.435369][ T9746] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.444511][ T9746] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.633643][ T9755] tipc: Enabling of bearer rejected, failed to enable media [ 554.953597][ T9792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1081'. [ 555.567322][ T9808] serio: Serial port ttyS3 [ 556.517243][ T9813] tipc: Enabled bearer , priority 0 [ 556.541370][ T9813] syzkaller0: entered promiscuous mode [ 556.546882][ T9813] syzkaller0: entered allmulticast mode [ 556.605618][ T9813] tipc: Resetting bearer [ 556.631235][ T9812] tipc: Resetting bearer [ 556.692742][ T9812] tipc: Disabling bearer [ 556.750758][ T9818] tipc: Enabled bearer , priority 0 [ 556.789328][ T9818] syzkaller0: entered promiscuous mode [ 556.794941][ T9818] syzkaller0: entered allmulticast mode [ 556.886411][ T9818] tipc: Resetting bearer [ 556.926460][ T9817] tipc: Resetting bearer [ 557.053710][ T9817] tipc: Disabling bearer [ 557.704072][ T9830] fuse: Bad value for 'fd' [ 561.096987][ T9872] serio: Serial port ttyS3 [ 561.879700][ T9884] syzkaller0: entered promiscuous mode [ 561.886646][ T9884] syzkaller0: entered allmulticast mode [ 564.779923][ T9896] tipc: Enabling of bearer rejected, failed to enable media [ 565.142452][ T9920] tipc: Started in network mode [ 565.155759][ T9920] tipc: Node identity e2819df5730b, cluster identity 4711 [ 565.171681][ T9920] tipc: Enabled bearer , priority 0 [ 565.189719][ T9920] syzkaller0: entered promiscuous mode [ 565.203335][ T9920] syzkaller0: entered allmulticast mode [ 565.254902][ T9920] tipc: Resetting bearer [ 565.281383][ T9918] tipc: Resetting bearer [ 565.311228][ T9918] tipc: Disabling bearer [ 565.721394][ T9930] syzkaller0: entered promiscuous mode [ 565.734675][ T9930] syzkaller0: entered allmulticast mode [ 565.792092][ T9933] serio: Serial port ttyS3 [ 569.045147][ T9942] tipc: Enabling of bearer rejected, failed to enable media [ 569.283005][ T9965] fuse: Bad value for 'fd' [ 569.626677][ T9969] serio: Serial port ttyS3 [ 570.284815][ T9980] syzkaller0: entered promiscuous mode [ 570.291130][ T9980] syzkaller0: entered allmulticast mode [ 572.447918][ T9991] tipc: Enabling of bearer rejected, failed to enable media [ 572.915700][T10014] fuse: Bad value for 'fd' [ 573.151110][T10015] serio: Serial port ttyS3 [ 573.176740][T10018] syzkaller0: entered promiscuous mode [ 573.183838][T10018] syzkaller0: entered allmulticast mode [ 573.515284][T10027] fuse: Unknown parameter 'grou00000000000000000000' [ 574.220051][T10043] syzkaller0: entered promiscuous mode [ 574.229301][T10043] syzkaller0: entered allmulticast mode [ 574.247668][T10045] fuse: Unknown parameter 'grou00000000000000000000' [ 574.787378][T10056] serio: Serial port ttyS3 [ 576.373955][T10081] fuse: Unknown parameter 'grou00000000000000000000' [ 576.529335][T10083] syzkaller0: entered promiscuous mode [ 576.545959][T10083] syzkaller0: entered allmulticast mode [ 577.060213][T10088] serio: Serial port ttyS3 [ 578.613333][T10102] fuse: Unknown parameter 'group_i00000000000000000000' [ 580.042233][T10126] serio: Serial port ttyS3 [ 581.097343][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.103721][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.325721][T10131] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1196'. [ 581.448802][T10135] fuse: Unknown parameter 'group_i00000000000000000000' [ 581.724364][ T5814] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 581.973175][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 582.021544][ T5814] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 582.195517][ T5814] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 582.248095][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.375689][ T5814] usb 3-1: Product: syz [ 582.404564][ T5814] usb 3-1: Manufacturer: syz [ 582.415348][ T5814] usb 3-1: SerialNumber: syz [ 583.691276][T10155] serio: Serial port ttyS3 [ 586.665029][ T5814] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 586.760041][ T5814] usb 3-1: USB disconnect, device number 18 [ 589.512237][ T5831] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 589.723692][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 589.747711][ T5831] usb 4-1: config 0 has no interfaces? [ 589.778671][ T5831] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 589.828906][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.951203][T10212] loop2: detected capacity change from 0 to 1024 [ 590.737427][ T5831] usb 4-1: config 0 descriptor?? [ 591.247897][T10212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.277120][ T9782] usb 4-1: USB disconnect, device number 19 [ 591.428384][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.268395][T10241] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1232'. [ 593.494599][T10269] fuse: Unknown parameter 'group_id00000000000000000000' [ 594.603705][ T9782] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 594.831815][ T9782] usb 4-1: Using ep0 maxpacket: 8 [ 594.843415][ T9782] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 594.859877][ T9782] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 594.887654][ T9782] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 594.901473][ T9782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.909892][ T9782] usb 4-1: Product: syz [ 594.914306][ T9782] usb 4-1: Manufacturer: syz [ 594.919824][ T9782] usb 4-1: SerialNumber: syz [ 594.936635][ T9782] usb 4-1: config 0 descriptor?? [ 594.947139][T10281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.958421][ T9782] powermate: probe of 4-1:0.0 failed with error -22 [ 595.379390][T10299] tipc: Enabled bearer , priority 0 [ 595.388873][T10299] syzkaller0: entered promiscuous mode [ 595.395567][T10299] syzkaller0: entered allmulticast mode [ 595.445617][T10299] tipc: Resetting bearer [ 595.468790][T10298] tipc: Resetting bearer [ 595.521533][T10298] tipc: Disabling bearer [ 595.597708][T10302] fuse: Bad value for 'user_id' [ 596.352778][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 597.074124][T10322] tipc: Enabled bearer , priority 0 [ 597.120489][T10321] tipc: Disabling bearer [ 597.549426][ T5831] usb 4-1: USB disconnect, device number 20 [ 597.736675][T10331] tipc: Enabled bearer , priority 0 [ 597.763551][T10331] syzkaller0: entered promiscuous mode [ 597.777731][T10331] syzkaller0: entered allmulticast mode [ 597.826811][T10336] fuse: Bad value for 'user_id' [ 597.835419][T10331] tipc: Resetting bearer [ 597.868555][T10329] tipc: Resetting bearer [ 597.906553][T10329] tipc: Disabling bearer [ 598.070658][T10341] loop2: detected capacity change from 0 to 1024 [ 598.205682][T10341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.941679][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.174418][T10352] tipc: Started in network mode [ 599.186887][T10352] tipc: Node identity 4e066af811c2, cluster identity 4711 [ 599.195600][T10352] tipc: Enabled bearer , priority 0 [ 599.205086][T10354] syzkaller0: entered promiscuous mode [ 599.212197][T10354] syzkaller0: entered allmulticast mode [ 599.247865][T10351] tipc: Disabling bearer [ 599.689565][T10365] fuse: Bad value for 'user_id' [ 600.038953][T10372] loop0: detected capacity change from 0 to 1024 [ 601.058849][T10372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.354487][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.386151][T10377] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1271'. [ 601.624272][T10379] tipc: Enabled bearer , priority 0 [ 601.636648][T10379] syzkaller0: entered promiscuous mode [ 601.642429][T10379] syzkaller0: entered allmulticast mode [ 601.722463][T10379] tipc: Resetting bearer [ 601.745245][T10378] tipc: Resetting bearer [ 601.769251][T10378] tipc: Disabling bearer [ 602.348710][T10387] tipc: Enabling of bearer rejected, failed to enable media [ 603.051009][T10406] fuse: Bad value for 'fd' [ 603.972886][T10411] netlink: 'syz.1.1281': attribute type 12 has an invalid length. [ 606.428816][T10430] tipc: Enabling of bearer rejected, failed to enable media [ 607.093357][T10445] fuse: Bad value for 'fd' [ 608.330259][T10456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1292'. [ 608.522243][T10457] netlink: 'syz.3.1291': attribute type 12 has an invalid length. [ 609.587713][T10467] tipc: Enabling of bearer rejected, failed to enable media [ 610.083623][ T5814] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 610.109842][T10482] fuse: Bad value for 'fd' [ 610.378772][ T5814] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 610.417952][ T5814] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 610.449941][ T5814] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 610.466223][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.479636][T10471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 610.495316][ T5814] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 612.983141][T10505] tipc: Enabling of bearer rejected, failed to enable media [ 613.541278][ T9780] usb 2-1: USB disconnect, device number 20 [ 613.668333][T10515] fuse: Bad value for 'fd' [ 614.483569][T10528] loop1: detected capacity change from 0 to 16 [ 615.253251][T10528] erofs: (device loop1): mounted with root inode @ nid 36. [ 615.263097][ T52] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 615.275866][T10528] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 615.289645][ T28] audit: type=1800 audit(1784385308.808:157): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1311" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 616.924354][ T28] audit: type=1804 audit(1784385310.322:158): pid=10537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1314" name="/newroot/335/file0" dev="fuse" ino=1 res=1 errno=0 [ 616.965811][T10535] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1312'. [ 