last executing test programs: 6m18.926954487s ago: executing program 1 (id=900): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340), 0x3b, 0x40800, &(0x7f00000002c0)={0x11, 0x19, r2, 0x1, 0xea, 0x6, @random="4189f1ee00"}, 0x14) 6m18.733923662s ago: executing program 1 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m18.472503712s ago: executing program 1 (id=905): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) listen(0xffffffffffffffff, 0xffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6m18.237818119s ago: executing program 1 (id=911): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 6m18.044561382s ago: executing program 1 (id=912): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 6m16.601301197s ago: executing program 1 (id=928): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="c51d37314d6bc8ace323d9168840cbbc3b8d", 0x12, 0x14000000, &(0x7f0000000140)={0x11, 0xc, r1, 0x1, 0xff, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0x9e3d206e4ff0beee}, {0xd, 0x6}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x48044) 6m16.151647634s ago: executing program 32 (id=928): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="c51d37314d6bc8ace323d9168840cbbc3b8d", 0x12, 0x14000000, &(0x7f0000000140)={0x11, 0xc, r1, 0x1, 0xff, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0x9e3d206e4ff0beee}, {0xd, 0x6}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x48044) 6m8.429202494s ago: executing program 2 (id=1005): r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x20000005}) 6m7.307959225s ago: executing program 2 (id=1014): unshare(0x22020400) open(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x315b, &(0x7f00000002c0)={0x0, 0x70a1, 0x1040, 0x2, 0x21}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000000)) r1 = eventfd(0xfffffffd) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140)=r1, 0x1) 6m6.825388054s ago: executing program 2 (id=1018): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f0000000340)="00f762d830df", 0x6) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)='\x00\x00', 0x2}], 0x1, 0x9) 6m6.460085524s ago: executing program 2 (id=1021): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200"], 0x7c}}, 0x0) 6m6.25995091s ago: executing program 2 (id=1025): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) syz_io_uring_setup(0x19f2, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6m5.437121867s ago: executing program 2 (id=1033): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5m50.33517896s ago: executing program 33 (id=1033): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5m25.549898736s ago: executing program 4 (id=1409): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x5, @remote}, 0x10) 5m25.244761464s ago: executing program 4 (id=1412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000001040)={0x1, 0xffffffffffffffff, 0x1}) 5m24.598085687s ago: executing program 4 (id=1416): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) 5m24.371990566s ago: executing program 4 (id=1418): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffffffb, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aa9eb7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae6d4d61d8fc269652835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f962b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9f6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def2a2949538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa403de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786b7ef0e1dfd3cb1cc00efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051968af1f8fa60350865328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02c37b4cc877a1d5f4023083d5b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e113a7e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b94fc14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7ae164cc20de5b23146baa9786111", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m24.021065599s ago: executing program 4 (id=1423): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 5m23.531401911s ago: executing program 4 (id=1427): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 5m8.285545082s ago: executing program 34 (id=1427): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 3m38.648868276s ago: executing program 6 (id=2481): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 3m38.319978253s ago: executing program 6 (id=2487): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x4044004}}], 0x1, 0x200090d4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x78) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 3m38.021056291s ago: executing program 6 (id=2491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01f10000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3m37.333107911s ago: executing program 6 (id=2498): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 3m36.894818538s ago: executing program 6 (id=2502): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000500)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/82, 0x52}], 0x2}, 0x0) 3m35.585416991s ago: executing program 6 (id=2514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1ff, @loopback, 0x6}, 0x1c) 3m34.922204583s ago: executing program 35 (id=2514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1ff, @loopback, 0x6}, 0x1c) 1m17.575671769s ago: executing program 8 (id=4142): r0 = fanotify_init(0x20, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) fanotify_mark(r0, 0x441, 0x1002, r3, 0x0) r4 = dup(r1) fanotify_mark(r0, 0x201, 0x20, r4, 0x0) 1m17.215353157s ago: executing program 8 (id=4148): r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000002040)=""/49, 0x31) getdents64(r2, 0xfffffffffffffffe, 0x29) 1m16.683557365s ago: executing program 8 (id=4155): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe4d, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f1", 0x1, 0x508d4, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) 1m16.597091491s ago: executing program 8 (id=4157): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000780)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m16.363254828s ago: executing program 8 (id=4160): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) 1m14.243706542s ago: executing program 8 (id=4181): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af96e4b39fe, 0x0) 1m13.727912129s ago: executing program 36 (id=4181): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af96e4b39fe, 0x0) 5.081391629s ago: executing program 7 (id=4976): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0xd, 0x0, 0x100002001, 0x2, 0x3, 0xdfb, 0xdd, 0x38, 0x345, 0x8, 0x1, 0x20, 0x48, 0x4, 0x9}}, 0x38) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.890942166s ago: executing program 9 (id=4979): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x1) connect$unix(r1, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001380)={0x8, {"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", 0xfffffffffffffe05}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x1f) 4.785367806s ago: executing program 7 (id=4980): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 4.579279754s ago: executing program 9 (id=4983): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0xfd9b}, 0x1, 0x0, 0x0, 0x400088d4}, 0x60a30c9b14323f1f) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) connect$unix(r1, &(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 4.465174683s ago: executing program 7 (id=4985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x8242, 0x0, 0x1, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.251904173s ago: executing program 9 (id=4987): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000300)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x0, {0x2, 0x4e22, @multicast1}, 'syz_tun\x00'}) 4.070578207s ago: executing program 7 (id=4990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x5}}, 0x20) 3.783324378s ago: executing program 9 (id=4995): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="6046bcac7ead75b79a775a498827ca82717eaf2f40827015aa936726371a1f8259cbe4f0a9063097ea65b9cab7bfe2b309214596e1e5b6e0f29044411d1e17912370b7070a"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 3.001144418s ago: executing program 7 (id=5003): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/1, 0xb}], 0x1}, 0x11001}, {{0x0, 0x0, 0x0}}], 0x56, 0x0, 0x0) 2.901817884s ago: executing program 5 (id=5006): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x24009001}, 0x8000) 2.566826631s ago: executing program 5 (id=5010): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xfff1, 0xfff3}, {0x9, 0x8}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) close_range(r0, 0xffffffffffffffff, 0x0) 2.458976143s ago: executing program 7 (id=5011): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) 2.412544791s ago: executing program 9 (id=5012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x0) 2.006573523s ago: executing program 5 (id=5018): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000210001002fbf5000fbdbdf25021400dd00000001"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 1.725101531s ago: executing program 5 (id=5022): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x8, 0x0, r1, 0x0, 0x0, 0x829}]) 1.477505191s ago: executing program 9 (id=5025): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd2871000000000000010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x4c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.304342036s ago: executing program 5 (id=5028): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 912.91316ms ago: executing program 0 (id=5034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xfffffffffffffff2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 806.79326ms ago: executing program 0 (id=5035): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002500)=[{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c80)='v', 0x1}], 0x1, 0x0, 0x0, 0x20040054}], 0x1, 0x8800) 722.690644ms ago: executing program 0 (id=5036): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) unshare(0x400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 636.635074ms ago: executing program 3 (id=5037): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r2 = epoll_create(0xaf2) epoll_pwait2(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000580)={0xe000200f}) 498.367178ms ago: executing program 0 (id=5038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x800, 0xa, {0x0, 0x2710}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "000200"}, 0x1, 0x1, {}, 0x1, 0x0, r0}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001900010027bd7000fbdbdf251d010300150003000100000003070000921aba38cc5819d207000000150001000000004004030000feaac67ad605f40404000000", @ANYRES32], 0x184}, 0x1, 0x0, 0x0, 0x20000920}, 0x24000001) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 488.190152ms ago: executing program 3 (id=5039): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') fanotify_mark(r1, 0x1, 0x10001043, r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 200.590171ms ago: executing program 3 (id=5040): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) 200.348724ms ago: executing program 0 (id=5041): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f00005dd000/0x1000)=nil, 0x1000}) 164.144821ms ago: executing program 3 (id=5042): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 119.394569ms ago: executing program 5 (id=5043): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x805) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x8004) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 36.625091ms ago: executing program 3 (id=5044): r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0x3a4d, 0x100, 0x43, 0x10000000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.803708ms ago: executing program 0 (id=5045): close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x6) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000080)="00012c61") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x40, 0x6, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000001a40)) read$char_usb(r1, 0x0, 0x0) 0s ago: executing program 3 (id=5046): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x27, 0x1c1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x3}, @register_looper], 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) kernel console output (not intermixed with test programs): egistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.101681][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 243.263744][ T4263] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.529063][ T5608] Bluetooth: hci5: command tx timeout [ 244.060996][ T8025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.240405][ T8025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.363549][ T8025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.650807][ T8025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.694497][ T8025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.973182][ T8025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.608355][ T5608] Bluetooth: hci5: command tx timeout [ 245.704301][ T8025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 245.793926][ T8025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.747604][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 248.131274][ T4263] bridge_slave_1: left allmulticast mode [ 248.131313][ T4263] bridge_slave_1: left promiscuous mode [ 248.131643][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.266098][ T4263] bridge_slave_0: left allmulticast mode [ 248.266137][ T4263] bridge_slave_0: left promiscuous mode [ 248.266397][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.038948][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.125713][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.161943][ T4263] bond0 (unregistering): Released all slaves [ 250.605134][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.605273][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.605500][ T8615] bridge_slave_0: entered allmulticast mode [ 250.613397][ T8615] bridge_slave_0: entered promiscuous mode [ 250.771352][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.773129][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.773378][ T8615] bridge_slave_1: entered allmulticast mode [ 250.811686][ T8615] bridge_slave_1: entered promiscuous mode [ 251.011558][ T8615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.031190][ T8615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.611942][ T821] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 251.718010][ T8615] team0: Port device team_slave_0 added [ 251.816058][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 251.834072][ T821] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 251.834108][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.834130][ T821] usb 1-1: Product: syz [ 251.834144][ T821] usb 1-1: Manufacturer: syz [ 251.834159][ T821] usb 1-1: SerialNumber: syz [ 251.891835][ T821] usb 1-1: config 0 descriptor?? [ 252.056733][ T8615] team0: Port device team_slave_1 added [ 252.323142][ T821] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 