last executing test programs: 7m15.26487148s ago: executing program 1 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0xf691, 0x10100, 0xfffffffe, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) 7m10.884405067s ago: executing program 1 (id=191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r0) 7m10.503579475s ago: executing program 1 (id=193): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000540), 0x0, 0x1, 0x5, 0x15) r1 = openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x4be001, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000004c0)=0x1a2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff64, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) epoll_create1(0x0) sendto$inet(r5, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d88", 0xfdef, 0x11, 0x0, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xfffffffc, 0x400, 0x8003, 0x25f}, &(0x7f0000000240), &(0x7f0000000200)) syz_io_uring_setup(0x2421, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) 7m6.324999478s ago: executing program 1 (id=202): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@generic, &(0x7f0000000040)=0x80, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) 7m1.401387008s ago: executing program 1 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r0) 7m0.115144845s ago: executing program 1 (id=220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x202, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_flowlabel\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x630e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000080)=0x2e9aa845) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8], 0x0, 0xfffffffa, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x10, 0x6fb}, 0x94) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000400), 0x1, &(0x7f0000000580)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6m44.620478741s ago: executing program 32 (id=220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x202, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_flowlabel\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x630e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000080)=0x2e9aa845) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8], 0x0, 0xfffffffa, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x10, 0x6fb}, 0x94) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000400), 0x1, &(0x7f0000000580)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m7.072326338s ago: executing program 2 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x25, {0x3, 0x0, 0x1000003, 0x105, 0x3fe, 0xee, {0x6, 0xa, 0x3fffd, 0xfe2b25d, 0x0, 0x0, 0x9, 0x1, 0x8000, 0x4000, 0x7, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m6.621211702s ago: executing program 2 (id=507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) 4m5.37951541s ago: executing program 2 (id=508): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000ffff00000000000000001100000085000000500000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x34f2abf5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x1013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000000]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 4m3.871804427s ago: executing program 2 (id=511): socket$netlink(0x10, 0x3, 0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x1, 0x0, 0x18}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TUPLE_MASTER={0x4}, @CTA_FILTER={0x4}]}, 0x64}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r5, &(0x7f0000000a00)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e64de6855c66e7190ed911b5d36f3db423da49146adf5742e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x98, 0xef8d) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) 4m2.65873489s ago: executing program 2 (id=512): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) 4m1.342824323s ago: executing program 2 (id=515): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000001c0)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x25dfdbfb, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl(r8, 0x5, &(0x7f00000001c0)="48c2d0613a940481e57515ecfb6ebf78c484ff72e2c54c34a15f4e0f5f8de4513127975c28007d7e1ba5989ca9f266dcad84ef093336581da637b27e4308bc8dc6d8fd02965f307197c276235d8e7079304447eef10061525e643e6b5eedb2068106313771d32441b56466ef80bcff023fadd73a749a0084f2bae11ab43322d311c118d27df08d88c6b0c4cf5ee0ff8e41b45e52ee9525358b163b1ead0b3c07ae85c23237e6443236d71c684ca8") 3m45.924611784s ago: executing program 33 (id=515): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000001c0)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x25dfdbfb, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl(r8, 0x5, &(0x7f00000001c0)="48c2d0613a940481e57515ecfb6ebf78c484ff72e2c54c34a15f4e0f5f8de4513127975c28007d7e1ba5989ca9f266dcad84ef093336581da637b27e4308bc8dc6d8fd02965f307197c276235d8e7079304447eef10061525e643e6b5eedb2068106313771d32441b56466ef80bcff023fadd73a749a0084f2bae11ab43322d311c118d27df08d88c6b0c4cf5ee0ff8e41b45e52ee9525358b163b1ead0b3c07ae85c23237e6443236d71c684ca8") 9.830846282s ago: executing program 0 (id=901): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 9.390024647s ago: executing program 0 (id=902): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 9.156011978s ago: executing program 0 (id=903): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50401, 0x1b) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB='M\x00'/16, @ANYRES32], 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026"], 0x80}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x200900) socket(0xa, 0x1, 0x0) 6.526336238s ago: executing program 0 (id=905): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b11, 0x0) 4.672165267s ago: executing program 4 (id=909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) close(r0) 4.52288722s ago: executing program 3 (id=911): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) preadv(r0, 0x0, 0x0, 0x5, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in6=@mcast1, 0x4d3, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x4, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb-aes-ce\x00'}}}, @lastused={0x0, 0xf, 0x4}, @algo_auth_trunc={0x1f, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, 0x0) setxattr$incfs_id(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000018000000000000020000000003ff09006c0d00060015a9ce6da96ab458e480100008800c000380080001000000000014be71cd844303adf61adc6066343beffeed5971bb8d5d3966b97402c6c4ba40ee187dfcb86f5dfd1c9aa6e8e81bf799c6a02470c499fbb0a5fe349dbf38d32cbfb59298df07d5e8ab2906256bccb98f35ae17f478267a48472e5bd7d4c9a169b409b6eff20dffddd8b533e73bfdf4d4c925c515d038cf21f610b5106561ac90df00"/194], 0x38}}, 0x0) 4.417135827s ago: executing program 3 (id=912): r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) unshare(0x26020480) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x10000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x9, 0x0, 0x0, 0xd3}) socket$vsock_stream(0x28, 0x1, 0x0) ftruncate(r4, 0x5) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x7}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) setuid(0xee00) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 3.256286427s ago: executing program 0 (id=913): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, r3, 0x1, 0x0, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4040020}, 0x80010) 2.980138958s ago: executing program 3 (id=914): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000280)={'filter\x00', 0x0, 0x3, 0x0, [0x1, 0x800, 0x702c, 0x3, 0x30873ae, 0x3], 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x4000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00', 0x4}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x0, 0x158, 0x0, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'pimreg0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x6a, 0x3, 0x20000000, 0x4) read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x2020) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000180)={&(0x7f000001c000)={[{&(0x7f000001b000)="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", 0xfc0, 0x3}]}, 0x1, 0x1}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$kcm(0x10, 0x2, 0x0) 2.891586915s ago: executing program 4 (id=915): mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000634000/0x4000)=nil, 0x4000, 0x3, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000b64000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x20044040) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25ff02000000000000dc8b850f238466ccfff57a000000ad6e911b51818462b400", 0x30}], 0x1}, 0x0) 2.196771845s ago: executing program 4 (id=916): r0 = openat$mixer(0xffffff9c, 0x0, 0x300, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000040)) 2.092363564s ago: executing program 3 (id=917): clock_gettime(0x0, &(0x7f0000000140)) 1.980157508s ago: executing program 4 (id=918): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffffc, 0x0, 0x0, 0x76e, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r3, r1) flock(r1, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1.921790114s ago: executing program 3 (id=919): openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0x5}, 0x18) get_robust_list(0x0, 0x0, &(0x7f0000000400)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r2 = userfaultfd(0x80001) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0c00238006000100370000004d4e2e57259bf1ab2e1ac2a1f871469d3a07e02bf7a8dff5c19c1bcc80a246c56ec0b5ddaf4fffa2e763356308186dc71930d24a0f89f543138f6193f52531b68274b3622ebf544301df16193c404b3640cd732358a3e8c92c142cefd28134b6ea47566402454324d5dfe011dd3a5d249aebd598d96fc42597998aa94b8cda50465fb04283551d8d08c34a5a4ecf6bf6d0418c9a7bd570fe5467e6371a473378dba2c78e8196478ee967a972f913b7305a8a64becc8a6943d9d7ed7de9da93bbe05ffc0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x44831}, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/57, 0x304000, 0x800, 0x0, 0x3}, 0x1c) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 1.355524107s ago: executing program 4 (id=920): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 1.27637468s ago: executing program 3 (id=921): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x404cb50, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 105.259008ms ago: executing program 4 (id=922): r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) unshare(0x26020480) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x10000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x9, 0x0, 0x0, 0xd3}) socket$vsock_stream(0x28, 0x1, 0x0) ftruncate(r4, 0x5) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x7}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) setuid(0xee00) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 0s ago: executing program 0 (id=923): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000000c0), 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000003c0)={0x0, 0x4, 0x1, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x13, r1, 0x0) readlink(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000002540)=0x1) kernel console output (not intermixed with test programs): an invalid descriptor of length 0, skipping remainder of the config [ 278.204358][ T5989] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.204380][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.226275][ T5989] usb 5-1: config 0 descriptor?? [ 278.268445][ T5989] pwc: Askey VC010 type 2 USB webcam detected. [ 278.436068][ T43] team0 (unregistering): Port device team_slave_0 removed [ 278.636077][ T5989] pwc: recv_control_msg error -32 req 02 val 2b00 [ 278.637230][ T5989] pwc: recv_control_msg error -32 req 02 val 2700 [ 278.671910][ T5989] pwc: recv_control_msg error -32 req 02 val 2c00 [ 278.672435][ T5989] pwc: recv_control_msg error -32 req 04 val 1000 [ 278.673005][ T5989] pwc: recv_control_msg error -32 req 04 val 1300 [ 278.673572][ T5989] pwc: recv_control_msg error -32 req 04 val 1400 [ 278.890400][ T5989] pwc: recv_control_msg error -71 req 02 val 2100 [ 278.892019][ T5989] pwc: recv_control_msg error -71 req 04 val 1500 [ 278.896332][ T5989] pwc: recv_control_msg error -71 req 02 val 2500 [ 278.897703][ T5989] pwc: recv_control_msg error -71 req 02 val 2400 [ 278.906525][ T5989] pwc: recv_control_msg error -71 req 02 val 2600 [ 278.909738][ T5989] pwc: recv_control_msg error -71 req 02 val 2900 [ 278.910210][ T5989] pwc: recv_control_msg error -71 req 02 val 2800 [ 278.911082][ T5989] pwc: recv_control_msg error -71 req 04 val 1100 [ 278.911616][ T5989] pwc: recv_control_msg error -71 req 04 val 1200 [ 278.914781][ T5989] pwc: Registered as video103. [ 278.921963][ T5989] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 278.945612][ T5989] usb 5-1: USB disconnect, device number 6 [ 279.411265][ T7399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 279.411290][ T7399] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 279.411948][ T7399] vhci_hcd vhci_hcd.0: Device attached [ 279.614378][ T7400] vhci_hcd: connection closed [ 279.614749][ T5972] vhci_hcd: stop threads [ 279.614765][ T5972] vhci_hcd: release socket [ 279.614835][ T5972] vhci_hcd: disconnect device [ 279.933056][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.057915][ T7305] chnl_net:caif_netlink_parms(): no params data found [ 281.564678][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.228743][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.395096][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.658996][ T5989] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 283.808938][ T5989] usb 1-1: Using ep0 maxpacket: 8 [ 283.811402][ T5989] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 283.811437][ T5989] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 283.811461][ T5989] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.811484][ T5989] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.811524][ T5989] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.811545][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.946679][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.343873][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.627270][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.663888][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.800835][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.972558][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.018635][ T5989] usb 1-1: can't set config #16, error -71 [ 285.023209][ T5989] usb 1-1: USB disconnect, device number 3 [ 285.354339][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.354477][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.354672][ T7305] bridge_slave_0: entered allmulticast mode [ 285.357375][ T7305] bridge_slave_0: entered promiscuous mode [ 285.450734][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.450868][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.451076][ T7305] bridge_slave_1: entered allmulticast mode [ 285.453768][ T7305] bridge_slave_1: entered promiscuous mode [ 286.054720][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.106263][ T7456] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 286.106289][ T7456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 286.106389][ T7456] vhci_hcd vhci_hcd.0: Device attached [ 286.146239][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.305717][ T7457] vhci_hcd: connection closed [ 286.306325][ T5965] vhci_hcd: stop threads [ 286.306341][ T5965] vhci_hcd: release socket [ 286.306411][ T5965] vhci_hcd: disconnect device [ 287.374578][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.982928][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.991584][ T7305] team0: Port device team_slave_0 added [ 289.029079][ T7305] team0: Port device team_slave_1 added [ 289.354999][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.717667][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.717682][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.717705][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.720078][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.720091][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.720114][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.152494][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.122939][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.426563][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.237303][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.333797][ T7305] hsr_slave_0: entered promiscuous mode [ 292.335294][ T7305] hsr_slave_1: entered promiscuous mode [ 292.336291][ T7305] debugfs: 'hsr0' already exists in 'hsr' [ 292.336313][ T7305] Cannot create hsr debugfs directory [ 292.346635][ T5881] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 292.636801][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.638163][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 292.640478][ T5881] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 292.640507][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 292.640530][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.640552][ T5881] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.640591][ T5881] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.640611][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.666809][ T5880] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 293.881946][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.020120][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.030462][ T5881] usb 4-1: can't set config #16, error -71 [ 294.086646][ T5881] usb 4-1: USB disconnect, device number 4 [ 294.329323][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.873934][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 297.949997][ T7534] bond0: entered promiscuous mode [ 297.950019][ T7534] bond_slave_0: entered promiscuous mode [ 297.950252][ T7534] bond_slave_1: entered promiscuous mode [ 297.976731][ T7534] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.019052][ T7534] bond0: left promiscuous mode [ 298.019073][ T7534] bond_slave_0: left promiscuous mode [ 298.019337][ T7534] bond_slave_1: left promiscuous mode [ 298.056001][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.607688][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.216564][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.629665][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.580204][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.504705][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.564026][ T5881] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 301.724498][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 301.727252][ T5881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 301.727270][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 301.727283][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.727294][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.727316][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.727327][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.118746][ T5881] usb 3-1: usb_control_msg returned -71 [ 307.118775][ T5881] usbtmc 3-1:16.0: can't read capabilities [ 307.286430][ T5881] usb 3-1: USB disconnect, device number 8 [ 308.331534][ T7305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 308.447696][ T7305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.486943][ T7305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.663565][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.763113][ T7305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 309.126216][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.479273][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.878553][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.990889][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.031250][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.031398][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.119888][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.123217][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.086067][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.086137][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.168692][ T7305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.453651][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.238969][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.261972][ T7659] tty tty3: ldisc open failed (-12), clearing slot 2 [ 319.822058][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.246867][ T7305] veth0_vlan: entered promiscuous mode [ 320.267517][ T7305] veth1_vlan: entered promiscuous mode [ 320.372552][ T7305] veth0_macvtap: entered promiscuous mode [ 320.411649][ T7305] veth1_macvtap: entered promiscuous mode [ 320.890016][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.101785][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.196764][ T5974] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.197118][ T5974] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.197157][ T5974] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.197192][ T5974] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.610337][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.756953][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.174302][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.690166][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.816769][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.020109][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.508459][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.973299][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.045604][ T7732] 9pnet_virtio: no channels available for device syz [ 326.458152][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.465479][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.466414][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.492249][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.496520][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.366774][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.920805][ T5114] Bluetooth: hci2: command tx timeout [ 332.372213][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.549822][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.652059][ T5114] Bluetooth: hci2: command tx timeout [ 333.234863][ T5880] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 333.414795][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 333.453267][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 333.453299][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 333.453322][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.453343][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.453383][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.453404][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.295904][ T5974] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.914431][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.914508][ T5114] Bluetooth: hci2: command tx timeout [ 334.914672][ T5880] usb 5-1: usb_control_msg returned -71 [ 334.914713][ T5880] usbtmc 5-1:16.0: can't read capabilities [ 334.956176][ T5880] usb 5-1: USB disconnect, device number 7 [ 335.282884][ T5974] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.427574][ T7830] 9pnet_virtio: no channels available for device syz [ 336.983913][ T5114] Bluetooth: hci2: command tx timeout [ 339.459333][ T5974] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.395186][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 340.449107][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 341.816308][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 341.874724][ T7874] bond0: entered promiscuous mode [ 341.874737][ T7874] bond_slave_0: entered promiscuous mode [ 341.879515][ T7874] bond_slave_1: entered promiscuous mode [ 341.894563][ T7874] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 341.899284][ T7874] bond0: left promiscuous mode [ 341.899300][ T7874] bond_slave_0: left promiscuous mode [ 341.899515][ T7874] bond_slave_1: left promiscuous mode [ 342.558457][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.725555][ T5974] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.789755][ T7737] chnl_net:caif_netlink_parms(): no params data found [ 343.597611][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.761926][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.274502][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.423038][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.806569][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.071353][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.863674][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.863807][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.864012][ T7737] bridge_slave_0: entered allmulticast mode [ 345.877111][ T7737] bridge_slave_0: entered promiscuous mode [ 345.909139][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.909272][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.909481][ T7737] bridge_slave_1: entered allmulticast mode [ 345.918199][ T7737] bridge_slave_1: entered promiscuous mode [ 346.311339][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.480555][ T7737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.557920][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 346.600781][ T7737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.979314][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 347.197470][ T5881] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 347.197502][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 347.197525][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.197552][ T5881] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.197593][ T5881] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.197613][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.740249][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'. [ 347.815197][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 348.478807][ T7737] team0: Port device team_slave_0 added [ 348.570015][ T5974] bridge_slave_1: left allmulticast mode [ 348.570044][ T5974] bridge_slave_1: left promiscuous mode [ 348.692098][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.324002][ T5974] bridge_slave_0: left allmulticast mode [ 349.324030][ T5974] bridge_slave_0: left promiscuous mode [ 349.324319][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.355268][ T5881] usb 1-1: usb_control_msg returned -71 [ 350.355298][ T5881] usbtmc 1-1:16.0: can't read capabilities [ 350.423327][ T5881] usb 1-1: USB disconnect, device number 4 [ 354.394985][ T7975] fuse: Bad value for 'fd' [ 356.778448][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 356.914773][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.069402][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.131783][ T5974] bond0 (unregistering): Released all slaves [ 357.197436][ T7737] team0: Port device team_slave_1 added [ 357.619839][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 358.665190][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.665206][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.665230][ T7737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.355282][ T5974] hsr_slave_0: left promiscuous mode [ 359.424269][ T5974] hsr_slave_1: left promiscuous mode [ 359.426900][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.427020][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.603910][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.603938][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.893512][ T5974] veth1_macvtap: left promiscuous mode [ 360.893618][ T5974] veth0_macvtap: left promiscuous mode [ 360.893890][ T5974] veth1_vlan: left promiscuous mode [ 360.894062][ T5974] veth0_vlan: left promiscuous mode [ 365.159152][ T8056] ufs: You didn't specify the type of your ufs filesystem [ 365.159152][ T8056] [ 365.159152][ T8056] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 365.159152][ T8056] [ 365.159152][ T8056] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 365.159189][ T8056] ufs: ufstype=old is supported read-only [ 367.229839][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.425190][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.847953][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 368.131184][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 369.311053][ T8088] 9pnet_virtio: no channels available for device syz [ 369.564700][ T5989] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 369.714623][ T5989] usb 1-1: Using ep0 maxpacket: 32 [ 369.716894][ T5989] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 369.721172][ T5989] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 369.721198][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 369.721216][ T5989] usb 1-1: Product: syz [ 369.721228][ T5989] usb 1-1: Manufacturer: syz [ 369.721241][ T5989] usb 1-1: SerialNumber: syz [ 369.765586][ T5989] usb 1-1: config 0 descriptor?? [ 369.772942][ T8086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 369.789694][ T5989] hub 1-1:0.0: bad descriptor, ignoring hub [ 369.789731][ T5989] hub 1-1:0.0: probe with driver hub failed with error -5 [ 369.964429][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.792252][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.795623][ T8086] fuse: Unknown parameter 'use00000000000000000000' [ 370.840694][ T31] usb 1-1: USB disconnect, device number 5 [ 371.390114][ T8100] 9pnet_virtio: no channels available for device syz [ 372.232224][ T8124] 9pnet_virtio: no channels available for device syz [ 373.255182][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 374.440063][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 375.513376][ T5974] team0 (unregistering): Port device team_slave_1 removed [ 376.022352][ T5974] team0 (unregistering): Port device team_slave_0 removed [ 376.518166][ T8158] 9pnet_virtio: no channels available for device syz [ 376.708789][ T8165] 9pnet_virtio: no channels available for device syz [ 376.977840][ T1229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 377.132479][ T1229] usb 4-1: Using ep0 maxpacket: 32 [ 377.135005][ T1229] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 377.138233][ T1229] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 377.138258][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 377.138277][ T1229] usb 4-1: Product: syz [ 377.138290][ T1229] usb 4-1: Manufacturer: syz [ 377.138303][ T1229] usb 4-1: SerialNumber: syz [ 377.159940][ T1229] usb 4-1: config 0 descriptor?? [ 377.160972][ T8165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.171880][ T1229] hub 4-1:0.0: bad descriptor, ignoring hub [ 377.171921][ T1229] hub 4-1:0.0: probe with driver hub failed with error -5 [ 377.502774][ T984] usb 4-1: USB disconnect, device number 5 [ 377.594694][ T8160] fuse: Unknown parameter 'use00000000000000000000' [ 378.502519][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.502588][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.123902][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.123917][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.123936][ T7737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.764815][ T5796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.767035][ T5796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.768043][ T5796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.769097][ T5796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.770310][ T5796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.044230][ T8213] 9pnet_virtio: no channels available for device syz [ 381.857703][ T7737] hsr_slave_0: entered promiscuous mode [ 381.936459][ T7737] hsr_slave_1: entered promiscuous mode [ 381.970115][ T7737] debugfs: 'hsr0' already exists in 'hsr' [ 381.970142][ T7737] Cannot create hsr debugfs directory [ 382.824027][ T5114] Bluetooth: hci5: command tx timeout [ 387.298193][ T5114] Bluetooth: hci5: command tx timeout [ 389.369159][ T5114] Bluetooth: hci5: command tx timeout [ 390.827170][ T8205] chnl_net:caif_netlink_parms(): no params data found [ 390.857817][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.888713][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.891956][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.897217][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.925410][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.285748][ T8293] 9pnet_virtio: no channels available for device syz [ 391.448670][ T5114] Bluetooth: hci5: command tx timeout [ 391.899358][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.968108][ T5114] Bluetooth: hci3: command tx timeout [ 395.048003][ T5114] Bluetooth: hci3: command tx timeout [ 395.912109][ T8337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 396.153675][ T5974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.137927][ T5114] Bluetooth: hci3: command tx timeout [ 397.366510][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.259052][ T8354] fuse: Invalid rootmode [ 398.849949][ T5974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.287982][ T5114] Bluetooth: hci3: command tx timeout [ 401.072084][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.105020][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.334614][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.361761][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.424230][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.775443][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.042135][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.513109][ T5974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.572023][ T8408] 9pnet_virtio: no channels available for device syz [ 403.659821][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.659942][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.660164][ T8205] bridge_slave_0: entered allmulticast mode [ 403.695136][ T8205] bridge_slave_0: entered promiscuous mode [ 403.772833][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.772974][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.773206][ T8205] bridge_slave_1: entered allmulticast mode [ 403.786283][ T8205] bridge_slave_1: entered promiscuous mode [ 404.056784][ T5974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.791600][ T8205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.829390][ T8205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.507072][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 407.507272][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 407.578406][ T8444] ceph: No mds server is up or the cluster is laggy [ 407.587679][ T8205] team0: Port device team_slave_0 added [ 407.733545][ T8205] team0: Port device team_slave_1 added [ 410.261942][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.262085][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.262211][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.262342][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.262466][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.262592][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.262716][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.262841][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.262964][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.263096][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.263408][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.263536][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.263664][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.263794][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.263922][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.264046][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.264168][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.264297][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.264424][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.264546][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.264806][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.264936][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.265059][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.265183][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.265344][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.265816][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.265962][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.266092][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.266218][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.266353][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.266478][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.266643][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.266769][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.266903][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.267027][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.267151][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.267307][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.267435][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.267560][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.267689][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.267819][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.267944][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.268070][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.268196][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.268329][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.268455][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.268608][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.268738][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.268867][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.268993][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.269120][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.269244][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.269377][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.269499][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.269618][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.269748][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.269875][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.270000][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.270122][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.270252][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.270380][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