617.115340][T10548] tipc: Enabling of bearer rejected, failed to enable media [ 617.405791][ T5840] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 617.631764][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 617.656246][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.685308][ T5840] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.725430][ T5840] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 617.757940][ T5840] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 617.784905][ T5840] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.801540][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 617.813141][ T5840] usb 3-1: SerialNumber: syz [ 617.833102][ T5840] hub 3-1:1.0: bad descriptor, ignoring hub [ 617.842664][ T5840] hub: probe of 3-1:1.0 failed with error -5 [ 617.850516][ T5840] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 618.401077][ T5840] usb 3-1: USB disconnect, device number 19 [ 619.654953][T10581] tipc: Enabling of bearer rejected, failed to enable media [ 619.796469][ T28] audit: type=1804 audit(1784385312.972:159): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1325" name="/newroot/309/file0" dev="fuse" ino=1 res=1 errno=0 [ 620.477762][T10598] syzkaller0: entered promiscuous mode [ 620.484554][T10598] syzkaller0: entered allmulticast mode [ 620.496152][T10598] tc action pedit offset 4096 out of bounds [ 620.968118][ T28] audit: type=1804 audit(1784385314.061:160): pid=10614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1335" name="/newroot/343/file0" dev="fuse" ino=1 res=1 errno=0 [ 620.979087][ T5831] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 620.989220][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.097031][T10617] tipc: Enabled bearer , priority 0 [ 621.111570][T10617] syzkaller0: entered promiscuous mode [ 621.117475][T10617] syzkaller0: entered allmulticast mode [ 621.183051][T10617] tipc: Resetting bearer [ 621.205449][T10616] tipc: Resetting bearer [ 621.246948][T10616] tipc: Disabling bearer [ 621.271417][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 621.288847][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.301319][ T5831] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.329648][ T5831] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 621.358052][ T5831] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 621.385004][ T5831] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.402457][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 621.410646][ T5831] usb 3-1: SerialNumber: syz [ 621.440805][ T5831] hub 3-1:1.0: bad descriptor, ignoring hub [ 621.447361][ T5831] hub: probe of 3-1:1.0 failed with error -5 [ 621.454169][ T5831] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 621.971394][T10631] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1339'. [ 622.038209][ T5831] usb 3-1: USB disconnect, device number 20 [ 622.958368][ T28] audit: type=1804 audit(1784385315.889:161): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1345" name="/newroot/313/file0" dev="fuse" ino=1 res=1 errno=0 [ 623.284637][T10661] tipc: Enabled bearer , priority 0 [ 623.317733][T10661] syzkaller0: entered promiscuous mode [ 623.332506][T10661] syzkaller0: entered allmulticast mode [ 623.386180][T10661] tipc: Resetting bearer [ 623.400486][T10658] tipc: Resetting bearer [ 623.434288][T10658] tipc: Disabling bearer [ 624.425722][T10688] loop0: detected capacity change from 0 to 1024 [ 625.242283][T10688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.440515][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.470714][ T5811] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 626.690948][ T5811] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 626.708882][ T5811] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 626.730211][ T5811] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 626.756555][ T5811] usb 4-1: config 220 has no interface number 1 [ 626.767517][ T5811] usb 4-1: config 220 interface 0 has no altsetting 0 [ 626.783832][ T5811] usb 4-1: config 220 interface 76 has no altsetting 0 [ 626.803945][ T5811] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 626.824184][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.835126][ T5811] usb 4-1: Product: syz [ 626.842086][ T5831] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 626.846333][ T5811] usb 4-1: Manufacturer: syz [ 626.871411][ T5811] usb 4-1: SerialNumber: syz [ 627.066419][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 627.108894][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 627.119668][ T5831] usb 3-1: config 12 has an invalid interface number: 183 but max is 1 [ 627.136989][ T5831] usb 3-1: config 12 has an invalid interface number: 229 but max is 1 [ 627.152932][ T5831] usb 3-1: config 12 has no interface number 0 [ 627.164688][ T5831] usb 3-1: config 12 has no interface number 1 [ 627.170968][ T5831] usb 3-1: config 12 interface 183 has no altsetting 0 [ 627.189592][ T5831] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 627.198984][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.207659][ T5831] usb 3-1: Product: syz [ 627.211957][ T5831] usb 3-1: Manufacturer: syz [ 627.216602][ T5831] usb 3-1: SerialNumber: syz [ 627.594459][T10722] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1367'. [ 627.629549][ T5831] usb 3-1: USB disconnect, device number 21 [ 629.545671][ T5811] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 629.568863][ T5811] usb 4-1: No valid video chain found. [ 629.605381][ T5811] usb 4-1: USB disconnect, device number 21 [ 632.818131][T10795] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1390'. [ 633.234102][T10806] serio: Serial port ttyS3 [ 635.439378][ T5811] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 635.439378][ T5831] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 635.634356][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 635.641658][ T5831] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.672335][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.680568][ T5811] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 635.705569][ T5831] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 635.710410][ T5811] usb 1-1: config 0 has no interface number 0 [ 635.728762][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.758373][ T5831] usb 3-1: config 0 descriptor?? [ 635.763012][ T5811] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 635.797133][ T5811] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 635.884826][ T5811] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 635.927383][ T5811] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 635.945663][ T5811] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 635.956619][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.033477][ T5811] usb 1-1: config 0 descriptor?? [ 636.080366][T10819] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 636.187162][T10819] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 636.196913][ T5811] ldusb 1-1:0.55: Interrupt in endpoint not found [ 636.292011][ T5831] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 637.432891][ T7003] usb 3-1: USB disconnect, device number 22 [ 638.339681][ T5831] usb 1-1: USB disconnect, device number 16 [ 638.704060][T10840] serio: Serial port ttyS3 [ 641.048967][T10853] loop3: detected capacity change from 0 to 16 [ 642.785980][T10853] erofs: (device loop3): mounted with root inode @ nid 36. [ 643.657052][ T28] audit: type=1800 audit(1784385334.538:162): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1407" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 643.679537][ T52] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 643.872328][T10863] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1408'. [ 644.578856][T10881] serio: Serial port ttyS3 [ 646.475970][ T28] audit: type=1804 audit(1784385337.603:163): pid=10886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1415" name="bus" dev="ramfs" ino=26449 res=1 errno=0 [ 647.479348][T10892] fuse: Invalid rootmode [ 647.553929][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 647.564029][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.327236][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1424'. [ 650.856911][T10921] fuse: Bad value for 'rootmode' [ 652.532101][ T5840] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 652.741207][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.754459][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.765319][ T5840] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 652.777287][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.792962][ T5840] usb 2-1: config 0 descriptor?? [ 652.921670][T10943] fuse: Bad value for 'rootmode' [ 653.492562][T10941] binder: 10940:10941 ioctl c018620b 0 returned -14 [ 653.507423][ T5840] usb 2-1: string descriptor 0 read error: -22 [ 653.514201][T10951] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1439'. [ 653.950505][ T5840] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #100: -71 [ 653.960693][ T5840] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 653.975370][ T5840] uclogic 0003:256C:006D.0012: failed probing pen v1 parameters: -71 [ 653.986017][ T5840] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 653.993656][ T5840] uclogic: probe of 0003:256C:006D.0012 failed with error -71 [ 654.009016][ T5840] usb 2-1: USB disconnect, device number 21 [ 655.091804][T10969] fuse: Bad value for 'rootmode' [ 655.665618][T10980] syzkaller0: entered promiscuous mode [ 655.712537][T10980] syzkaller0: entered allmulticast mode [ 655.886400][T10977] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1447'. [ 656.230175][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1451'. [ 658.359267][T10999] fuse: Unknown parameter 