252.384897][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.386132][ T821] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 252.386196][ T821] usb 1-1: media controller created [ 252.457510][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.650576][ T821] zl10353_read_register: readreg error (reg=127, ret==0) [ 252.650641][ T821] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 252.650655][ T821] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 252.704140][ T821] usb 1-1: USB disconnect, device number 15 [ 253.012446][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.012465][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.012494][ T8615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.084394][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.084412][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.084438][ T8615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.141628][ T821] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 253.353729][ T8025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.375746][ T4263] hsr_slave_0: left promiscuous mode [ 254.409837][ T4263] hsr_slave_1: left promiscuous mode [ 254.411102][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.411128][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.469223][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.469253][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.987436][ T4263] veth1_macvtap: left promiscuous mode [ 255.005216][ T4263] veth0_macvtap: left promiscuous mode [ 255.095223][ T4263] veth1_vlan: left promiscuous mode [ 255.095427][ T4263] veth0_vlan: left promiscuous mode [ 256.177888][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.177967][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.553153][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 257.664499][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 258.201898][ T8615] hsr_slave_0: entered promiscuous mode [ 258.206218][ T8615] hsr_slave_1: entered promiscuous mode [ 258.210043][ T8615] debugfs: 'hsr0' already exists in 'hsr' [ 258.210069][ T8615] Cannot create hsr debugfs directory [ 258.215687][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 258.742234][ T8025] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.947029][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.957439][ T4255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.199896][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.200049][ T4255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.270685][ T9162] binder: 9160:9162 ioctl c0306201 200000000040 returned -22 [ 262.299741][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 262.340422][ T8615] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 262.435171][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.451031][ T8615] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 262.736198][ T36] kernel read not supported for file /rfkill (pid: 36 comm: kworker/1:1) [ 262.893078][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.991355][ T8615] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 263.065862][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.094219][ T8615] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 263.143383][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.626316][ T8025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.822092][ T8615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.003534][ T8615] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.049969][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.050208][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.095327][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.107960][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.310310][ T8025] veth0_vlan: entered promiscuous mode [ 265.350859][ T8025] veth1_vlan: entered promiscuous mode [ 265.601295][ T8025] veth0_macvtap: entered promiscuous mode [ 265.650448][ T8025] veth1_macvtap: entered promiscuous mode [ 265.750048][ T8025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.855616][ T8025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.015733][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 266.069494][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.108461][ T1051] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.111493][ T1051] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.139366][ T1051] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.008782][ T9301] loop8: detected capacity change from 0 to 8 [ 267.129880][ T9301] Dev loop8: unable to read RDB block 8 [ 267.129969][ T9301] loop8: unable to read partition table [ 267.130215][ T9301] loop8: partition table beyond EOD, truncated [ 267.130253][ T9301] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 267.440097][ T8615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.446930][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.446952][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.742265][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.742290][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.622112][ T8615] veth0_vlan: entered promiscuous mode [ 268.639647][ T8615] veth1_vlan: entered promiscuous mode [ 268.874128][ T8615] veth0_macvtap: entered promiscuous mode [ 269.057118][ T8615] veth1_macvtap: entered promiscuous mode [ 269.092412][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 269.202882][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.321887][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.365055][ T2940] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.366568][ T2940] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.366615][ T2940] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.366655][ T2940] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.502310][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.502332][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.729824][ T1009] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 270.788672][ T5718] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.869426][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.869450][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.938033][ T1009] usb 1-1: Using ep0 maxpacket: 8 [ 270.946377][ T1009] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 270.946434][ T1009] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 270.946451][ T1009] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.946466][ T1009] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 270.946482][ T1009] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 270.946496][ T1009] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.946522][ T1009] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.946537][ T1009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.052708][ T5718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.052739][ T5718] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.085147][ T5718] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.085213][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.085226][ T5718] usb 6-1: SerialNumber: syz [ 271.246895][ T1009] usb 1-1: usb_control_msg returned -32 [ 271.246954][ T1009] usbtmc 1-1:16.0: can't read capabilities [ 271.489845][ T5718] usb 6-1: 0:2 : does not exist [ 271.689941][ T9368] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71 [ 273.164541][ T5718] usb 6-1: USB disconnect, device number 2 [ 273.616147][ T5725] usb 1-1: USB disconnect, device number 16 [ 275.500345][ T5718] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 275.669635][ T5718] usb 7-1: Using ep0 maxpacket: 16 [ 275.678084][ T5718] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 275.678116][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.678135][ T5718] usb 7-1: Product: syz [ 275.678149][ T5718] usb 7-1: Manufacturer: syz [ 275.678163][ T5718] usb 7-1: SerialNumber: syz [ 275.719536][ T5718] usb 7-1: config 0 descriptor?? [ 276.003975][ T9476] netlink: 'syz.5.1506': attribute type 83 has an invalid length. [ 276.184477][ T5718] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 276.284720][ T5718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.298345][ T5718] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 276.298407][ T5718] usb 7-1: media controller created [ 276.453340][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.688406][ T5718] zl10353_read_register: readreg error (reg=127, ret==0) [ 276.688466][ T5718] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 276.688480][ T5718] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 276.701726][ T5718] usb 7-1: USB disconnect, device number 2 [ 276.978929][ T5718] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 279.745898][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.814366][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.816419][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.827303][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.829786][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.213603][ T9599] loop8: detected capacity change from 0 to 8 [ 280.249306][ T9599] Dev loop8: unable to read RDB block 8 [ 280.249343][ T9599] loop8: unable to read partition table [ 280.250247][ T9599] loop8: partition table beyond EOD, truncated [ 280.250263][ T9599] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 280.337889][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 280.545150][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.545190][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.545240][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.545266][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.848221][ T9] usb 1-1: usb_control_msg returned -32 [ 280.848276][ T9] usbtmc 1-1:16.0: can't read capabilities [ 280.932316][ T9618] trusted_key: syz.6.1560 sent an empty control message without MSG_MORE. [ 281.931127][ T59] Bluetooth: hci3: command tx timeout [ 282.479190][ T9653] pim6reg: entered allmulticast mode [ 282.560211][ T9653] pim6reg: left allmulticast mode [ 283.296305][ T5718] usb 1-1: USB disconnect, device number 17 [ 284.007970][ T59] Bluetooth: hci3: command tx timeout [ 284.889979][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.890134][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.890377][ T9572] bridge_slave_0: entered allmulticast mode [ 284.901177][ T9572] bridge_slave_0: entered promiscuous mode [ 284.927460][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.929169][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.929404][ T9572] bridge_slave_1: entered allmulticast mode [ 284.944684][ T9572] bridge_slave_1: entered promiscuous mode [ 285.137885][ T5845] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 285.148287][ T9572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.170744][ T9572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.307006][ T5845] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 285.307042][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.307064][ T5845] usb 7-1: Product: syz [ 285.307080][ T5845] usb 7-1: Manufacturer: syz [ 285.307095][ T5845] usb 7-1: SerialNumber: syz [ 285.639781][ T9572] team0: Port device team_slave_0 added [ 285.703071][ T9572] team0: Port device team_slave_1 added [ 286.035441][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.035461][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.035488][ T9572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.097875][ T59] Bluetooth: hci3: command tx timeout [ 286.103375][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.103396][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.103425][ T9572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.317461][ T5845] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 286.317529][ T5845] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 286.372248][ T5845] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 286.443959][ T5845] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 286.520381][ T5845] usb 7-1: USB disconnect, device number 3 [ 286.707823][ T36] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 286.851050][ T9572] hsr_slave_0: entered promiscuous mode [ 286.879827][ T9572] hsr_slave_1: entered promiscuous mode [ 286.880912][ T9572] debugfs: 'hsr0' already exists in 'hsr' [ 286.880934][ T9572] Cannot create hsr debugfs directory [ 287.003062][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 287.018115][ T36] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.018151][ T36] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.018181][ T36] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.018207][ T36] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.018256][ T36] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.018281][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.543968][ T36] usb 6-1: GET_CAPABILITIES returned 0 [ 287.544019][ T36] usbtmc 6-1:16.0: can't read capabilities [ 287.561025][ T5845] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 287.717806][ T5845] usb 7-1: Using ep0 maxpacket: 8 [ 287.722927][ T5845] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.722991][ T5845] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 287.723017][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.775177][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 287.820545][ T9] usb 6-1: USB disconnect, device number 3 [ 287.837733][ T5845] usb 7-1: config 0 descriptor?? [ 287.931451][ T5845] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 288.026617][ T9781] netlink: 'syz.0.1615': attribute type 4 has an invalid length. [ 288.168243][ T59] Bluetooth: hci3: command tx timeout [ 288.876089][ T5845] gspca_vc032x: reg_r err -71 [ 288.876182][ T5845] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 288.930756][ T5845] usb 7-1: USB disconnect, device number 4 [ 289.979076][ T5861] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 290.127915][ T5861] usb 6-1: Using ep0 maxpacket: 16 [ 290.131431][ T5861] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 290.131463][ T5861] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 290.131483][ T5861] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 290.131503][ T5861] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 290.131521][ T5861] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 290.131542][ T5861] usb 6-1: config 0 has no interface number 0 [ 290.131593][ T5861] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 290.131626][ T5861] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 290.131650][ T5861] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.131689][ T5861] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.131720][ T5861] usb 6-1: config 0 interface 125 has no altsetting 0 [ 290.131741][ T5861] usb 6-1: config 0 interface 125 has no altsetting 2 [ 290.136338][ T5861] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 290.136369][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.136391][ T5861] usb 6-1: Product: syz [ 290.136406][ T5861] usb 6-1: Manufacturer: syz [ 290.136422][ T5861] usb 6-1: SerialNumber: syz [ 290.323905][ T5861] usb 