.270524][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.270657][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.270794][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.270917][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.271040][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.271163][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.271296][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.271424][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.271550][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.271679][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.271944][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.272071][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.272196][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.272330][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.272455][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.272580][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.272707][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.272830][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.272952][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.273070][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.273328][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.273454][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.273581][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.273733][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.273863][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.273991][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.274118][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.274245][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.274377][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.274507][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.274633][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.274755][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.274874][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.274992][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.275141][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.275261][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.275389][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.275509][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.275628][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.275748][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.275877][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.276010][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.276134][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.276258][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.276386][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.276511][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.276631][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.276749][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.276879][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.277003][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.277124][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.277233][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.277360][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.277480][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.277598][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.277719][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.277840][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.277958][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.278102][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.278221][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.278349][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.278471][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.278593][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.278715][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.278834][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.278953][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.279076][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.279198][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.279325][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.279443][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.279584][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.279703][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.279821][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.279943][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.280061][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.280178][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.280302][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.280424][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.280543][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.280664][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.280782][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.280905][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.281027][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.281149][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.281276][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.282718][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.282841][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.282964][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.283085][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.283262][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.283390][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.283511][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.283634][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.283758][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.283878][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.283996][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.284114][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.284233][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.284395][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.284518][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.284636][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.284756][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.284874][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.284992][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.285111][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.285231][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.285370][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.285513][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.285637][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.285756][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.285876][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.285998][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.286121][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.286243][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.286368][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.286487][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.286609][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.286733][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.286875][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.286999][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.287122][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.287240][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.287363][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.287485][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.287603][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.287726][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.287845][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.287967][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 410.288088][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 412.260885][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.470263][ T8478] ufs: You didn't specify the type of your ufs filesystem [ 412.470263][ T8478] [ 412.470263][ T8478] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 412.470263][ T8478] [ 412.470263][ T8478] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 412.470508][ T8478] ufs: ufstype=old is supported read-only [ 412.509363][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.016372][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.323118][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.323130][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.323142][ T8205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.391780][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.391796][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.391819][ T8205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.963280][ T5974] bridge_slave_1: left allmulticast mode [ 415.963307][ T5974] bridge_slave_1: left promiscuous mode [ 415.965297][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.108751][ T37] audit: type=1326 audit(1760369407.356:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8497 comm="syz.4.604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5646fceec9 code=0x0 [ 416.142941][ T5974] bridge_slave_0: left allmulticast mode [ 416.142966][ T5974] bridge_slave_0: left promiscuous mode [ 416.143225][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.511690][ T1229] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 416.684482][ T1229] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.684511][ T1229] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 416.684529][ T1229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 416.684580][ T1229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 416.684604][ T1229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 416.692950][ T1229] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 416.692975][ T1229] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 416.693000][ T1229] usb 5-1: Product: syz [ 416.693013][ T1229] usb 5-1: Manufacturer: syz [ 416.968464][ T1229] cdc_wdm 5-1:1.0: skipping garbage [ 416.968484][ T1229] cdc_wdm 5-1:1.0: skipping garbage [ 416.969035][ T1229] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 419.073163][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.371583][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.389947][ T984] usb 5-1: USB disconnect, device number 8 [ 419.831941][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.900161][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.996516][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.818757][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.440824][ T1229] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 421.566377][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.597932][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.622407][ T984] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 421.660352][ T1229] usb 1-1: Using ep0 maxpacket: 8 [ 421.663320][ T1229] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 421.663344][ T1229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 421.663357][ T1229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.663368][ T1229] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.663390][ T1229] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.663401][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.820160][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 421.829833][ T984] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 421.844714][ T984] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.844741][ T984] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.844764][ T984] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.844786][ T984] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.865039][ T984] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.865066][ T984] usb 5-1: New USB device strings: Mfr=234, Product=255, SerialNumber=0 [ 421.865085][ T984] usb 5-1: Product: syz [ 421.865098][ T984] usb 5-1: Manufacturer: syz [ 421.981920][ T8544] 9pnet_virtio: no channels available for device syz [ 422.157156][ T984] usb 5-1: usb_control_msg returned -32 [ 422.157202][ T984] usbtmc 5-1:16.0: can't read capabilities [ 422.433202][ T5881] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 422.448121][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.501242][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.524814][ T5974] bond0 (unregistering): Released all slaves [ 422.554211][ T8545] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 422.599965][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 422.602761][ T5881] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 422.607783][ T5881] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 