'use00000000000000000000' [ 659.077934][T11010] input: syz0 as /devices/virtual/input/input23 [ 660.368129][T11026] fuse: Unknown parameter 'use00000000000000000000' [ 660.663185][T11032] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1465'. [ 662.514091][T11052] fuse: Unknown parameter 'use00000000000000000000' [ 662.876587][ T5840] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 663.074419][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 663.081828][ T5840] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 663.090499][ T5840] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 663.101872][ T5840] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 663.113061][ T5840] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 663.126653][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 663.135702][ T5840] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 663.145464][ T5840] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 663.158112][ T5840] usb 1-1: Product: syz [ 663.162350][ T5840] usb 1-1: Manufacturer: syz [ 663.166985][ T5840] usb 1-1: SerialNumber: syz [ 663.175275][ T5840] usb 1-1: config 0 descriptor?? [ 663.191552][ T5840] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 663.207951][ T5840] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 663.411987][ T5840] usb 1-1: USB disconnect, device number 17 [ 663.428516][ T5840] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 663.833692][T11058] fuse: Unknown parameter 'grou00000000000000000000' [ 665.080905][T11077] fuse: Unknown parameter 'user_i00000000000000000000' [ 665.195899][T11081] fuse: Unknown parameter 'group_i00000000000000000000' [ 665.989451][T11095] fuse: Unknown parameter 'grou00000000000000000000' [ 666.891337][T11108] fuse: Unknown parameter 'user_i00000000000000000000' [ 666.964631][T11110] fuse: Unknown parameter 'group_i00000000000000000000' [ 667.566557][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1503'. [ 667.615223][T11128] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1503'. [ 667.625101][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1503'. [ 668.093553][T11134] fuse: Unknown parameter 'grou00000000000000000000' [ 668.161552][T11136] fuse: Unknown parameter 'group_id00000000000000000000' [ 668.606031][T11142] lo: Caught tx_queue_len zero misconfig [ 669.503315][T11158] loop3: detected capacity change from 0 to 16 [ 669.782765][T11158] erofs: (device loop3): mounted with root inode @ nid 36. [ 669.808906][ T52] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 669.829560][T11158] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 669.967238][ T28] audit: type=1800 audit(1784385359.178:164): pid=11158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1513" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 671.266014][T11161] fuse: Unknown parameter 'group_id00000000000000000000' [ 671.938139][T11178] fuse: Unknown parameter 'group_i00000000000000000000' [ 672.411528][T11189] loop3: detected capacity change from 0 to 16 [ 672.439991][T11189] erofs: (device loop3): mounted with root inode @ nid 36. [ 672.474620][ T52] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 672.489279][T11189] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 672.525444][ T28] audit: type=1800 audit(1784385361.633:165): pid=11189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1524" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 674.624339][ T9782] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 674.867469][ T9782] usb 2-1: Using ep0 maxpacket: 8 [ 674.952752][ T9782] usb 2-1: config 0 has no interfaces? [ 674.964945][ T9782] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 674.995966][ T9782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.030280][ T9782] usb 2-1: config 0 descriptor?? [ 675.263319][ T9780] usb 2-1: USB disconnect, device number 22 [ 675.987433][T11214] syzkaller0: entered promiscuous mode [ 675.993128][T11214] syzkaller0: entered allmulticast mode [ 676.070623][T11216] fuse: Unknown parameter 'group_i00000000000000000000' [ 677.586369][T11228] libceph: resolve '0..' (ret=-3): failed [ 679.132118][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'. [ 679.151559][T11242] vlan2: entered allmulticast mode [ 679.157832][T11242] bridge_slave_0: entered allmulticast mode [ 679.390185][T11245] syzkaller0: entered promiscuous mode [ 679.396188][T11245] syzkaller0: entered allmulticast mode [ 679.672538][T11250] fuse: Unknown parameter 'group_i00000000000000000000' [ 679.958455][ T787] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 680.164274][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 680.182005][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 680.202956][ T787] usb 4-1: config 12 has an invalid interface number: 183 but max is 1 [ 680.215529][ T787] usb 4-1: config 12 has an invalid interface number: 229 but max is 1 [ 680.224776][ T787] usb 4-1: config 12 has no interface number 0 [ 680.237220][ T787] usb 4-1: config 12 has no interface number 1 [ 680.248181][ T787] usb 4-1: config 12 interface 183 has no altsetting 0 [ 680.259971][ T787] usb 4-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 680.269956][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.281803][ T787] usb 4-1: Product: syz [ 680.290307][ T787] usb 4-1: Manufacturer: syz [ 680.296587][ T787] usb 4-1: SerialNumber: syz [ 680.684365][ T787] usb 4-1: USB disconnect, device number 22 [ 680.724339][ T28] audit: type=1800 audit(1784385369.204:166): pid=11266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1552" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 681.316575][T11273] syzkaller0: entered promiscuous mode [ 681.322527][T11273] syzkaller0: entered allmulticast mode [ 682.423573][T11289] fuse: Unknown parameter 'group_id00000000000000000000' [ 683.023984][ T787] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 683.219014][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 683.229303][ T787] usb 1-1: config 0 has no interfaces? [ 683.234993][ T787] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 683.244386][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.255291][ T787] usb 1-1: config 0 descriptor?? [ 683.338746][T11300] syzkaller0: entered promiscuous mode [ 683.344273][T11300] syzkaller0: entered allmulticast mode [ 683.504610][ T787] usb 1-1: USB disconnect, device number 18 [ 683.684421][T11304] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1565'. [ 685.571414][T11314] fuse: Bad value for 'fd' [ 686.107511][T11319] syzkaller0: entered promiscuous mode [ 686.113335][T11319] syzkaller0: entered allmulticast mode [ 686.296439][T11323] fuse: Unknown parameter 'group_id00000000000000000000' [ 686.417636][T11324] syzkaller1: entered promiscuous mode [ 686.423403][T11324] syzkaller1: entered allmulticast mode [ 686.929927][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 686.938803][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 686.947355][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 686.955777][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 686.964151][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 686.972562][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 686.980964][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 686.989358][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 686.997698][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 687.006072][T11332] tc action pedit unable to extract header offset for header type (0x5) [ 687.014498][T11332] 0: reclassify loop, rule prio 0, protocol 800 [ 687.170229][T11334] fuse: Bad value for 'fd' [ 687.204995][ T5811] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 687.266591][T11338] fuse: Bad value for 'fd' [ 687.375496][T11341] syzkaller0: entered promiscuous mode [ 687.384719][T11341] syzkaller0: entered allmulticast mode [ 687.408492][ T5811] usb 4-1: device descriptor read/64, error -71 [ 687.714272][ T5811] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 687.855378][T11353] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1587'. [ 687.880594][ T5811] usb 4-1: device descriptor read/64, error -71 [ 687.987343][T11351] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1585'. [ 688.018187][ T5811] usb usb4-port1: attempt power cycle [ 688.031444][T11357] fuse: Unknown parameter 'group_id00000000000000000000' [ 688.441337][T11359] fuse: Bad value for 'fd' [ 688.461474][ T5811] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 688.509280][ T5811] usb 4-1: device descriptor read/8, error -71 [ 688.570610][T11361] fuse: Unknown parameter '0x0000000000000003' [ 688.818986][ T5811] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 688.854214][ T5811] usb 4-1: device descriptor read/8, error -71 [ 688.891563][T11366] syzkaller0: entered promiscuous mode [ 688.905893][T11366] syzkaller0: entered allmulticast mode [ 689.046793][ T5811] usb usb4-port1: unable to enumerate USB device [ 690.016412][T11378] fuse: Bad value for 'fd' [ 690.426151][T11386] fuse: Bad value for 'user_id' [ 690.467294][ T5811] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 690.497441][T11388] syzkaller0: entered promiscuous mode [ 690.503251][T11388] syzkaller0: entered allmulticast mode [ 690.672246][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 690.681670][ T5811] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.697319][ T5811] usb 4-1: config 0 interface 0 has no altsetting 0 [ 690.704169][ T5811] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 690.713533][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.728188][ T5811] usb 4-1: config 0 descriptor?? [ 690.992756][T11395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1605'. [ 691.004598][T11395] ------------[ cut here ]------------ [ 691.010292][T11395] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 