6-1: config 0 descriptor?? [ 290.350316][ T5861] usb 6-1: selecting invalid altsetting 2 [ 291.478620][ T36] usb 6-1: USB disconnect, device number 4 [ 291.835256][ T9572] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 291.938512][ T9572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.950368][ T9572] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 292.091742][ T9572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.101112][ T9572] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 292.330155][ T9883] loop8: detected capacity change from 0 to 7 [ 292.336030][ T9883] Dev loop8: unable to read RDB block 7 [ 292.336079][ T9883] loop8: unable to read partition table [ 292.336405][ T9883] loop8: partition table beyond EOD, truncated [ 292.362927][ T9883] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 292.386176][ T9572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.442346][ T9572] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 292.644298][ T9572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.501084][ T9572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.915505][ T9572] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.981986][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.986442][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.002589][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.002729][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.202428][ T9963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 295.943867][ T9986] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 295.943893][ T9986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1681'. [ 297.306532][ T9572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.060803][ T36] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 298.245645][ T36] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 298.245677][ T36] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 298.245698][ T36] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 298.245722][ T36] usb 6-1: config 150 has no interface number 0 [ 298.245757][ T36] usb 6-1: config 150 interface 204 has no altsetting 0 [ 298.280617][ T36] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 298.280647][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.280667][ T36] usb 6-1: Product: syz [ 298.280680][ T36] usb 6-1: Manufacturer: syz [ 298.280695][ T36] usb 6-1: SerialNumber: syz [ 298.387258][ T5845] IPVS: starting estimator thread 0... [ 298.467935][T10063] IPVS: using max 8 ests per chain, 19200 per kthread [ 298.862199][ T36] usb 6-1: USB disconnect, device number 5 [ 298.997671][ T9572] veth0_vlan: entered promiscuous mode [ 299.066937][T10075] overlayfs: overlapping lowerdir path [ 299.095449][ T9572] veth1_vlan: entered promiscuous mode [ 299.204105][T10081] loop8: detected capacity change from 0 to 7 [ 299.227129][T10081] Dev loop8: unable to read RDB block 7 [ 299.227188][T10081] loop8: unable to read partition table [ 299.227410][T10081] loop8: partition table beyond EOD, truncated [ 299.227666][T10081] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 299.286823][ T9572] veth0_macvtap: entered promiscuous mode [ 299.330652][ T9572] veth1_macvtap: entered promiscuous mode [ 299.536167][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.739320][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.910193][ T4263] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.914074][ T4263] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.936087][ T4263] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.972799][ T4263] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.239456][ T36] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 300.967380][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 300.989491][ T36] usb 6-1: not running at top speed; connect to a high speed hub [ 301.004228][ T36] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 301.004258][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.004278][ T36] usb 6-1: Product: syz [ 301.004291][ T36] usb 6-1: Manufacturer: syz [ 301.004305][ T36] usb 6-1: SerialNumber: syz [ 301.220498][T10116] 9p: Bad value for 'wfdno' [ 301.468728][ T36] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 301.883008][T10126] netlink: 'syz.6.1736': attribute type 1 has an invalid length. [ 302.070130][ T36] gp8psk: usb out operation failed. [ 302.070148][ T36] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 302.070192][ T36] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 302.090108][ T36] usb 6-1: USB disconnect, device number 6 [ 302.256310][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.256332][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.391052][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.391076][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.678725][T10136] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 304.097913][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 304.140586][T10175] input: syz0 as /devices/virtual/input/input9 [ 305.294662][T10205] netlink: 'syz.0.1764': attribute type 39 has an invalid length. [ 306.408679][ T5608] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.452947][ T821] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 306.452975][ T821] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 307.324927][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1788'. [ 308.041354][T10282] binder: 10279:10282 ioctl c0306201 2000000001c0 returned -14 [ 308.706002][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1809'. [ 308.968021][T10312] netlink: 35 bytes leftover after parsing attributes in process `syz.7.1814'. [ 308.968059][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1814'. [ 309.208427][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 309.208906][ T821] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 309.208926][ T821] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 310.507369][ T5608] Bluetooth: hci3: command tx timeout [ 314.203405][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1885'. [ 314.203453][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1885'. [ 314.204327][T10468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.408891][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.434130][ T821] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 314.434157][ T821] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 314.781841][T10478] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1890'. [ 316.912803][ T37] audit: type=1326 audit(1778838421.144:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 316.912978][ T37] audit: type=1326 audit(1778838421.144:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 316.914787][ T37] audit: type=1326 audit(1778838421.144:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 316.959664][ T37] audit: type=1326 audit(1778838421.194:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 316.959719][ T37] audit: type=1326 audit(1778838421.194:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 316.959765][ T37] audit: type=1326 audit(1778838421.194:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 316.959806][ T37] audit: type=1326 audit(1778838421.194:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 316.959848][ T37] audit: type=1326 audit(1778838421.194:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 316.964769][ T37] audit: type=1326 audit(1778838421.194:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 316.964821][ T37] audit: type=1326 audit(1778838421.194:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.0.1913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee597dce59 code=0x7ffc0000 [ 317.480499][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 317.614755][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.614835][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.657896][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 317.660523][ T9] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 317.660553][ T9] usb 8-1: config 0 has no interface number 0 [ 317.665384][ T9] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 317.665418][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.665441][ T9] usb 8-1: Product: syz [ 317.665457][ T9] usb 8-1: Manufacturer: syz [ 317.665473][ T9] usb 8-1: SerialNumber: syz [ 317.739841][ T9] usb 8-1: config 0 descriptor?? [ 317.772704][ T9] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 318.026097][ T9] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 318.063147][ T9] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 318.420223][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 318.421063][ T5726] usb 8-1: USB disconnect, device number 2 [ 318.470673][ T5726] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 318.525605][ T5726] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 318.526645][ T5726] quatech2 8-1:0.51: device disconnected [ 320.437476][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803450d800: rx timeout, send abort [ 320.442281][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803450d800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 320.953002][T10628] tap0: tun_chr_ioctl cmd 1074025675 [ 320.953029][T10628] tap0: persist enabled [ 320.975895][T10623] tap0: tun_chr_ioctl cmd 1074025675 [ 320.975919][T10623] tap0: persist disabled [ 321.848088][ T59] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 323.103813][T10691] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1987'. [ 324.504756][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.648958][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.255013][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 325.263342][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 325.651018][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.875771][T10770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2025'. [ 326.574790][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.833625][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.048093][ T821] kernel write not supported for file /bluetooth/6lowpan_control (pid: 821 comm: kworker/1:2) [ 327.283707][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2044'. [ 327.283737][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2044'. [ 327.732440][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.866050][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.880189][T10826] Invalid argument reading file caps for ./file0 [ 328.156761][T10834] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2052'. [ 328.888525][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.933638][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.142803][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 330.142823][ T37] audit: type=1326 audit(1778838434.374:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.142874][ T37] audit: type=1326 audit(1778838434.374:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.213182][ T37] audit: type=1326 audit(1778838434.444:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.214997][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 330.215029][T10884] netlink: 'syz.0.2073': attribute type 5 has an invalid length. [ 330.215044][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2073'. [ 330.216182][ T37] audit: type=1326 audit(1778838434.444:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.226768][ T37] audit: type=1326 audit(1778838434.454:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.226820][ T37] audit: type=1326 audit(1778838434.454:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.226861][ T37] audit: type=1326 audit(1778838434.454:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.227461][ T37] audit: type=1326 audit(1778838434.454:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.227506][ T37] audit: type=1326 audit(1778838434.454:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.283942][ T37] audit: type=1326 audit(1778838434.464:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10880 comm="syz.6.2072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f743b21ce59 code=0x7ffc0000 [ 330.431996][T10884] geneve2: entered promiscuous mode [ 330.432024][T10884] geneve2: entered allmulticast mode [ 330.468935][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.516335][ T157] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 330.517032][ T157] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 330.517654][ T157] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 330.517826][ T157] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 330.745021][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.817247][ T5845] IPVS: starting estimator thread 0... [ 330.927987][T10897] IPVS: using max 6 ests per chain, 14400 per kthread [ 330.968927][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.286954][T10910] loop8: detected capacity change from 0 to 8 [ 331.366901][T10910] Dev loop8: unable to read RDB block 8 [ 331.366949][T10910] loop8: unable to read partition table [ 331.367219][T10910] loop8: partition table beyond EOD, truncated [ 331.367257][T10910] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 331.554926][T10918] loop8: detected capacity change from 0 to 7 [ 331.565507][T10918] Dev loop8: unable to read RDB block 7 [ 331.565539][T10918] loop8: AHDI p1 p2 [ 331.565572][T10918] loop8: partition table partially beyond EOD, truncated [ 331.565857][T10918] loop8: p1 start 1702000233 is beyond EOD, truncated [ 331.692915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.008262][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.899235][T10954] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2105'. [ 333.067985][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.769708][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.099557][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.142872][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.538675][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.172617][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.208133][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.575453][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2159'. [ 337.692010][T11081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2161'. [ 337.810304][T11087] veth1_macvtap: entered allmulticast mode [ 337.810560][T11087] veth1_macvtap: left allmulticast mode [ 338.248074][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.569420][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.977838][ T5725] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 339.156823][ T5725] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 339.156857][ T5725] usb 6-1: config 1 has no interface number 0 [ 339.156909][ T5725] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 339.156940][ T5725] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 339.156969][ T5725] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.222744][ T5725] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 339.222778][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.222800][ T5725] usb 6-1: Product: syz [ 339.222815][ T5725] usb 6-1: Manufacturer: syz [ 339.222848][ T5725] usb 6-1: SerialNumber: syz [ 339.275848][T11109] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 339.292288][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.506761][T11109] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 340.008122][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.092835][ T5725] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 340.338573][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.652980][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.658424][ T9] usb 6-1: USB disconnect, device number 7 [ 340.687457][ T9] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 340.827158][T11147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.858901][T11147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.935637][T11147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.952263][T11147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.957074][T11147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.992102][T11145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.372239][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.491888][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2194'. [ 341.491919][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2194'. [ 341.608065][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.625813][ T9] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 341.878793][T11168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.078246][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 342.245261][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.245298][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.245346][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.245372][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.550835][ T9] usb 6-1: usb_control_msg returned -32 [ 342.550901][ T9] usbtmc 6-1:16.0: can't read capabilities [ 343.017850][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 343.197843][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 343.206697][ T9] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 343.206730][ T9] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 343.206751][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 343.206773][ T9] usb 8-1: config 1 has no interface number 0 [ 343.206820][ T9] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.206849][ T9] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 343.206891][ T9] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 343.206916][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.433633][ T9] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 343.616598][ T9] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 343.975206][ T9] usb 8-1: USB disconnect, device number 3 [ 343.985288][ T9] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 344.427380][ T9] usb 6-1: USB disconnect, device number 8 [ 344.756380][T11236] Invalid argument reading file caps for ./file0 [ 345.544553][ T821] net_ratelimit: 4 callbacks suppressed [ 345.544574][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.548914][T11259] syz.6.2236 (11259) used obsolete PPPIOCDETACH ioctl [ 346.203264][T11282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2250'. [ 346.444197][T11293] loop8: detected capacity change from 0 to 7 [ 346.447249][T11293] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 346.447291][T11293] loop8: partition table partially beyond EOD, truncated [ 346.471304][T11293] loop8: p1 size 3850834742 extends beyond EOD, truncated [ 346.551217][T11293] loop8: p2 start 516240762 is beyond EOD, truncated [ 346.639514][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.804218][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'. [ 346.804359][T11305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.895376][ T5726] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 346.920310][T11305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.047943][ T5726] usb 7-1: Using ep0 maxpacket: 32 [ 347.086185][ T5726] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 347.086218][ T5726] usb 7-1: config 0 has no interface number 0 [ 347.086272][ T5726] usb 7-1: config 0 interface 184 has no altsetting 0 [ 347.087437][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 347.094104][ T5726] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 347.094137][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.094159][ T5726] usb 7-1: Product: syz [ 347.094175][ T5726] usb 7-1: Manufacturer: syz [ 347.094191][ T5726] usb 7-1: SerialNumber: syz [ 347.222007][ T5726] usb 7-1: config 0 descriptor?? [ 347.730529][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.750013][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.857981][ T5726] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 347.858019][ T5726] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 348.064248][T11314] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2263'. [ 348.079034][ T5726] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 348.079068][ T5726] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 348.079091][ T5726] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 348.079437][ T5726] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 348.155694][ T5726] usb 7-1: USB disconnect, device number 5 [ 348.868142][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.082685][T11353] netlink: 'syz.5.2281': attribute type 10 has an invalid length. [ 349.082714][T11353] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2281'. [ 349.277517][T11357] loop7: detected capacity change from 0 to 7 [ 349.341090][T11357] Dev loop7: unable to read RDB block 7 [ 349.341128][T11357] loop7: AHDI p1 p2 p3 p4 [ 349.341162][T11357] loop7: partition table partially beyond EOD, truncated [ 349.341650][T11357] loop7: p1 start 1601398130 is beyond EOD, truncated [ 349.341675][T11357] loop7: p2 start 1702059890 is beyond EOD, truncated [ 349.341693][T11357] loop7: p3 start 14024704 is beyond EOD, truncated [ 349.617888][ T5725] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 349.767969][ T5725] usb 1-1: Using ep0 maxpacket: 32 [ 349.770651][ T5725] usb 1-1: config 119 has an invalid descriptor of length 0, skipping remainder of the config [ 349.770681][ T5725] usb 1-1: config 119 has 0 interfaces, different from the descriptor's value: 1 [ 349.770722][ T5725] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 349.770748][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.050067][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.207075][ T5725] usb 1-1: string descriptor 0 read error: -71 [ 350.230675][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2293'. [ 350.238656][ T5725] usb 1-1: USB disconnect, device number 18 [ 350.263626][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.728187][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.082105][T11405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.284623][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.379581][ T5806] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 351.537861][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 351.537920][ T5806] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 351.537948][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 351.537979][ T5806] usb 8-1: Product: syz [ 351.537994][ T5806] usb 8-1: Manufacturer: syz [ 351.538010][ T5806] usb 8-1: SerialNumber: syz [ 351.648060][ T5725] hid_parser_main: 56 callbacks suppressed [ 351.648089][ T5725] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 351.692834][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 351.696758][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.696793][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.696819][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.696844][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.696890][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.696914][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.012689][ T5806] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 352.027014][ T5806] vp7045: USB control message 'out' went wrong. [ 352.027035][ T5806] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 352.027078][ T5806] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 352.039156][ T5806] usb 8-1: USB disconnect, device number 4 [ 352.107564][ T5725] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 352.168237][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.329829][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.443513][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 352.443568][ T9] usbtmc 7-1:16.0: can't read capabilities [ 352.784387][ T821] usb 7-1: USB disconnect, device number 6 [ 353.307988][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.397928][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.398463][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.451112][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.123195][T11456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.123433][T11456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.123793][T11456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.489636][ T1009] net_ratelimit: 8 callbacks suppressed [ 356.489659][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.578378][ T821] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 356.812893][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 356.822771][ T821] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 356.822800][ T821] usb 7-1: config 0 has no interface number 0 [ 356.843362][ T821] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 356.843398][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.843421][ T821] usb 7-1: Product: syz [ 356.843436][ T821] usb 7-1: Manufacturer: syz [ 356.843452][ T821] usb 7-1: SerialNumber: syz [ 356.892062][ T821] usb 7-1: config 0 descriptor?? [ 357.560718][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.997903][ T821] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 357.997940][ T821] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 357.998636][ T821] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 357.998986][ T821] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 358.106179][ T821] usb 7-1: USB disconnect, device number 7 [ 358.248019][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.460700][T11567] netlink: 'syz.0.2382': attribute type 2 has an invalid length. [ 358.572053][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.695992][T11572] loop5: detected capacity change from 0 to 7 [ 358.739520][T11572] Dev loop5: unable to read RDB block 7 [ 358.739571][T11572] loop5: unable to read partition table [ 358.739825][T11572] loop5: partition table beyond EOD, truncated [ 358.739846][T11572] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 359.608257][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.647887][ T5725] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 359.807948][ T5725] usb 7-1: Using ep0 maxpacket: 16 [ 359.810683][ T5725] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 359.810720][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 359.815104][ T5725] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 359.815138][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.815161][ T5725] usb 7-1: Product: syz [ 359.815177][ T5725] usb 7-1: Manufacturer: syz [ 359.815193][ T5725] usb 7-1: SerialNumber: syz [ 359.835475][ T5725] usb 7-1: config 0 descriptor?? [ 359.866699][ T5725] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 359.866746][ T5725] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 360.503017][ T5725] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 360.504425][ T5725] em28xx 7-1:0.0: Config register raw data: 0x41 [ 360.648357][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.757168][ T5806] usb 7-1: USB disconnect, device number 8 [ 360.808431][ T5806] em28xx 7-1:0.0: Disconnecting em28xx [ 361.042205][ T5806] em28xx 7-1:0.0: Freeing device [ 361.288108][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.688217][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.409123][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.729750][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.955531][T11674] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 363.048316][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.229507][ T821] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 363.419793][ T821] usb 7-1: Using ep0 maxpacket: 8 [ 363.435346][ T821] usb 7-1: unable to get BOS descriptor or descriptor too short [ 363.453983][ T821] usb 7-1: string descriptor 0 read error: -22 [ 363.454105][ T821] usb 7-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 363.454121][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.636637][ T821] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 363.716377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.788654][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.816781][ T821] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 364.231655][T11699] loop9: detected capacity change from 0 to 524287936 [ 364.329229][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.733587][ T821] usb 7-1: USB disconnect, device number 9 [ 364.817982][ T5845] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 364.837468][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.967901][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 364.973117][ T5845] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.973149][ T5845] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.973192][ T5845] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 364.973219][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.046450][ T5845] usb 1-1: config 0 descriptor?? [ 365.453700][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.675840][T11739] batadv_slave_0: entered promiscuous mode [ 365.676179][ T5806] usb 1-1: USB disconnect, device number 19 [ 365.694672][T11737] batadv_slave_0: left promiscuous mode [ 365.849345][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.509404][T11752] netlink: 'syz.6.2464': attribute type 8 has an invalid length. [ 366.509426][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2464'. [ 366.773539][T11758] input: syz1 as /devices/virtual/input/input11 [ 366.890873][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.698614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.700480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.700723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.928546][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.146700][T11792] input: syz1 as /devices/virtual/input/input12 [ 368.489724][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.601434][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2491'. [ 368.968513][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.927203][T11837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.927409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.008359][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.104385][ T5806] net_ratelimit: 2 callbacks suppressed [ 