422.607904][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 422.607923][ T5881] usb 4-1: Product: syz [ 422.607936][ T5881] usb 4-1: Manufacturer: syz [ 422.607950][ T5881] usb 4-1: SerialNumber: syz [ 422.729244][ T5881] usb 4-1: config 0 descriptor?? [ 422.735644][ T8544] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 422.774237][ T5873] usb 5-1: USB disconnect, device number 9 [ 422.787859][ T5881] hub 4-1:0.0: bad descriptor, ignoring hub [ 422.787896][ T5881] hub 4-1:0.0: probe with driver hub failed with error -5 [ 423.026899][ T1229] usb 1-1: usb_control_msg returned -71 [ 423.026946][ T1229] usbtmc 1-1:16.0: can't read capabilities [ 423.040109][ T1229] usb 1-1: USB disconnect, device number 6 [ 423.051490][ T5881] usb 4-1: USB disconnect, device number 6 [ 425.968474][ T8205] hsr_slave_0: entered promiscuous mode [ 425.973455][ T8205] hsr_slave_1: entered promiscuous mode [ 425.973982][ T8205] debugfs: 'hsr0' already exists in 'hsr' [ 425.973995][ T8205] Cannot create hsr debugfs directory [ 425.975532][ T8281] chnl_net:caif_netlink_parms(): no params data found [ 426.673265][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.884376][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.042338][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.641078][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.401748][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.458402][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.572277][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.647282][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.493039][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.039792][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.084712][ T8602] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 431.707471][ T5974] hsr_slave_0: left promiscuous mode [ 431.753382][ T5974] hsr_slave_1: left promiscuous mode [ 431.754346][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.754368][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.800366][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.800392][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.947472][ T1229] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 431.975491][ T5974] veth1_macvtap: left promiscuous mode [ 431.975606][ T5974] veth0_macvtap: left promiscuous mode [ 431.976776][ T5974] veth1_vlan: left promiscuous mode [ 431.976965][ T5974] veth0_vlan: left promiscuous mode [ 431.988732][ T8623] netlink: 104 bytes leftover after parsing attributes in process `syz.4.638'. [ 432.035281][ T8623] 9pnet_fd: Insufficient options for proto=fd [ 432.097295][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 432.124124][ T1229] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 432.124156][ T1229] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 432.124179][ T1229] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.124200][ T1229] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.124251][ T1229] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.124272][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.116198][ T1229] usb 4-1: usb_control_msg returned -71 [ 434.116244][ T1229] usbtmc 4-1:16.0: can't read capabilities [ 434.157172][ T1229] usb 4-1: USB disconnect, device number 7 [ 434.566608][ T5880] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 434.716930][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 434.720509][ T5880] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 434.720524][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 434.720535][ T5880] usb 1-1: Product: syz [ 434.720541][ T5880] usb 1-1: Manufacturer: syz [ 434.720548][ T5880] usb 1-1: SerialNumber: syz [ 434.723985][ T5880] usb 1-1: config 0 descriptor?? [ 439.745228][ T1229] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 439.895291][ T1229] usb 5-1: Using ep0 maxpacket: 8 [ 439.897720][ T1229] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 439.897750][ T1229] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 439.897772][ T1229] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 439.897794][ T1229] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.897834][ T1229] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 439.897854][ T1229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.925357][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.925428][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.076302][ T5974] team0 (unregistering): Port device team_slave_1 removed [ 440.276924][ T5974] team0 (unregistering): Port device team_slave_0 removed [ 441.022522][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.061332][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.074379][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.101087][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.107690][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 441.459874][ T1229] usb 5-1: usb_control_msg returned -71 [ 441.459921][ T1229] usbtmc 5-1:16.0: can't read capabilities [ 441.514805][ T1229] usb 5-1: USB disconnect, device number 10 [ 442.901224][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.729804][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.731197][ T5796] Bluetooth: hci2: command tx timeout [ 444.326916][ T8281] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 445.583126][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.699631][ T5114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 445.723685][ T5114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 445.724765][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 445.727302][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 445.727914][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 445.755806][ T5114] Bluetooth: hci2: command tx timeout [ 445.948975][ T5880] usb 1-1: USB disconnect, device number 7 [ 446.113508][ T1229] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 446.364122][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 446.366448][ T1229] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 446.366477][ T1229] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 446.366501][ T1229] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.366522][ T1229] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.366561][ T1229] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.366582][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.701346][ T1229] usb 4-1: usb_control_msg returned -71 [ 447.701374][ T1229] usbtmc 4-1:16.0: can't read capabilities [ 447.718627][ T1229] usb 4-1: USB disconnect, device number 8 [ 447.754319][ T5114] Bluetooth: hci6: command tx timeout [ 447.833209][ T5114] Bluetooth: hci2: command tx timeout [ 449.894333][ T1229] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 449.932392][ T5114] Bluetooth: hci6: command tx timeout [ 449.932423][ T5114] Bluetooth: hci2: command tx timeout [ 450.242335][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 450.249798][ T1229] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 450.249827][ T1229] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 450.249850][ T1229] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.249872][ T1229] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.249909][ T1229] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.249929][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.919713][ T8735] Bluetooth: MGMT ver 1.23 [ 451.562679][ T8697] chnl_net:caif_netlink_parms(): no params data found [ 451.655070][ T1229] usb 4-1: usb_control_msg returned -71 [ 451.655117][ T1229] usbtmc 4-1:16.0: can't read capabilities [ 451.778430][ T1229] usb 4-1: USB disconnect, device number 9 [ 451.992078][ T5114] Bluetooth: hci6: command tx timeout [ 452.952133][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 454.155790][ T5114] Bluetooth: hci6: command tx timeout [ 454.254471][ T8771] fuse: Unknown parameter '0x0000000000000003' [ 454.292109][ T8671] chnl_net:caif_netlink_parms(): no params data found [ 454.393554][ T5974] bridge_slave_1: left allmulticast mode [ 454.393580][ T5974] bridge_slave_1: left promiscuous mode [ 454.393812][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.422873][ T5880] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 454.486396][ T5974] bridge_slave_0: left allmulticast mode [ 454.486478][ T5974] bridge_slave_0: left promiscuous mode [ 454.488889][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.592761][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 454.599922][ T5880] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 454.599988][ T5880] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 454.600012][ T5880] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.600035][ T5880] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.600153][ T5880] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.600242][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.843667][ T5974] bridge_slave_1: left allmulticast mode [ 454.844036][ T5974] bridge_slave_1: left promiscuous mode [ 454.846167][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.239304][ T5974] bridge_slave_0: left allmulticast mode [ 455.239480][ T5974] bridge_slave_0: left promiscuous mode [ 455.244551][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.498308][ T5880] usb 4-1: usb_control_msg returned -71 [ 456.498358][ T5880] usbtmc 4-1:16.0: can't read capabilities [ 456.538663][ T5880] usb 4-1: USB disconnect, device number 10 [ 457.068303][ T8806] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 457.292301][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.348542][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.440488][ T5974] bond0 (unregistering): Released all slaves [ 458.480091][ T5880] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 458.554768][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 458.650684][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 458.652956][ T5880] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 458.652984][ T5880] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 458.653006][ T5880] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.653028][ T5880] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.653068][ T5880] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.653089][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.855330][ T5974] bond0 (unregistering): Released all slaves [ 460.162037][ T5880] usb 4-1: usb_control_msg returned -71 [ 460.162086][ T5880] usbtmc 4-1:16.0: can't read capabilities [ 460.210251][ T5880] usb 4-1: USB disconnect, device number 11 [ 460.267892][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.562278][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.902203][ T5974] bond0 (unregistering): Released all slaves [ 462.579347][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.579423][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.579561][ T8697] bridge_slave_0: entered allmulticast mode [ 462.612309][ T8697] bridge_slave_0: entered promiscuous mode [ 462.810684][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.810823][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.811028][ T8697] bridge_slave_1: entered allmulticast mode [ 462.816426][ T8697] bridge_slave_1: entered promiscuous mode [ 463.188920][ T8874] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 463.188947][ T8874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 463.189201][ T8874] vhci_hcd vhci_hcd.0: Device attached [ 463.252640][ T8875] vhci_hcd: connection closed [ 463.253609][ T3542] vhci_hcd: stop threads [ 463.253625][ T3542] vhci_hcd: release socket [ 463.253658][ T3542] vhci_hcd: disconnect device [ 464.285461][ T8880] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 464.466829][ T8884] fuse: Unknown parameter 'grou00000000000000000000' [ 464.518615][ T5880] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 464.593488][ T8697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.648661][ T5974] hsr_slave_0: left promiscuous mode [ 464.668656][ T5974] hsr_slave_1: left promiscuous mode [ 464.669744][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.698590][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 464.701514][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 464.701553][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 464.701570][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 464.701581][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.701605][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.701616][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.776204][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.878744][ T5974] hsr_slave_0: left promiscuous mode [ 465.078473][ T5974] hsr_slave_1: left promiscuous mode [ 