691.023713][T11395] WARNING: CPU: 0 PID: 11395 at net/sched/cls_u32.c:855 u32_change+0x1ce8/0x2690 [ 691.033045][T11395] Modules linked in: [ 691.037036][T11395] CPU: 0 PID: 11395 Comm: syz.1.1605 Not tainted syzkaller #0 [ 691.044699][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.055098][T11395] RIP: 0010:u32_change+0x1ce8/0x2690 [ 691.060722][T11395] Code: f8 eb 59 e8 aa 7c d2 f8 c6 05 89 8a c2 05 01 b9 10 00 00 00 48 c7 c7 60 06 c8 8b 4c 89 fe 48 c7 c2 e0 06 c8 8b e8 88 55 9c f8 <0f> 0b e9 1f f0 ff ff e8 7c 7c d2 f8 eb 24 e8 75 7c d2 f8 c6 05 16 [ 691.080681][T11395] RSP: 0018:ffffc900195a6d60 EFLAGS: 00010246 [ 691.087120][T11395] RAX: b5da3ccae6b33900 RBX: ffff8880254d8000 RCX: 0000000000080000 [ 691.095233][T11395] RDX: ffffc9000ce4a000 RSI: 0000000000005d6d RDI: 0000000000005d6e [ 691.103275][T11395] RBP: ffffc900195a6ef8 R08: ffffc900195a6967 R09: 1ffff920032b4d2c [ 691.111642][T11395] R10: dffffc0000000000 R11: fffff520032b4d2d R12: 1ffff920032b4dbc [ 691.119757][T11395] R13: ffff88805d6b08e8 R14: ffff88802c1b8000 R15: 0000000000000020 [ 691.127920][T11395] FS: 00007f89097156c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 691.137027][T11395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.143760][T11395] CR2: 00002000000012c0 CR3: 000000002d520000 CR4: 00000000003506f0 [ 691.151853][T11395] Call Trace: [ 691.155281][T11395] [ 691.158407][T11395] ? u32_get+0x370/0x370 [ 691.162935][T11395] tc_new_tfilter+0x1109/0x1820 [ 691.167904][T11395] ? tcf_proto_signal_destroying+0x240/0x240 [ 691.174067][T11395] ? rcu_read_unlock+0x8c/0xa0 [ 691.179028][T11395] ? tcf_proto_signal_destroying+0x240/0x240 [ 691.185149][T11395] ? tcf_proto_signal_destroying+0x240/0x240 [ 691.191271][T11395] rtnetlink_rcv_msg+0x892/0xf90 [ 691.196277][T11395] ? rtnetlink_rcv_msg+0x220/0xf90 [ 691.201474][T11395] ? rtnetlink_bind+0x80/0x80 [ 691.206437][T11395] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 691.212555][T11395] ? lock_chain_count+0x20/0x20 [ 691.217617][T11395] ? __local_bh_enable_ip+0x13a/0x1c0 [ 691.223178][T11395] ? lockdep_hardirqs_on+0x98/0x150 [ 691.228567][T11395] ? __local_bh_enable_ip+0x13a/0x1c0 [ 691.233976][T11395] ? _local_bh_enable+0xa0/0xa0 [ 691.239025][T11395] ? __dev_queue_xmit+0x275/0x3630 [ 691.244293][T11395] ? __dev_queue_xmit+0x1bc2/0x3630 [ 691.249646][T11395] ? __dev_queue_xmit+0x275/0x3630 [ 691.254871][T11395] ? ref_tracker_free+0x686/0x830 [ 691.260162][T11395] netlink_rcv_skb+0x235/0x4c0 [ 691.265126][T11395] ? rtnetlink_bind+0x80/0x80 [ 691.269982][T11395] ? netlink_ack+0x1160/0x1160 [ 691.274840][T11395] ? __lock_acquire+0x7d80/0x7d80 [ 691.277543][ T5811] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 691.280019][T11395] ? netlink_deliver_tap+0x2e/0x1b0 [ 691.296785][T11395] netlink_unicast+0x7b1/0x930 [ 691.301724][T11395] netlink_sendmsg+0x8d0/0xbf0 [ 691.306571][T11395] ? netlink_getsockopt+0x590/0x590 [ 691.311969][T11395] ? apparmor_socket_sendmsg+0x8e/0x330 [ 691.317628][T11395] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 691.323081][T11395] ? security_socket_sendmsg+0x80/0xa0 [ 691.328657][T11395] ? netlink_getsockopt+0x590/0x590 [ 691.333993][T11395] ____sys_sendmsg+0x61b/0x980 [ 691.338953][T11395] ? __asan_memset+0x22/0x40 [ 691.343731][T11395] ? __sys_sendmsg_sock+0x30/0x30 [ 691.348827][T11395] ? __import_iovec+0x5f2/0x850 [ 691.353841][T11395] ? import_iovec+0x73/0xa0 [ 691.358418][T11395] ___sys_sendmsg+0x2a6/0x360 [ 691.363178][T11395] ? __sys_sendmsg+0x2b0/0x2b0 [ 691.368202][T11395] __sys_sendmmsg+0x2ca/0x510 [ 691.372981][T11395] ? __ia32_sys_sendmsg+0x90/0x90 [ 691.378150][T11395] ? __ia32_sys_get_robust_list+0x110/0x110 [ 691.384189][T11395] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 691.390450][T11395] ? lock_chain_count+0x20/0x20 [ 691.395369][T11395] __x64_sys_sendmmsg+0xa0/0xb0 [ 691.400394][T11395] do_syscall_64+0x55/0xb0 [ 691.404916][T11395] ? clear_bhb_loop+0x40/0x90 [ 691.409782][T11395] ? clear_bhb_loop+0x40/0x90 [ 691.414518][T11395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.420576][T11395] RIP: 0033:0x7f890879de99 [ 691.425081][T11395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.444804][T11395] RSP: 002b:00007f8909715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 691.453319][T11395] RAX: ffffffffffffffda RBX: 00007f8908a25fa0 RCX: 00007f890879de99 [ 691.461362][T11395] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 691.469457][T11395] RBP: 00007f8908833eaf R08: 0000000000000000 R09: 0000000000000000 [ 691.477526][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.485701][T11395] R13: 00007f8908a26038 R14: 00007f8908a25fa0 R15: 00007ffe25ce8c38 [ 691.493767][T11395] [ 691.496875][T11395] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 691.504196][T11395] CPU: 0 PID: 11395 Comm: syz.1.1605 Not tainted syzkaller #0 [ 