372.104410][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.154156][T11870] input: syz0 as /devices/virtual/input/input13 [ 372.262989][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.573398][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.614392][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.616415][T11883] binder: 11882:11883 ioctl c0306201 200000002040 returned -22 [ 372.617346][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.628339][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.645805][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.757336][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.764306][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.766236][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.767389][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.815377][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.042769][T11893] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2532'. [ 373.098312][T11892] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 373.109218][T11896] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2532'. [ 373.138381][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.751120][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.002203][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.168482][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.430983][T11926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.539010][T11928] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 374.576260][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.584359][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.828805][T11938] input: syz0 as /devices/virtual/input/input15 [ 374.973430][ T59] Bluetooth: hci5: command tx timeout [ 375.051643][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.210176][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.387802][ T5845] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 375.544688][ T5845] usb 1-1: unable to get BOS descriptor or descriptor too short [ 375.555914][ T5845] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.555944][ T5845] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 375.556001][ T5845] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 375.556043][ T5845] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 375.556088][ T5845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 375.556117][ T5845] usb 1-1: config 1 interface 1 has no altsetting 0 [ 375.622945][ T5845] usb 1-1: string descriptor 0 read error: -22 [ 375.623117][ T5845] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 375.623146][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.248522][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.381672][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.723985][ T5845] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 376.751977][ T5845] usb 1-1: Warning! Unlikely small volume range (=48), linear volume or custom curve? [ 376.752007][ T5845] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/48/1 [ 377.013562][ T5845] usb 1-1: USB disconnect, device number 20 [ 377.048230][ T59] Bluetooth: hci5: command tx timeout [ 377.301087][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.611361][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.318679][ T37] kauditd_printk_skb: 57 callbacks suppressed [ 378.318703][ T37] audit: type=1804 audit(1778838738.511:143): pid=11999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.2574" name="/newroot/185/file0" dev="tmpfs" ino=967 res=1 errno=0 [ 378.328339][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.805985][T12016] netlink: 'syz.7.2580': attribute type 4 has an invalid length. [ 378.919138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.070691][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.070768][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.138316][ T59] Bluetooth: hci5: command tx timeout [ 379.311625][T12028] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2586'. [ 379.753412][T12034] ntfs3(nullb0): Primary boot signature is not NTFS. [ 379.850964][T12034] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 380.800816][ T12] bridge_slave_1: left allmulticast mode [ 380.800856][ T12] bridge_slave_1: left promiscuous mode [ 380.801146][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.100403][ T12] bridge_slave_0: left allmulticast mode [ 381.100439][ T12] bridge_slave_0: left promiscuous mode [ 381.100716][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.208307][ T59] Bluetooth: hci5: command tx timeout [ 381.497935][ T5718] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 381.652555][ T5718] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 381.652618][ T5718] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.652648][ T5718] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.652672][ T5718] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 381.654243][ T5718] usb 8-1: New USB device found, idVendor=0643, idProduct=3b4c, bcdDevice=85.ad [ 381.654276][ T5718] usb 8-1: New USB device strings: Mfr=159, Product=0, SerialNumber=0 [ 381.654299][ T5718] usb 8-1: Manufacturer: syz [ 381.758839][ T5718] usb 8-1: config 0 descriptor?? [ 382.458103][ T5718] hid-generic 0003:0643:3B4C.000A: hidraw0: USB HID v10.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 382.590894][ T5718] usb 8-1: USB disconnect, device number 5 [ 382.957546][T12105] fido_id[12105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 383.937489][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.048679][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.144118][ T12] bond0 (unregistering): Released all slaves [ 384.306297][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 385.592711][ T37] audit: type=1326 audit(1778838745.821:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12161 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1b53ce59 code=0x7fc00000 [ 386.132167][T11876] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.135377][T11876] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.135662][T11876] bridge_slave_0: entered allmulticast mode [ 386.208081][T11876] bridge_slave_0: entered promiscuous mode [ 386.228681][T11876] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.228923][T11876] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.229161][T11876] bridge_slave_1: entered allmulticast mode [ 386.245838][T11876] bridge_slave_1: entered promiscuous mode [ 386.284694][ T37] audit: type=1326 audit(1778838746.511:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12161 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c1b4fd68e code=0x7fc00000 [ 386.958121][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 387.051516][T11876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.324783][T11876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.819565][ T12] hsr_slave_0: left promiscuous mode [ 387.869746][ T12] hsr_slave_1: left promiscuous mode [ 387.873835][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.873865][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.942178][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.942209][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.293745][ T12] veth1_macvtap: left promiscuous mode [ 388.293867][ T12] veth0_macvtap: left promiscuous mode [ 388.294172][ T12] veth1_vlan: left promiscuous mode [ 388.294369][ T12] veth0_vlan: left promiscuous mode [ 389.566918][T12245] binder: 12244:12245 ioctl c0306201 0 returned -14 [ 389.680914][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 389.835889][ T9] usb 8-1: config 0 has an invalid interface number: 237 but max is 0 [ 389.835922][ T9] usb 8-1: config 0 has no interface number 0 [ 389.835997][ T9] usb 8-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 389.836024][ T9] usb 8-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 389.836047][ T9] usb 8-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 389.836073][ T9] usb 8-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024 [ 389.849020][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 389.849053][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 389.849074][ T9] usb 8-1: Product: syz [ 389.849089][ T9] usb 8-1: Manufacturer: syz [ 389.849104][ T9] usb 8-1: SerialNumber: syz [ 389.898355][ T9] usb 8-1: config 0 descriptor?? [ 390.275906][T12253] loop2: detected capacity change from 0 to 7 [ 390.349309][ T9] xpad 8-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 390.401000][T12253] Dev loop2: unable to read RDB block 7 [ 390.401038][T12253] loop2: AHDI p1 p2 p3 [ 390.401069][T12253] loop2: partition table partially beyond EOD, truncated [ 390.401341][T12253] loop2: p1 start 1601398130 is beyond EOD, truncated [ 390.401363][T12253] loop2: p2 start 1702059890 is beyond EOD, truncated [ 390.429371][ T9] xpad 8-1:0.237: probe with driver xpad failed with error -90 [ 390.453266][ T9] usb 8-1: USB disconnect, device number 6 [ 391.942727][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.202273][ T12] team0 (unregistering): Port device team_slave_0 removed [ 393.507865][ T5862] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 393.658041][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 393.660675][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.660726][ T5862] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 393.660752][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.705269][ T5862] usb 1-1: config 0 descriptor?? [ 393.795267][ T5862] xbox_remote_probe: Unexpected endpoint_in [ 393.802889][ T5862] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 394.014212][ T5862] usb 1-1: USB disconnect, device number 21 [ 394.133903][T11876] team0: Port device team_slave_0 added [ 394.215859][T11876] team0: Port device team_slave_1 added [ 394.756659][T11876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.756680][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.756710][T11876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.776620][T11876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.776645][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.776672][T11876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.408921][T11876] hsr_slave_0: entered promiscuous mode [ 395.413753][T11876] hsr_slave_1: entered promiscuous mode [ 395.417988][T11876] debugfs: 'hsr0' already exists in 'hsr' [ 395.418017][T11876] Cannot create hsr debugfs directory [ 395.867773][ T5718] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 396.038150][ T5718] usb 8-1: Using ep0 maxpacket: 32 [ 396.042296][ T5718] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 396.042334][ T5718] usb 8-1: config 0 interface 0 has no altsetting 0 [ 396.042373][ T5718] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 396.042398][ T5718] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.181165][ T5718] usb 8-1: config 0 descriptor?? [ 396.840500][ T5718] corsair-psu 0003:1B1C:1C09.000B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.7-1/input0 [ 396.898081][ T5806] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 397.138172][ T5806] usb 6-1: Using ep0 maxpacket: 8 [ 397.191011][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.191124][ T5806] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 397.191149][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.246145][ T12] IPVS: stop unused estimator thread 0... [ 397.479703][ T5806] usb 6-1: config 0 descriptor?? [ 397.517855][ T5718] corsair-psu 0003:1B1C:1C09.000B: unable to initialize device (-110) [ 397.764294][ T5806] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 397.770330][ T5718] corsair-psu 0003:1B1C:1C09.000B: probe with driver corsair-psu failed with error -110 [ 397.936849][ T5718] usb 8-1: USB disconnect, device number 7 [ 398.123776][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 398.396014][ T5725] usb 6-1: USB disconnect, device number 9 [ 399.246410][T12445] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2751'. [ 400.816969][T11876] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 400.938588][T11876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.035459][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 401.036297][T11876] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 401.291981][T11876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.356402][T11876] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 401.484655][T11876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.497033][T11876] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 401.633346][T11876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.877948][ T5725] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 402.037879][ T5725] usb 6-1: Using ep0 maxpacket: 32 [ 402.042259][ T5725] usb 6-1: config 0 has no interfaces? [ 402.042302][ T5725] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 402.042337][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.090513][ T5725] usb 6-1: config 0 descriptor?? [ 402.398360][ T5862] usb 6-1: USB disconnect, device number 10 [ 402.484641][T11876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.768874][T11876] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.883217][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.883468][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.982880][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.983059][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.475189][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880377e3000: rx timeout, send abort [ 403.475538][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880377e3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 405.849380][T12637] netlink: 41 bytes leftover after parsing attributes in process `syz.7.2811'. [ 405.849406][T12637] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2811'. [ 405.849430][T12637] netlink: 41 bytes leftover after parsing attributes in process `syz.7.2811'. [ 406.787274][T11876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.178009][ T36] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 407.339346][ T36] usb 8-1: Using ep0 maxpacket: 32 [ 407.349186][ T36] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 407.349215][ T36] usb 8-1: config 0 has no interface number 0 [ 407.349264][ T36] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 407.357235][ T36] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 407.357268][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.357288][ T36] usb 8-1: Product: syz [ 407.357303][ T36] usb 8-1: Manufacturer: syz [ 407.357317][ T36] usb 8-1: SerialNumber: syz [ 407.429780][ T36] usb 8-1: config 0 descriptor?? [ 407.431481][T12671] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 407.678890][T12671] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 408.101900][ T36] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 408.102231][ T36] asix 8-1:0.188: probe with driver asix failed with error -71 [ 408.127492][ T36] usb 8-1: USB disconnect, device number 8 [ 408.162843][T11876] veth0_vlan: entered promiscuous mode [ 408.184913][T11876] veth1_vlan: entered promiscuous mode [ 408.474629][T11876] veth0_macvtap: entered