465.079499][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.044512][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.263752][ T5880] usb 5-1: usb_control_msg returned -71 [ 466.263800][ T5880] usbtmc 5-1:16.0: can't read capabilities [ 466.294199][ T5880] usb 5-1: USB disconnect, device number 11 [ 466.538044][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 466.708038][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 466.709622][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 466.709640][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 466.709652][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 466.709668][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.709708][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 466.709729][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.350381][ T5974] team0 (unregistering): Port device team_slave_1 removed [ 467.605757][ T37] audit: type=1326 audit(1760377906.865:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8902 comm="syz.3.693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbfed5eec9 code=0x0 [ 467.609641][ T5974] team0 (unregistering): Port device team_slave_0 removed [ 468.046584][ T31] usb 1-1: usb_control_msg returned -71 [ 468.046643][ T31] usbtmc 1-1:16.0: can't read capabilities [ 468.075404][ T31] usb 1-1: USB disconnect, device number 8 [ 468.523785][ T37] audit: type=1326 audit(1760377907.775:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.3.696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbfed5eec9 code=0x0 [ 468.817159][ T8915] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 468.817338][ T8915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 468.819913][ T8915] vhci_hcd vhci_hcd.0: Device attached [ 469.866495][ T8916] vhci_hcd: connection closed [ 469.933205][ T43] vhci_hcd: stop threads [ 469.933225][ T43] vhci_hcd: release socket [ 469.933259][ T43] vhci_hcd: disconnect device [ 470.218353][ T8920] 9pnet_virtio: no channels available for device syz [ 470.460465][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.617631][ T5880] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 471.760089][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 471.768004][ T5880] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 471.783740][ T5880] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 471.783766][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 471.783786][ T5880] usb 5-1: Product: syz [ 471.783799][ T5880] usb 5-1: Manufacturer: syz [ 471.783812][ T5880] usb 5-1: SerialNumber: syz [ 471.789948][ T5880] usb 5-1: config 0 descriptor?? [ 471.803436][ T8920] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 471.805610][ T5880] hub 5-1:0.0: bad descriptor, ignoring hub [ 471.805644][ T5880] hub 5-1:0.0: probe with driver hub failed with error -5 [ 472.745636][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.887184][ T5880] usb 5-1: USB disconnect, device number 12 [ 473.046914][ T5974] team0 (unregistering): Port device team_slave_1 removed [ 473.070971][ T5881] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 473.301801][ T5974] team0 (unregistering): Port device team_slave_0 removed [ 473.633912][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 473.636336][ T5881] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 473.636366][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 473.636390][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.636413][ T5881] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.636453][ T5881] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.636474][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.758318][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.343158][ T5881] usb 1-1: usb_control_msg returned -71 [ 475.343204][ T5881] usbtmc 1-1:16.0: can't read capabilities [ 475.386142][ T5881] usb 1-1: USB disconnect, device number 9 [ 475.607766][ T8943] kvm: pic: non byte read [ 476.685218][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.685428][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.685637][ T8671] bridge_slave_0: entered allmulticast mode [ 476.692811][ T8671] bridge_slave_0: entered promiscuous mode [ 476.727803][ T8697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.115892][ T5880] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 477.534823][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 477.605902][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 477.605924][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 477.605937][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 477.605948][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.605970][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 477.605980][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.704918][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.705010][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.705216][ T8671] bridge_slave_1: entered allmulticast mode [ 477.708475][ T8671] bridge_slave_1: entered promiscuous mode [ 478.931971][ T5880] usb 5-1: usb_control_msg returned -71 [ 478.932000][ T5880] usbtmc 5-1:16.0: can't read capabilities [ 478.944858][ T5880] usb 5-1: USB disconnect, device number 13 [ 479.072046][ T8697] team0: Port device team_slave_0 added [ 479.100809][ T8671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.103953][ T8697] team0: Port device team_slave_1 added [ 479.129279][ T8671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.743707][ T5881] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 482.893379][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 482.895883][ T5881] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 482.895919][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 482.895944][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.895967][ T5881] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.896008][ T5881] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.896031][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.885891][ T5881] usb 4-1: usb_control_msg returned -71 [ 483.885940][ T5881] usbtmc 4-1:16.0: can't read capabilities [ 483.887995][ T5880] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 483.935269][ T5881] usb 4-1: USB disconnect, device number 12 [ 483.935608][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.048411][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 484.063808][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 484.063840][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 484.063863][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.063885][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.063926][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 484.063947][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.211950][ T8985] 9pnet_virtio: no channels available for device syz [ 484.472582][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.472599][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.472626][ T8697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.539413][ T8671] team0: Port device team_slave_0 added [ 484.553270][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.553286][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.553370][ T8697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.610828][ T8671] team0: Port device team_slave_1 added [ 485.903724][ T5880] usb 5-1: usb_control_msg returned -71 [ 485.904208][ T5880] usbtmc 5-1:16.0: can't read capabilities [ 486.746572][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.792396][ T5880] usb 5-1: USB disconnect, device number 14 [ 487.092189][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 487.178089][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.178106][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.178137][ T8671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.187497][ T8697] hsr_slave_0: entered promiscuous mode [ 487.188928][ T8697] hsr_slave_1: entered promiscuous mode [ 487.189877][ T8697] debugfs: 'hsr0' already exists in 'hsr' [ 487.189900][ T8697] Cannot create hsr debugfs directory [ 487.191890][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.191901][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.196724][ T8671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.242213][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 487.244516][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 487.244545][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 487.244568][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.244590][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.244630][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.244651][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.272208][ T5880] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 487.462769][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 487.481739][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 487.481770][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 487.481895][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.481919][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.482019][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.482042][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.715112][ T5880] usb 5-1: GET_CAPABILITIES returned 0 [ 487.715161][ T5880] usbtmc 5-1:16.0: can't read capabilities [ 488.225935][ T8671] hsr_slave_0: entered promiscuous mode [ 488.228323][ T8671] hsr_slave_1: entered promiscuous mode [ 488.229860][ T8671] debugfs: 'hsr0' already exists in 'hsr' [ 488.229884][ T8671] Cannot create hsr debugfs directory [ 488.272393][ T984] usb 5-1: USB disconnect, device number 15 [ 488.714349][ T31] usb 4-1: usb_control_msg returned -71 [ 488.714396][ T31] usbtmc 4-1:16.0: can't read capabilities [ 488.723729][ T31] usb 4-1: USB disconnect, device number 13 [ 488.815842][ T9021] netlink: 48 bytes leftover after parsing attributes in process `syz.3.719'. [ 489.983478][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.247038][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.650915][ T5859] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 491.835572][ T9053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 491.837706][ T9053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 491.850518][ T5989] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 492.411313][ T5989] usb 5-1: Using ep0 maxpacket: 8 [ 492.464293][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.490659][ T5989] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 492.490700][ T5989] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 492.490725][ T5989] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.490748][ T5989] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.490789][ T5989] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.490810][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.689298][ T9053] Process accounting resumed [ 492.750626][ T5859] usb 1-1: device not accepting address 10, error -71 [ 495.220071][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 495.395521][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 495.677895][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 495.677931][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 495.677956][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 495.677978][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.678147][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 495.894025][ T5989] usb 5-1: usb_control_msg returned -71 [ 495.894071][ T5989] usbtmc 5-1:16.0: can't read capabilities [ 495.954136][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.995775][ T5989] usb 5-1: USB disconnect, device number 16 [ 496.015313][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.154609][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.432696][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.652888][ T44] usb 4-1: usb_control_msg returned -71 [ 497.652938][ T44] usbtmc 4-1:16.0: can't read capabilities [ 497.667780][ T44] usb 4-1: USB disconnect, device number 14 [ 497.890855][ T5859] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 498.038974][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 498.126506][ T5859] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 498.126526][ T5859] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 498.126539][ T5859] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.126551][ T5859] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.126575][ T5859] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.126586][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.491979][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.036315][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.341540][ T5859] usb 1-1: usb_control_msg returned -71 [ 499.341586][ T5859] usbtmc 1-1:16.0: can't read capabilities [ 