691.512142][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.522259][T11395] Call Trace: [ 691.525586][T11395] [ 691.528567][T11395] dump_stack_lvl+0x18c/0x250 [ 691.533313][T11395] ? show_regs_print_info+0x20/0x20 [ 691.538617][T11395] ? load_image+0x420/0x420 [ 691.543242][T11395] panic+0x2ca/0x720 [ 691.547203][T11395] ? bpf_jit_dump+0xd0/0xd0 [ 691.551780][T11395] __warn+0x2e0/0x470 [ 691.555821][T11395] ? u32_change+0x1ce8/0x2690 [ 691.560562][T11395] ? u32_change+0x1ce8/0x2690 [ 691.565301][T11395] report_bug+0x2be/0x4f0 [ 691.569709][T11395] ? u32_change+0x1ce8/0x2690 [ 691.574449][T11395] ? u32_change+0x1ce8/0x2690 [ 691.579178][T11395] ? u32_change+0x1cea/0x2690 [ 691.583908][T11395] handle_bug+0xcf/0x120 [ 691.588197][T11395] exc_invalid_op+0x1a/0x50 [ 691.592745][T11395] asm_exc_invalid_op+0x1a/0x20 [ 691.597654][T11395] RIP: 0010:u32_change+0x1ce8/0x2690 [ 691.602994][T11395] Code: f8 eb 59 e8 aa 7c d2 f8 c6 05 89 8a c2 05 01 b9 10 00 00 00 48 c7 c7 60 06 c8 8b 4c 89 fe 48 c7 c2 e0 06 c8 8b e8 88 55 9c f8 <0f> 0b e9 1f f0 ff ff e8 7c 7c d2 f8 eb 24 e8 75 7c d2 f8 c6 05 16 [ 691.622653][T11395] RSP: 0018:ffffc900195a6d60 EFLAGS: 00010246 [ 691.628752][T11395] RAX: b5da3ccae6b33900 RBX: ffff8880254d8000 RCX: 0000000000080000 [ 691.636850][T11395] RDX: ffffc9000ce4a000 RSI: 0000000000005d6d RDI: 0000000000005d6e [ 691.644856][T11395] RBP: ffffc900195a6ef8 R08: ffffc900195a6967 R09: 1ffff920032b4d2c [ 691.652858][T11395] R10: dffffc0000000000 R11: fffff520032b4d2d R12: 1ffff920032b4dbc [ 691.660893][T11395] R13: ffff88805d6b08e8 R14: ffff88802c1b8000 R15: 0000000000000020 [ 691.669366][T11395] ? u32_get+0x370/0x370 [ 691.673672][T11395] tc_new_tfilter+0x1109/0x1820 [ 691.678601][T11395] ? tcf_proto_signal_destroying+0x240/0x240 [ 691.684645][T11395] ? rcu_read_unlock+0x8c/0xa0 [ 691.689663][T11395] ? tcf_proto_signal_destroying+0x240/0x240 [ 691.695805][T11395] ? tcf_proto_signal_destroying+0x240/0x240 [ 691.701852][T11395] rtnetlink_rcv_msg+0x892/0xf90 [ 691.706854][T11395] ? rtnetlink_rcv_msg+0x220/0xf90 [ 691.712034][T11395] ? rtnetlink_bind+0x80/0x80 [ 691.716773][T11395] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 691.722811][T11395] ? lock_chain_count+0x20/0x20 [ 691.727709][T11395] ? __local_bh_enable_ip+0x13a/0x1c0 [ 691.733121][T11395] ? lockdep_hardirqs_on+0x98/0x150 [ 691.738380][T11395] ? __local_bh_enable_ip+0x13a/0x1c0 [ 691.743799][T11395] ? _local_bh_enable+0xa0/0xa0 [ 691.748704][T11395] ? __dev_queue_xmit+0x275/0x3630 [ 691.753970][T11395] ? __dev_queue_xmit+0x1bc2/0x3630 [ 691.759224][T11395] ? __dev_queue_xmit+0x275/0x3630 [ 691.764479][T11395] ? ref_tracker_free+0x686/0x830 [ 691.769561][T11395] netlink_rcv_skb+0x235/0x4c0 [ 691.774555][T11395] ? rtnetlink_bind+0x80/0x80 [ 691.779273][T11395] ? netlink_ack+0x1160/0x1160 [ 691.784090][T11395] ? __lock_acquire+0x7d80/0x7d80 [ 691.789155][T11395] ? netlink_deliver_tap+0x2e/0x1b0 [ 691.794406][T11395] netlink_unicast+0x7b1/0x930 [ 691.799238][T11395] netlink_sendmsg+0x8d0/0xbf0 [ 691.804073][T11395] ? netlink_getsockopt+0x590/0x590 [ 691.809329][T11395] ? apparmor_socket_sendmsg+0x8e/0x330 [ 691.814914][T11395] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 691.820278][T11395] ? security_socket_sendmsg+0x80/0xa0 [ 691.825795][T11395] ? netlink_getsockopt+0x590/0x590 [ 691.831036][T11395] ____sys_sendmsg+0x61b/0x980 [ 691.835846][T11395] ? __asan_memset+0x22/0x40 [ 691.840486][T11395] ? __sys_sendmsg_sock+0x30/0x30 [ 691.845545][T11395] ? __import_iovec+0x5f2/0x850 [ 691.850444][T11395] ? import_iovec+0x73/0xa0 [ 691.854994][T11395] ___sys_sendmsg+0x2a6/0x360 [ 691.859726][T11395] ? __sys_sendmsg+0x2b0/0x2b0 [ 691.864568][T11395] __sys_sendmmsg+0x2ca/0x510 [ 691.869303][T11395] ? __ia32_sys_sendmsg+0x90/0x90 [ 691.874385][T11395] ? __ia32_sys_get_robust_list+0x110/0x110 [ 691.880323][T11395] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 691.886337][T11395] ? lock_chain_count+0x20/0x20 [ 691.891232][T11395] __x64_sys_sendmmsg+0xa0/0xb0 [ 691.896134][T11395] do_syscall_64+0x55/0xb0 [ 691.900600][T11395] ? clear_bhb_loop+0x40/0x90 [ 691.905311][T11395] ? clear_bhb_loop+0x40/0x90 [ 691.910023][T11395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.915953][T11395] RIP: 0033:0x7f890879de99 [ 691.920423][T11395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.940091][T11395] RSP: 002b:00007f8909715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 691.948630][T11395] RAX: ffffffffffffffda RBX: 00007f8908a25fa0 RCX: 00007f890879de99 [ 691.956667][T11395] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 691.964676][T11395] RBP: 00007f8908833eaf R08: 0000000000000000 R09: 0000000000000000 [ 691.972675][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.980673][T11395] R13: 00007f8908a26038 R14: 00007f8908a25fa0 R15: 00007ffe25ce8c38 [ 691.988785][T11395] [ 691.992409][T11395] Kernel Offset: disabled [ 691.996754][T11395] Rebooting in 86400 seconds..