promiscuous mode [ 408.505108][T11876] veth1_macvtap: entered promiscuous mode [ 408.550958][T11876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.574732][T11876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.612368][ T44] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.613015][ T44] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.613060][ T44] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.613098][ T44] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.143847][T12627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.143872][T12627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.941045][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.941069][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.205950][T12816] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 413.720298][T12839] loop5: detected capacity change from 0 to 7 [ 413.748303][T12839] Dev loop5: unable to read RDB block 7 [ 413.748358][T12839] loop5: unable to read partition table [ 413.748622][T12839] loop5: partition table beyond EOD, truncated [ 413.748661][T12839] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.986727][T12846] input: syz1 as /devices/virtual/input/input16 [ 416.201313][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 416.347938][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 416.352644][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 416.352720][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.352746][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.352775][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.352802][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.352850][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.352876][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.734528][ T9] usb 9-1: usb_control_msg returned -32 [ 416.734587][ T9] usbtmc 9-1:16.0: can't read capabilities [ 417.573908][T12938] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 417.799767][ T5862] usb 9-1: USB disconnect, device number 2 [ 418.768101][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2944'. [ 418.841216][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2944'. [ 419.126280][T12980] netlink: 'syz.5.2948': attribute type 8 has an invalid length. [ 419.126305][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2948'. [ 419.221372][T12980] bond0: entered promiscuous mode [ 419.221392][T12980] bond_slave_0: entered promiscuous mode [ 419.221584][T12980] bond_slave_1: entered promiscuous mode [ 419.235384][T12980] gretap0: entered promiscuous mode [ 419.466556][T12980] hsr1: entered promiscuous mode [ 422.617800][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 422.773872][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 422.785512][ T9] usb 9-1: string descriptor 0 read error: -22 [ 422.785679][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.40 [ 422.785706][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.332180][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.332222][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.332251][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.332278][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.332304][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.332330][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.332357][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.332383][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.332411][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.332439][ T9] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0 [ 423.582757][ T9] konepure 0003:1E7D:2DBE.000C: hidraw0: USB HID v0.02 Device [HID 1e7d:2dbe] on usb-dummy_hcd.8-1/input0 [ 423.714969][ T9] usb 9-1: USB disconnect, device number 3 [ 424.099177][T13125] fido_id[13125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 430.355072][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3091'. [ 430.982002][T13332] netlink: 182 bytes leftover after parsing attributes in process `syz.7.3103'. [ 431.372331][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3109'. [ 431.372360][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3109'. [ 431.932908][T13369] program syz.5.3118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.564504][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3129'. [ 432.740919][T13389] ipvlan2: entered allmulticast mode [ 432.740947][T13389] syz_tun: entered allmulticast mode [ 434.044675][T13443] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3154'. [ 434.609331][ T5845] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 434.853833][ T5845] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 434.853868][ T5845] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 434.853891][ T5845] usb 9-1: Product: syz [ 434.853907][ T5845] usb 9-1: Manufacturer: syz [ 434.853946][ T5845] usb 9-1: SerialNumber: syz [ 434.889929][ T5845] usb 9-1: config 0 descriptor?? [ 434.943609][ T5845] ch341 9-1:0.0: ch341-uart converter detected [ 435.959079][ T5845] ch341-uart ttyUSB0: break control not supported, using simulated break [ 436.006412][ T5845] usb 9-1: ch341-uart converter now attached to ttyUSB0 [ 436.046998][ T5845] usb 9-1: USB disconnect, device number 4 [ 436.171763][ T5845] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 436.198209][ T5845] ch341 9-1:0.0: device disconnected [ 439.725947][T13597] binder: 13595:13597 ioctl c0306201 2000000003c0 returned -14 [ 439.726294][T13597] binder: 13595:13597 ioctl c0306201 2000000003c0 returned -14 [ 440.492360][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.492432][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.356566][T13749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input17 [ 449.952723][T13871] netlink: 276 bytes leftover after parsing attributes in process `syz.7.3352'. [ 450.305064][T13885] syzkaller1: entered promiscuous mode [ 450.305095][T13885] syzkaller1: entered allmulticast mode [ 454.072823][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3417'. [ 456.227978][ T1009] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 456.381736][ T1009] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 456.381789][ T1009] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 456.381811][ T1009] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 456.381865][ T1009] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 456.381895][ T1009] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 456.399022][ T1009] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 456.399058][ T1009] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 456.399080][ T1009] usb 9-1: Product: syz [ 456.399095][ T1009] usb 9-1: Manufacturer: syz [ 456.495244][ T1009] cdc_wdm 9-1:1.0: skipping garbage [ 456.495268][ T1009] cdc_wdm 9-1:1.0: skipping garbage [ 456.515943][ T1009] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 456.515979][ T1009] cdc_wdm 9-1:1.0: Unknown control protocol [ 456.822143][ T36] usb 9-1: USB disconnect, device number 5 [ 456.971309][T14099] could not open pipe file descriptor [ 457.561108][ T36] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 457.792913][ T36] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 457.792949][ T36] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 457.792970][ T36] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 457.793027][ T36] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 457.793056][ T36] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 457.795156][ T36] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 457.795188][ T36] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 457.795211][ T36] usb 9-1: Product: syz [ 457.795236][ T36] usb 9-1: Manufacturer: syz [ 457.905320][ T36] cdc_wdm 9-1:1.0: skipping garbage [ 457.905344][ T36] cdc_wdm 9-1:1.0: skipping garbage [ 457.961139][ T36] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 457.961165][ T36] cdc_wdm 9-1:1.0: Unknown control protocol [ 458.192659][ T36] usb 9-1: USB disconnect, device number 6 [ 459.559854][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 459.717818][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 459.744796][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 459.744864][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.744903][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.744932][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.744958][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.745008][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 459.745035][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.063382][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 460.063439][ T9] usbtmc 8-1:16.0: can't read capabilities [ 460.430778][ T5725] usb 8-1: USB disconnect, device number 9 [ 462.803062][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3542'. [ 463.320853][T14285] sit0: entered promiscuous mode [ 463.372312][T14285] netlink: 'syz.8.3544': attribute type 1 has an invalid length. [ 463.372337][T14285] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3544'. [ 466.037742][ T5725] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 466.195614][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 466.195656][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.195700][ T5725] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 466.195725][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.413864][ T5725] usb 6-1: config 0 descriptor?? [ 466.906330][ T5725] hid_parser_main: 3751 callbacks suppressed [ 466.906362][ T5725] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 466.961400][ T5725] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 467.085406][ T5725] cp2112 0003:10C4:EA90.000D: error requesting version [ 467.129686][ T5725] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71 [ 467.262345][ T5725] usb 6-1: USB disconnect, device number 11 [ 467.498902][ T5845] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 467.549425][T14407] fido_id[14407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 467.658507][ T5845] usb 9-1: Using ep0 maxpacket: 32 [ 467.661170][ T5845] usb 9-1: config 1 has an invalid interface number: 11 but max is 0 [ 467.661201][ T5845] usb 9-1: config 1 has no interface number 0 [ 467.661256][ T5845] usb 9-1: config 1 interface 11 has no altsetting 0 [ 467.671184][ T5845] usb 9-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=48.2e [ 467.671215][ T5845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.671236][ T5845] usb 9-1: Product: syz [ 467.671251][ T5845] usb 9-1: Manufacturer: syz [ 467.671265][ T5845] usb 9-1: SerialNumber: syz [ 467.822624][ T5845] option 9-1:1.11: GSM modem (1-port) converter detected [ 468.045872][ T5845] usb 9-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 468.166467][ T5845] usb 9-1: USB disconnect, device number 7 [ 468.320345][ T5845] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 468.321536][ T5845] option 9-1:1.11: device disconnected [ 468.525638][T14436] Context (ID=0x0) not attached to queue pair (handle=0x1:0x1ff) [ 470.210542][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3636'. [ 473.488567][ T5806] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 473.660572][ T5806] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 473.660609][ T5806] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 473.660630][ T5806] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 473.660685][ T5806] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 473.660711][ T5806] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 473.662882][ T5806] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 473.662913][ T5806] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 473.662936][ T5806] usb 9-1: Product: syz [ 473.662952][ T5806] usb 9-1: Manufacturer: syz [ 473.774777][ T5806] cdc_wdm 9-1:1.0: skipping garbage [ 473.774802][ T5806] cdc_wdm 9-1:1.0: skipping garbage [ 473.793314][ T5806] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 473.793340][ T5806] cdc_wdm 9-1:1.0: Unknown control protocol [ 474.223488][ T5725] usb 9-1: USB disconnect, device number 8 [ 475.549036][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 475.700977][ T9] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 475.701011][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 475.704124][ T9] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 475.704158][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.704181][ T9] usb 9-1: Product: syz [ 475.704196][ T9] usb 9-1: Manufacturer: syz [ 475.704212][ T9] usb 9-1: SerialNumber: syz [ 475.829944][ T9] usb 9-1: config 0 descriptor?? [ 475.891567][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 476.196591][ T5806] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 476.357726][ T5806] usb 6-1: Using ep0 maxpacket: 8 [ 476.361500][ T5806] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 476.361533][ T5806] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.361560][ T5806] usb 6-1: config 1 interface 0 has no altsetting 0 [ 476.402602][ T5806] usb 6-1: string descriptor 0 read error: -22 [ 476.402771][ T5806] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 476.402798][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.467001][T14642] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 476.484823][ T5806] usblp0: Disabling reads from problematic bidirectional printer [ 476.745483][ T5806] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 3 proto 1 vid 0x03F0 pid 0x0004 [ 476.777515][ T5806] usb 6-1: USB disconnect, device number 12 [ 476.843319][ T5806] usblp0: removed [ 476.941736][ T9] gspca_sunplus: reg_r err -32 [ 476.941854][ T9] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 477.046881][ T9] usb 9-1: USB disconnect, device number 9 [ 477.076813][T14664] netlink: 'syz.7.3717': attribute type 8 has an invalid length. [ 477.076835][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3717'. [ 477.234792][T14664] bond0: entered promiscuous mode [ 477.234821][T14664] bond_slave_0: entered promiscuous mode [ 477.235122][T14664] bond_slave_1: entered promiscuous mode [ 477.265571][T14664] gretap0: entered promiscuous mode [ 477.276715][T14664] team0: entered promiscuous mode [ 477.276752][T14664] team_slave_0: entered promiscuous mode [ 477.277020][T14664] team_slave_1: entered promiscuous mode [ 477.351220][T14664] debugfs: 'hsr1' already exists in 'hsr' [ 477.351252][T14664] Cannot create hsr debugfs directory [ 477.351494][T14664] hsr1: entered promiscuous mode [ 478.054905][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3729'. [ 480.258439][ T1009] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 480.425981][ T1009] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 480.426014][ T1009] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.453036][ T1009] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 480.453072][ T1009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.453092][ T1009] usb 8-1: SerialNumber: syz [ 480.517825][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 480.519833][ T1009] usb 8-1: 0:2 : does not exist [ 480.519931][ T1009] usb 8-1: unit 255 not found! [ 