499.449358][ T5859] usb 1-1: USB disconnect, device number 12 [ 501.021890][ T9111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.734'. [ 501.022243][ T9111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.734'. [ 501.648702][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.648776][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.681161][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.035501][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.357112][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.092137][ T9111] Process accounting resumed [ 503.512043][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 503.527630][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 503.530159][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 503.531658][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 503.532549][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 504.471096][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.536890][ T9149] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 505.576869][ T5114] Bluetooth: hci3: command tx timeout [ 505.616400][ T9130] chnl_net:caif_netlink_parms(): no params data found [ 506.141523][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.144493][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.163928][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.166389][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.171253][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.927097][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.083623][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.656276][ T5114] Bluetooth: hci3: command tx timeout [ 508.299703][ T5114] Bluetooth: hci2: command tx timeout [ 509.676257][ T1546] bridge_slave_1: left allmulticast mode [ 509.676283][ T1546] bridge_slave_1: left promiscuous mode [ 509.676551][ T1546] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.731472][ T9200] netlink: 104 bytes leftover after parsing attributes in process `syz.4.752'. [ 509.735785][ T5114] Bluetooth: hci3: command tx timeout [ 509.777723][ T9200] 9pnet_fd: Insufficient options for proto=fd [ 509.783272][ T1546] bridge_slave_0: left allmulticast mode [ 509.783297][ T1546] bridge_slave_0: left promiscuous mode [ 509.803838][ T1546] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.377962][ T5114] Bluetooth: hci2: command tx timeout [ 510.524707][ T9209] fuse: Bad value for 'fd' [ 511.302881][ T1546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.426573][ T1546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.540955][ T1546] bond0 (unregistering): Released all slaves [ 511.815261][ T5114] Bluetooth: hci3: command tx timeout [ 512.464841][ T5114] Bluetooth: hci2: command tx timeout [ 514.272496][ T9256] fuse: Bad value for 'fd' [ 514.534251][ T5114] Bluetooth: hci2: command tx timeout [ 514.693117][ T9265] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 514.802323][ T1546] hsr_slave_0: left promiscuous mode [ 514.828505][ T1546] hsr_slave_1: left promiscuous mode [ 514.829460][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.900760][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.753857][ T9302] ufs: You didn't specify the type of your ufs filesystem [ 517.753857][ T9302] [ 517.753857][ T9302] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 517.753857][ T9302] [ 517.753857][ T9302] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 517.754110][ T9302] ufs: ufstype=old is supported read-only [ 518.633410][ T9305] fuse: Invalid rootmode [ 518.636102][ T1546] team0 (unregistering): Port device team_slave_1 removed [ 518.756756][ T1546] team0 (unregistering): Port device team_slave_0 removed [ 521.585509][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.665089][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.666301][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.666434][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.666653][ T9130] bridge_slave_0: entered allmulticast mode [ 521.669261][ T9130] bridge_slave_0: entered promiscuous mode [ 521.720571][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.720823][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.721005][ T9130] bridge_slave_1: entered allmulticast mode [ 521.733140][ T9130] bridge_slave_1: entered promiscuous mode [ 521.883113][ T9334] netlink: 104 bytes leftover after parsing attributes in process `syz.0.781'. [ 521.912563][ T9334] 9pnet_fd: Insufficient options for proto=fd [ 522.416073][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.605928][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 522.875282][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 522.877774][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 522.906884][ T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 522.906913][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 522.906933][ T10] usb 1-1: Product: syz [ 522.906947][ T10] usb 1-1: Manufacturer: syz [ 522.906961][ T10] usb 1-1: SerialNumber: syz [ 522.950485][ T10] usb 1-1: config 0 descriptor?? [ 522.951524][ T9341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 522.972321][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 522.972359][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 523.242777][ T9130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.276250][ T9350] fuse: Bad value for 'rootmode' [ 523.303288][ T9069] usb 1-1: USB disconnect, device number 13 [ 523.332710][ T9130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.502484][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.033349][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.041927][ T9130] team0: Port device team_slave_0 added [ 526.245877][ T9130] team0: Port device team_slave_1 added [ 526.782825][ T9379] netlink: 104 bytes leftover after parsing attributes in process `syz.3.793'. [ 526.860939][ T9366] syz.4.791 (9366) used greatest stack depth: 18040 bytes left [ 526.874838][ T9379] 9pnet_fd: Insufficient options for proto=fd [ 527.346297][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.346309][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.346323][ T9130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.457797][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.238708][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.238726][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.238751][ T9130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.626101][ T9407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.794'. [ 528.626568][ T9407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.794'. [ 530.100843][ T9407] Process accounting resumed [ 530.430284][ T9413] 9pnet_virtio: no channels available for device syz [ 531.234233][ T9130] hsr_slave_0: entered promiscuous mode [ 531.235293][ T9130] hsr_slave_1: entered promiscuous mode [ 531.237264][ T9130] debugfs: 'hsr0' already exists in 'hsr' [ 531.237281][ T9130] Cannot create hsr debugfs directory [ 531.894658][ T9157] chnl_net:caif_netlink_parms(): no params data found [ 535.598917][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.768571][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.049230][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.057603][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 536.924316][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.309529][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.311535][ T10] usb 4-1: device not accepting address 15, error -71 [ 537.556833][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.011272][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 539.267440][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 539.270964][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 539.270982][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 539.270995][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.271007][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.271030][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.271041][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.085654][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.139060][ T9485] tty tty3: ldisc open failed (-12), clearing slot 2 [ 540.300182][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 540.300231][ T10] usbtmc 4-1:16.0: can't read capabilities [ 540.363279][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.363486][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.363693][ T9157] bridge_slave_0: entered allmulticast mode [ 540.416718][ T9157] bridge_slave_0: entered promiscuous mode [ 540.493424][ T44] usb 4-1: USB disconnect, device number 16 [ 540.593345][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.612909][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.613044][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.613257][ T9157] bridge_slave_1: entered allmulticast mode [ 540.624044][ T9157] bridge_slave_1: entered promiscuous mode [ 541.086374][ T9498] random: crng reseeded on system resumption [ 541.191825][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.387537][ T5852] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 541.472691][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.539896][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.472484][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 542.496604][ T5852] usb 1-1: Using ep0 maxpacket: 8 [ 542.499043][ T5852] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 542.499072][ T5852] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 542.499097][ T5852] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.499119][ T5852] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.499161][ T5852] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.499182][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.725375][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.820565][ T5852] usb 1-1: GET_CAPABILITIES returned 0 [ 542.820612][ T5852] usbtmc 1-1:16.0: can't read capabilities [ 543.057520][ T5852] usb 1-1: USB disconnect, device number 14 [ 543.232111][ T9157] team0: Port device team_slave_0 added [ 543.281701][ T9157] team0: Port device team_slave_1 added [ 543.370114][ T1546] bridge_slave_1: left allmulticast mode [ 543.370134][ T1546] bridge_slave_1: left promiscuous mode [ 543.370281][ T1546] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.439602][ T1546] bridge_slave_0: left allmulticast mode [ 543.439622][ T1546] bridge_slave_0: left promiscuous mode [ 543.439810][ T1546] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.978554][ T1546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.118332][ T1546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.186049][ T5880] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 544.213023][ T1546] bond0 (unregistering): Released all slaves [ 544.346839][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 544.349674][ T5880] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 544.349704][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 544.349728][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.349751][ T5880] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.349779][ T5880] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.349791][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.671756][ T5880] usb 1-1: GET_CAPABILITIES returned 0 [ 544.671804][ T5880] usbtmc 1-1:16.0: can't read capabilities [ 544.830626][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.830643][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.830668][ T9157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.883976][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.883992][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.884019][ T9157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.201640][ T10] usb 1-1: USB disconnect, device number 15 [ 545.223979][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.077251][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.402331][ T1546] hsr_slave_0: left promiscuous mode [ 548.491192][ T1546] hsr_slave_1: left promiscuous mode [ 548.492152][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.559598][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.582512][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 548.876439][ T9543] netlink: 104 bytes leftover after parsing attributes in process `syz.4.828'. [ 548.902331][ T9543] 9pnet_fd: Insufficient options for proto=fd [ 550.149731][ T9548] block device autoloading is deprecated and will be removed. [ 551.165145][ T1546] team0 (unregistering): Port device team_slave_1 removed [ 551.324104][ T9069] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 551.444693][ T1546] team0 (unregistering): Port device team_slave_0 removed [ 551.503811][ T9069] usb 5-1: Using ep0 maxpacket: 8 [ 551.507331][ T9069] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 