480.762395][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 480.762449][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 480.762478][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 480.762522][ T9] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 480.762546][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.794288][ T9] usb 6-1: config 0 descriptor?? [ 480.874248][T14773] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 481.088388][ T5725] usb 8-1: USB disconnect, device number 10 [ 481.519711][ T9] dragonrise 0003:0079:0011.000E: unknown main item tag 0x2 [ 481.519753][ T9] dragonrise 0003:0079:0011.000E: unexpected long global item [ 481.521731][ T9] dragonrise 0003:0079:0011.000E: parse failed [ 481.521809][ T9] dragonrise 0003:0079:0011.000E: probe with driver dragonrise failed with error -22 [ 481.729382][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3767'. [ 481.735022][ T5725] usb 6-1: USB disconnect, device number 13 [ 482.715221][T14846] sit0: left promiscuous mode [ 482.825018][T14854] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3806'. [ 483.800608][T14882] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3818'. [ 484.053811][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dfaa800: rx timeout, send abort [ 484.054095][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dfaa800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 484.057433][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dfaa400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 485.320825][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f89e800: rx timeout, send abort [ 485.321085][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f89e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 485.321393][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f89dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 492.578552][T15139] netlink: 'syz.8.3926': attribute type 1 has an invalid length. [ 492.972398][T15139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.079820][T15141] bond1: (slave gretap1): making interface the new active one [ 493.127385][T15141] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 494.638180][ T9] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 494.800561][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 494.800597][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.800620][ T9] usb 9-1: Product: syz [ 494.800644][ T9] usb 9-1: Manufacturer: syz [ 494.800661][ T9] usb 9-1: SerialNumber: syz [ 494.829217][ T9] usb 9-1: config 0 descriptor?? [ 495.103176][ T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 496.157927][ T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 496.227003][ T9] usb 9-1: USB disconnect, device number 10 [ 497.553621][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3993'. [ 497.676877][T15293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.134213][T15325] netlink: 'syz.7.4012': attribute type 1 has an invalid length. [ 501.934859][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.934952][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.700176][T15418] overlayfs: failed to resolve './cgroup': -2 [ 503.243413][T15445] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 503.990048][T15470] netlink: 'syz.5.4078': attribute type 1 has an invalid length. [ 504.247300][T15470] bond1: entered promiscuous mode [ 504.247330][T15470] bond1: entered allmulticast mode [ 504.346446][T15478] bond1: (slave ip6gretap1): making interface the new active one [ 504.346475][T15478] ip6gretap1: entered promiscuous mode [ 504.346674][T15478] ip6gretap1: entered allmulticast mode [ 504.371510][T15478] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 504.664453][T15467] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 504.838478][T15500] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 508.126172][T15588] overlayfs: overlapping lowerdir path [ 508.249034][T15569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.504284][T15637] FAULT_FLAG_ALLOW_RETRY missing 801 [ 509.504313][T15637] CPU: 0 UID: 0 PID: 15637 Comm: syz.7.4147 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 509.504347][T15637] Tainted: [L]=SOFTLOCKUP [ 509.504355][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 509.504369][T15637] Call Trace: [ 509.504377][T15637] [ 509.504388][T15637] dump_stack_lvl+0xe8/0x150 [ 509.504423][T15637] handle_userfault+0x1517/0x17d0 [ 509.504480][T15637] ? __pfx___folio_put+0x10/0x10 [ 509.504517][T15637] ? __pfx_handle_userfault+0x10/0x10 [ 509.504562][T15637] ? do_pte_missing+0x26ef/0x2950 [ 509.504612][T15637] handle_mm_fault+0xd09/0x13c0 [ 509.504644][T15637] ? handle_mm_fault+0xe7/0x13c0 [ 509.504674][T15637] ? __pfx_handle_mm_fault+0x10/0x10 [ 509.504701][T15637] ? follow_page_pte+0xbc8/0xe40 [ 509.504737][T15637] ? __pfx_follow_page_pte+0x10/0x10 [ 509.504771][T15637] __get_user_pages+0x168f/0x2570 [ 509.504829][T15637] populate_vma_page_range+0x2be/0x3c0 [ 509.504856][T15637] ? __pfx_populate_vma_page_range+0x10/0x10 [ 509.504878][T15637] ? vma_wants_writenotify+0xba/0x2d0 [ 509.504918][T15637] ? vma_set_page_prot+0xc3/0x100 [ 509.504946][T15637] mprotect_fixup+0x9e5/0xb60 [ 509.504986][T15637] ? __pfx_mprotect_fixup+0x10/0x10 [ 509.505049][T15637] do_mprotect_pkey+0x8d5/0xd20 [ 509.505103][T15637] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 509.505170][T15637] ? rcu_is_watching+0x15/0xb0 [ 509.505213][T15637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.505240][T15637] __x64_sys_mprotect+0x80/0x90 [ 509.505274][T15637] do_syscall_64+0x15f/0xf80 [ 509.505304][T15637] ? trace_irq_disable+0x3b/0x140 [ 509.505334][T15637] ? clear_bhb_loop+0x40/0x90 [ 509.505364][T15637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.505388][T15637] RIP: 0033:0x7f9c1b53ce59 [ 509.505411][T15637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.505431][T15637] RSP: 002b:00007f9c19775028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 509.505457][T15637] RAX: ffffffffffffffda RBX: 00007f9c1b7b6090 RCX: 00007f9c1b53ce59 [ 509.505475][T15637] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 509.505492][T15637] RBP: 00007f9c1b5d2d6f R08: 0000000000000000 R09: 0000000000000000 [ 509.505515][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.505530][T15637] R13: 00007f9c1b7b6128 R14: 00007f9c1b7b6090 R15: 00007fff528fd3f8 [ 509.505568][T15637] [ 510.040745][ T1009] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 510.227866][ T1009] usb 6-1: Using ep0 maxpacket: 8 [ 510.233072][ T1009] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.233139][ T1009] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 510.233166][ T1009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.284156][ T1009] usb 6-1: config 0 descriptor?? [ 510.300089][ T1009] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 511.796031][ T1009] usb 6-1: USB disconnect, device number 14 [ 513.169249][T15712] netlink: 'syz.5.4189': attribute type 1 has an invalid length. [ 513.333271][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 513.393171][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 513.395068][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 513.430326][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 513.436018][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 514.036144][ T1773] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.526568][T15712] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 515.493573][ T1773] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.540276][ T5608] Bluetooth: hci5: command tx timeout [ 516.692185][ T1773] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.254447][ T1773] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.607860][ T5608] Bluetooth: hci5: command tx timeout [ 519.687844][ T5608] Bluetooth: hci5: command tx timeout [ 521.273404][ T1773] bridge_slave_1: left allmulticast mode [ 521.273445][ T1773] bridge_slave_1: left promiscuous mode [ 521.364544][ T1773] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.497327][ T1773] bridge_slave_0: left allmulticast mode [ 521.497368][ T1773] bridge_slave_0: left promiscuous mode [ 521.510190][ T1773] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.769023][ T5608] Bluetooth: hci5: command tx timeout [ 525.099194][ T1773] bond1 (unregistering): (slave gretap1): Releasing active interface [ 525.808976][ T1773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.898660][ T1773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.951427][ T1773] bond0 (unregistering): Released all slaves [ 525.982397][ T1773] bond1 (unregistering): Released all slaves [ 526.324254][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 526.403133][T16083] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.4345'. [ 527.006874][T16104] loop1: detected capacity change from 0 to 7 [ 527.070709][T16104] Dev loop1: unable to read RDB block 7 [ 527.070769][T16104] loop1: unable to read partition table [ 527.071042][T16104] loop1: partition table beyond EOD, truncated [ 527.071080][T16104] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 528.103519][T15717] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.103734][T15717] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.104035][T15717] bridge_slave_0: entered allmulticast mode [ 528.168802][T15717] bridge_slave_0: entered promiscuous mode [ 528.405772][T15717] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.405897][T15717] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.406142][T15717] bridge_slave_1: entered allmulticast mode [ 528.414059][T15717] bridge_slave_1: entered promiscuous mode [ 529.416092][T15717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.600302][T15717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.064903][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4389'. [ 530.064931][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4389'. [ 530.132504][ T1773] hsr_slave_0: left promiscuous mode [ 530.169898][ T1773] hsr_slave_1: left promiscuous mode [ 530.171234][ T1773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.171262][ T1773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.232440][ T1773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.232472][ T1773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.396179][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4392'. [ 530.534885][ T1773] veth1_macvtap: left promiscuous mode [ 530.549579][ T1773] veth0_macvtap: left promiscuous mode [ 530.549915][ T1773] veth1_vlan: left promiscuous mode [ 530.550117][ T1773] veth0_vlan: left promiscuous mode [ 532.619489][ T1773] team0 (unregistering): Port device team_slave_1 removed [ 532.744727][ T1773] team0 (unregistering): Port device team_slave_0 removed [ 533.707182][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4389'. [ 533.707209][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4389'. [ 533.708277][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 533.714425][T15717] team0: Port device team_slave_0 added [ 533.714512][ T2940] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.774245][ T2940] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.780357][T15717] team0: Port device team_slave_1 added [ 533.780605][ T2940] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.780651][ T2940] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.924895][T15717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.924909][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.924927][T15717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.944811][T15717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.944830][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.944858][T15717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.480561][T15717] hsr_slave_0: entered promiscuous mode [ 534.482161][T15717] hsr_slave_1: entered promiscuous mode [ 534.483135][T15717] debugfs: 'hsr0' already exists in 'hsr' [ 534.483161][T15717] Cannot create hsr debugfs directory [ 536.594812][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 540.151171][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 540.182535][T15717] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 540.347080][T15717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.365341][T15717] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 540.536682][T15717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.603985][T15717] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 540.711159][T15717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.717941][T15717] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 540.898674][T15717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.925994][T15717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.083976][T15717] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.180192][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.180477][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.235934][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.236081][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.615965][T15717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.932469][T15717] veth0_vlan: entered promiscuous mode [ 545.981774][T15717] veth1_vlan: entered promiscuous mode [ 546.222108][T15717] veth0_macvtap: entered promiscuous mode [ 546.247291][T15717] veth1_macvtap: entered promiscuous mode [ 546.335974][T15717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.385390][T15717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.517328][ T1001] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.518147][ T1001] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.521011][ T1001] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.521465][ T1001] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.764198][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4593'. [ 547.872666][T12595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.872689][T12595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.591112][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.591136][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.103711][ T37] audit: type=1326 audit(1778838909.331:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1abbce59 code=0x7ffc0000 [ 549.114591][ T37] audit: type=1326 audit(1778838909.341:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1abbce59 code=0x7ffc0000 [ 549.114972][ T37] audit: type=1326 audit(1778838909.341:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1abbce59 code=0x7ffc0000 [ 549.170552][ T37] audit: type=1326 audit(1778838909.401:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1abbce59 code=0x7ffc0000 [ 549.170607][ T37] audit: type=1326 audit(1778838909.401:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5b1abbcbc2 code=0x7ffc0000 [ 549.170650][ T37] audit: type=1326 audit(1778838909.401:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5b1abbcc57 code=0x7ffc0000 [ 549.170693][ T37] audit: type=1326 audit(1778838909.401:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5b1ab79b51 code=0x7ffc0000 [ 549.170735][ T37] audit: type=1326 audit(1778838909.401:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5b1abbdc49 code=0x7ffc0000 [ 549.184598][ T37] audit: type=1326 audit(1778838909.411:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5b1ab79bbb code=0x7ffc0000 [ 549.184657][ T37] audit: type=1326 audit(1778838909.411:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16713 comm="syz.5.4607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1abbce59 code=0x7ffc0000 [ 549.476797][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4609'. [ 549.476828][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4609'. [ 549.623450][T16728] all: renamed from lo (while UP) [ 550.117840][T16739] binder: 16738:16739 ioctl c0306201 0 returned -14 [ 550.169984][T16746] binder: 16738:16746 ioctl c0306201 0 returned -14 [ 550.173845][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4620'. [ 550.196389][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4620'. [ 552.937762][ T5862] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 553.100896][ T5862] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.100929][ T5862] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.102855][ T5862] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 553.102885][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.102909][ T5862] usb 10-1: SerialNumber: syz [ 553.236421][ T5862] usb 10-1: 0:2 : does not exist [ 553.483571][T16838] netlink: 'syz.9.4646': attribute type 32 has an invalid length. [ 556.125949][ T5725] usb 10-1: USB disconnect, device number 2 [ 563.380150][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.380231][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.800763][T17161] syzkaller1: entered promiscuous mode [ 564.800794][T17161] syzkaller1: entered allmulticast mode [ 566.207830][ T37] kauditd_printk_skb: 59 callbacks suppressed [ 566.207852][ T37] audit: type=1326 audit(1778838926.431:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17207 comm="syz.9.4795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574376ce59 code=0x7fc00000 [ 566.208161][ T37] audit: type=1326 audit(1778838926.441:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17207 comm="syz.9.4795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574376ce59 code=0x7fc00000 [ 566.209985][ T37] audit: type=1326 audit(1778838926.441:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17207 comm="syz.9.4795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574376ce59 code=0x7fc00000 [ 566.904609][ T37] audit: type=1326 audit(1778838927.131:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17207 comm="syz.9.4795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5743766bd7 code=0x7fc00000 [ 566.972759][T17234] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4806'. [ 568.391451][T17277] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 568.391485][T17277] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 568.666127][T17276] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 568.666160][T17276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 568.680909][T17283] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(10) [ 568.680938][T17283] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 568.703941][T17291] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(13) [ 568.703973][T17291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 568.716016][T17276] vhci_hcd vhci_hcd.0: Device attached [ 568.728092][T17277] vhci_hcd vhci_hcd.0: Device attached [ 568.728635][T17291] vhci_hcd vhci_hcd.0: Device attached [ 568.760100][T17283] vhci_hcd vhci_hcd.0: Device attached [ 568.762123][T17292] vhci_hcd: connection closed [ 568.785999][T17285] vhci_hcd: connection closed [ 568.792160][T12620] vhci_hcd vhci_hcd.5: stop threads [ 568.795896][T12620] vhci_hcd vhci_hcd.5: release socket [ 568.820545][T17280] vhci_hcd: connection closed [ 568.820908][T17279] vhci_hcd: connection closed [ 568.870983][T12620] vhci_hcd vhci_hcd.5: disconnect device [ 569.005015][T12620] vhci_hcd vhci_hcd.5: stop threads [ 569.005038][T12620] vhci_hcd vhci_hcd.5: release socket [ 569.044131][T12620] vhci_hcd vhci_hcd.5: disconnect device [ 569.055627][T12620] vhci_hcd vhci_hcd.5: stop threads [ 569.055653][T12620] vhci_hcd vhci_hcd.5: release socket [ 569.065678][ T5845] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 569.083509][T12620] vhci_hcd vhci_hcd.5: disconnect device [ 569.083899][T12620] vhci_hcd vhci_hcd.5: stop threads [ 569.083923][T12620] vhci_hcd vhci_hcd.5: release socket [ 569.086997][T12620] vhci_hcd vhci_hcd.5: disconnect device [ 570.067736][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 570.227973][ T9] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 570.228023][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.228046][ T9] usb 10-1: Product: syz [ 570.228063][ T9] usb 10-1: Manufacturer: syz [ 570.228079][ T9] usb 10-1: SerialNumber: syz [ 570.729830][ T9] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 570.775035][ T9] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 571.585840][ T9] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 571.585908][ T9] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 571.586934][ T9] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 571.635651][ T9] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 571.731215][ T9] usb 10-1: USB disconnect, device number 3 [ 572.272039][T17402] netlink: 'syz.5.4879': attribute type 1 has an invalid length. [ 572.272064][T17402] netlink: 'syz.5.4879': attribute type 4 has an invalid length. [ 572.272079][T17402] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4879'. [ 574.328023][ T5805] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 574.507731][ T5805] usb 6-1: Using ep0 maxpacket: 16 [ 574.519021][ T5805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.519051][ T5805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.532216][ T5805] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.532249][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.532268][ T5805] usb 6-1: Product: syz [ 574.532283][ T5805] usb 6-1: Manufacturer: syz [ 574.532297][ T5805] usb 6-1: SerialNumber: syz [ 574.752942][ T5805] usb 6-1: 0:2 : does not exist [ 574.887310][ T5805] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 575.518923][ T5805] usb 6-1: USB disconnect, device number 15 [ 575.965668][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.617639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.637631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.647660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.657634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.667633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.677634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.687662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.747634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.757630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.767647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 581.884349][T17621] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4980'. [ 581.931001][T17621] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4980'. [ 583.812944][T17678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.307019][T17693] netlink: 'syz.9.5012': attribute type 1 has an invalid length. [ 584.428780][T17699] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5012'. [ 584.789986][T17698] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.918267][T17698] bond1: (slave bond2): making interface the new active one [ 584.919271][T17698] bond1: (slave bond2): Enslaving as an active interface with an up link [ 584.985028][T17699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.391419][ T5805] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 585.547974][ T5805] usb 10-1: Using ep0 maxpacket: 16 [ 585.564561][ T5805] usb 10-1: config 0 has no interfaces? [ 585.564606][ T5805] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 585.564738][ T5805] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.596796][ T5805] usb 10-1: config 0 descriptor?? [ 586.117504][ T5862] usb 10-1: USB disconnect, device number 4 [ 586.628498][T17723] ------------[ cut here ]------------ [ 586.628514][T17723] kcov->t != t [ 586.628520][T17723] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz.9.5025/17723 [ 586.628568][T17723] Modules linked in: [ 586.628593][T17723] CPU: 0 UID: 0 PID: 17723 Comm: syz.9.5025 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.628626][T17723] Tainted: [L]=SOFTLOCKUP [ 586.628634][T17723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.628648][T17723] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 586.628674][T17723] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 b3 55 00 48 89 df 5b 41 5e 41 5f e9 39 70 5b 00 7c 1c 5b 41 5e 41 5f e9 bd 38 5c 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb d0 5a 09 48 89 df be 03 00 [ 586.628694][T17723] RSP: 0018:ffffc90004547d20 EFLAGS: 00010206 [ 586.628715][T17723] RAX: 8dbd32790ff93200 RBX: ffff88802ba4c700 RCX: 0000000000000000 [ 586.628733][T17723] RDX: 00000000e0899ed9 RSI: ffffffff8ba74fc0 RDI: 00000000ffffffff [ 586.628749][T17723] RBP: ffffc90004547e78 R08: ffffffff8b1f48e0 R09: ffffffff8dfc81c0 [ 586.628766][T17723] R10: dffffc0000000000 R11: fffffbfff1f11f1f R12: dffffc0000000000 [ 586.628782][T17723] R13: 0000000000000000 R14: ffff88802ba4c708 R15: ffff88802aa78000 [ 586.628797][T17723] FS: 0000555555d31500(0000) GS:ffff888126174000(0000) knlGS:0000000000000000 [ 586.628817][T17723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.628833][T17723] CR2: 000055556818da38 CR3: 0000000029e08000 CR4: 00000000003526f0 [ 586.628855][T17723] Call Trace: [ 586.628863][T17723] [ 586.628876][T17723] do_exit+0x150/0x22c0 [ 586.628905][T17723] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.628935][T17723] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 586.628967][T17723] ? reacquire_held_locks+0x104/0x190 [ 586.628999][T17723] ? rt_spin_lock+0x1e0/0x400 [ 586.629021][T17723] ? __pfx_do_exit+0x10/0x10 [ 586.629051][T17723] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 586.629086][T17723] ? rt_spin_unlock+0x160/0x200 [ 586.629114][T17723] do_group_exit+0x21b/0x2d0 [ 586.629160][T17723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.629187][T17723] __x64_sys_exit_group+0x3f/0x40 [ 586.629221][T17723] x64_sys_call+0x221a/0x2240 [ 586.629249][T17723] do_syscall_64+0x15f/0xf80 [ 586.629275][T17723] ? trace_irq_disable+0x3b/0x140 [ 586.629302][T17723] ? clear_bhb_loop+0x40/0x90 [ 586.629332][T17723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.629355][T17723] RIP: 0033:0x7f574376ce59 [ 586.629377][T17723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.629397][T17723] RSP: 002b:00007fff2f54d9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 586.629421][T17723] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f574376ce59 [ 586.629436][T17723] RDX: 00007f57429c9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.629450][T17723] RBP: 00007fff2f54da3c R08: 0000000000000000 R09: 00000000000927c0 [ 586.629465][T17723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 586.629478][T17723] R13: 00000000000927c0 R14: 000000000008eb3c R15: 00007fff2f54da90 [ 586.629533][T17723] [ 586.629545][T17723] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 586.629565][T17723] CPU: 0 UID: 0 PID: 17723 Comm: syz.9.5025 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.629595][T17723] Tainted: [L]=SOFTLOCKUP [ 586.629604][T17723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.629616][T17723] Call Trace: [ 586.629624][T17723] [ 586.629634][T17723] vpanic+0x56c/0xa60 [ 586.629664][T17723] ? __pfx__printk+0x10/0x10 [ 586.629697][T17723] ? __pfx_vpanic+0x10/0x10 [ 586.629722][T17723] ? is_bpf_text_address+0x292/0x2b0 [ 586.629752][T17723] ? is_bpf_text_address+0x26/0x2b0 [ 586.629798][T17723] panic+0xc5/0xd0 [ 586.629825][T17723] ? __pfx_panic+0x10/0x10 [ 586.629880][T17723] __warn+0x315/0x4c0 [ 586.629903][T17723] ? kcov_task_exit+0xf5/0x160 [ 586.629928][T17723] ? kcov_task_exit+0xf5/0x160 [ 586.629953][T17723] __report_bug+0x29a/0x540 [ 586.629990][T17723] ? kcov_task_exit+0xf5/0x160 [ 586.630014][T17723] ? __pfx___report_bug+0x10/0x10 [ 586.630044][T17723] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 586.630071][T17723] ? rt_spin_lock+0x1e0/0x400 [ 586.630095][T17723] ? rt_spin_lock+0x1e0/0x400 [ 586.630120][T17723] ? kcov_task_exit+0xf5/0x160 [ 586.630152][T17723] report_bug+0x16a/0x220 [ 586.630180][T17723] ? kcov_task_exit+0xf5/0x160 [ 586.630201][T17723] ? kcov_task_exit+0xf7/0x160 [ 586.630223][T17723] handle_bug+0x9c/0x200 [ 586.630254][T17723] exc_invalid_op+0x1a/0x50 [ 586.630284][T17723] asm_exc_invalid_op+0x1a/0x20 [ 586.630305][T17723] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 586.630328][T17723] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 b3 55 00 48 89 df 5b 41 5e 41 5f e9 39 70 5b 00 7c 1c 5b 41 5e 41 5f e9 bd 38 5c 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb d0 5a 09 48 89 df be 03 00 [ 586.630345][T17723] RSP: 0018:ffffc90004547d20 EFLAGS: 00010206 [ 586.630365][T17723] RAX: 8dbd32790ff93200 RBX: ffff88802ba4c700 RCX: 0000000000000000 [ 586.630382][T17723] RDX: 00000000e0899ed9 RSI: ffffffff8ba74fc0 RDI: 00000000ffffffff [ 586.630395][T17723] RBP: ffffc90004547e78 R08: ffffffff8b1f48e0 R09: ffffffff8dfc81c0 [ 586.630412][T17723] R10: dffffc0000000000 R11: fffffbfff1f11f1f R12: dffffc0000000000 [ 586.630428][T17723] R13: 0000000000000000 R14: ffff88802ba4c708 R15: ffff88802aa78000 [ 586.630453][T17723] ? rt_spin_lock+0x1e0/0x400 [ 586.630487][T17723] do_exit+0x150/0x22c0 [ 586.630518][T17723] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.630548][T17723] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 586.630580][T17723] ? reacquire_held_locks+0x104/0x190 [ 586.630613][T17723] ? rt_spin_lock+0x1e0/0x400 [ 586.630636][T17723] ? __pfx_do_exit+0x10/0x10 [ 586.630666][T17723] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 586.630721][T17723] ? rt_spin_unlock+0x160/0x200 [ 586.630747][T17723] do_group_exit+0x21b/0x2d0 [ 586.630780][T17723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.630805][T17723] __x64_sys_exit_group+0x3f/0x40 [ 586.630834][T17723] x64_sys_call+0x221a/0x2240 [ 586.630859][T17723] do_syscall_64+0x15f/0xf80 [ 586.630886][T17723] ? trace_irq_disable+0x3b/0x140 [ 586.630911][T17723] ? clear_bhb_loop+0x40/0x90 [ 586.630941][T17723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.630963][T17723] RIP: 0033:0x7f574376ce59 [ 586.630983][T17723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.631000][T17723] RSP: 002b:00007fff2f54d9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 586.631023][T17723] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f574376ce59 [ 586.631038][T17723] RDX: 00007f57429c9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.631052][T17723] RBP: 00007fff2f54da3c R08: 0000000000000000 R09: 00000000000927c0 [ 586.631067][T17723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 586.631081][T17723] R13: 00000000000927c0 R14: 000000000008eb3c R15: 00007fff2f54da90 [ 586.631117][T17723] [ 586.631756][T17723] Kernel Offset: disabled