551.507362][ T9069] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 551.507386][ T9069] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.507410][ T9069] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.507452][ T9069] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.507474][ T9069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.749795][ T9069] usb 5-1: GET_CAPABILITIES returned 0 [ 551.749844][ T9069] usbtmc 5-1:16.0: can't read capabilities [ 552.085773][ T9069] usb 5-1: USB disconnect, device number 17 [ 552.273105][ T9130] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 552.340447][ T9130] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 552.400155][ T9130] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 552.557018][ T9130] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 557.357362][ T9157] hsr_slave_0: entered promiscuous mode [ 557.358690][ T9157] hsr_slave_1: entered promiscuous mode [ 557.359632][ T9157] debugfs: 'hsr0' already exists in 'hsr' [ 557.359653][ T9157] Cannot create hsr debugfs directory [ 561.754007][ T9616] netlink: 'syz.3.844': attribute type 4 has an invalid length. [ 561.754030][ T9616] netlink: 152 bytes leftover after parsing attributes in process `syz.3.844'. [ 561.767868][ T9616] : renamed from bond0 (while UP) [ 562.772043][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.772122][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.236353][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.983322][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.118420][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 564.137277][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 564.157974][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 564.168196][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 564.184157][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 564.319945][ T9653] netlink: 277 bytes leftover after parsing attributes in process `syz.0.852'. [ 565.876347][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.202477][ T5114] Bluetooth: hci3: command tx timeout [ 567.939500][ T5859] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 568.109489][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 568.140718][ T5859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 568.140807][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 568.140832][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 568.140916][ T5859] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.141094][ T5859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 568.141117][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.279672][ T5114] Bluetooth: hci3: command tx timeout [ 569.054183][ T5859] usb 4-1: usb_control_msg returned -71 [ 569.054229][ T5859] usbtmc 4-1:16.0: can't read capabilities [ 569.116645][ T5859] usb 4-1: USB disconnect, device number 17 [ 569.420001][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 569.439868][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.441168][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.442754][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.443563][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.527297][ T5852] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 569.698774][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 569.882637][ T9709] netlink: 3 bytes leftover after parsing attributes in process `syz.4.859'. [ 569.906556][ T5852] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 569.906586][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 569.906606][ T5852] usb 1-1: Product: syz [ 569.906620][ T5852] usb 1-1: Manufacturer: syz [ 569.906633][ T5852] usb 1-1: SerialNumber: syz [ 570.378441][ T9714] qnx6: unable to read the first superblock [ 570.394923][ T9714] qnx6: unable to read the first superblock [ 570.394959][ T9714] qnx6: unable to read the first superblock [ 570.730462][ T5796] Bluetooth: hci3: command tx timeout [ 570.879971][ T5852] usb 1-1: config 0 descriptor?? [ 571.979117][ T5796] Bluetooth: hci2: command tx timeout [ 572.173309][ T9709] batadv1: entered allmulticast mode [ 572.447277][ T9729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.863'. [ 572.447291][ T9729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.863'. [ 572.447301][ T9729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.863'. [ 572.447328][ T9729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.863'. [ 572.691083][ T9727] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 572.706087][ T9727] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 572.729588][ T9646] chnl_net:caif_netlink_parms(): no params data found [ 572.759122][ T5796] Bluetooth: hci3: command tx timeout [ 574.037647][ T5796] Bluetooth: hci2: command tx timeout [ 575.942310][ T9069] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 576.065348][ T5881] usb 1-1: USB disconnect, device number 16 [ 576.087020][ T9069] usb 5-1: Using ep0 maxpacket: 32 [ 576.089484][ T9069] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 576.093771][ T9069] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 576.093794][ T9069] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 576.093804][ T9069] usb 5-1: Product: syz [ 576.093811][ T9069] usb 5-1: Manufacturer: syz [ 576.093819][ T9069] usb 5-1: SerialNumber: syz [ 576.126958][ T5796] Bluetooth: hci2: command tx timeout [ 576.207011][ T5866] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 576.217812][ T9069] usb 5-1: config 0 descriptor?? [ 576.231203][ T9756] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 576.279067][ T9069] hub 5-1:0.0: bad descriptor, ignoring hub [ 576.279105][ T9069] hub 5-1:0.0: probe with driver hub failed with error -5 [ 576.506893][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 576.510774][ T5866] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 576.510793][ T5866] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 576.510806][ T5866] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 576.510818][ T5866] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.510840][ T5866] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.510852][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.512583][ T9069] usb 5-1: USB disconnect, device number 18 [ 576.759292][ T5866] usb 4-1: usb_control_msg returned -71 [ 576.759346][ T5866] usbtmc 4-1:16.0: can't read capabilities [ 576.775650][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.775777][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.776012][ T9646] bridge_slave_0: entered allmulticast mode [ 576.827740][ T9646] bridge_slave_0: entered promiscuous mode [ 576.953472][ T5866] usb 4-1: USB disconnect, device number 18 [ 577.085048][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.085194][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.085384][ T9646] bridge_slave_1: entered allmulticast mode [ 577.101867][ T9646] bridge_slave_1: entered promiscuous mode [ 578.965827][ T5796] Bluetooth: hci2: command tx timeout [ 579.212834][ T9799] overlayfs: missing 'workdir' [ 579.239692][ T9646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.243952][ T9646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.376401][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 579.385442][ T3542] bridge_slave_1: left allmulticast mode [ 579.385467][ T3542] bridge_slave_1: left promiscuous mode [ 579.385779][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.526027][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 579.530347][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 579.530378][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 579.530401][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 579.530424][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.530466][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.530488][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.534017][ T3542] bridge_slave_0: left allmulticast mode [ 579.534042][ T3542] bridge_slave_0: left promiscuous mode [ 579.534297][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.102328][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 580.102376][ T10] usbtmc 4-1:16.0: can't read capabilities [ 580.320557][ T10] usb 4-1: USB disconnect, device number 19 [ 581.266974][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.366545][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.520062][ T3542] bond0 (unregistering): Released all slaves [ 582.209839][ T5859] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 582.235760][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 582.235793][ T9828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.878'. [ 582.253117][ T9646] team0: Port device team_slave_0 added [ 582.415276][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 582.486880][ T5859] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 582.486917][ T5859] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.486941][ T5859] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.486952][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.494844][ T5859] usbtmc 1-1:16.0: bulk endpoints not found [ 582.886318][ T9828] geneve2: entered promiscuous mode [ 582.886446][ T9828] geneve2: entered allmulticast mode [ 583.182240][ T9646] team0: Port device team_slave_1 added [ 583.812096][ T3542] hsr_slave_0: left promiscuous mode [ 583.858751][ T3542] hsr_slave_1: left promiscuous mode [ 583.859751][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.974322][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.937576][ T5859] usb 1-1: USB disconnect, device number 17 [ 585.097681][ T9844] overlayfs: missing 'workdir' [ 586.130331][ T9854] block device autoloading is deprecated and will be removed. [ 586.130475][ T9854] ufs: You didn't specify the type of your ufs filesystem [ 586.130475][ T9854] [ 586.130475][ T9854] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 586.130475][ T9854] [ 586.130475][ T9854] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 586.130510][ T9854] ufs: ufstype=old is supported read-only [ 586.378602][ T5859] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 586.534185][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 586.637742][ T5859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 586.637775][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 586.637798][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.637821][ T5859] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.637863][ T5859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.637884][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.884003][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 586.922410][ T5859] usb 4-1: GET_CAPABILITIES returned 0 [ 586.922437][ T5859] usbtmc 4-1:16.0: can't read capabilities [ 587.053964][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 587.057115][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.060038][ T10] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 587.060054][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.060064][ T10] usb 5-1: Product: syz [ 587.060071][ T10] usb 5-1: Manufacturer: syz [ 587.060078][ T10] usb 5-1: SerialNumber: syz [ 587.063438][ T10] usb 5-1: config 0 descriptor?? [ 587.117657][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 587.141055][ T3542] team0 (unregistering): Port device team_slave_1 removed [ 587.240373][ T5852] usb 4-1: USB disconnect, device number 20 [ 587.324641][ T3542] team0 (unregistering): Port device team_slave_0 removed [ 588.066290][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 588.066465][ T10] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 589.912913][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.912924][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.912938][ T9646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.968805][ T9867] netlink: 44 bytes leftover after parsing attributes in process `syz.4.887'. [ 590.002742][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.002758][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.002785][ T9646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.218895][ T37] audit: type=1326 audit(1760378029.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8239af79 code=0x7ffc0000 [ 590.218950][ T37] audit: type=1326 audit(1760378029.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d823feec9 code=0x7ffc0000 [ 590.218993][ T37] audit: type=1326 audit(1760378029.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d823feec9 code=0x7ffc0000 [ 590.219036][ T37] audit: type=1326 audit(1760378029.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d823feec9 code=0x7ffc0000 [ 590.219079][ T37] audit: type=1326 audit(1760378029.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d823feec9 code=0x7ffc0000 [ 590.219440][ T37] audit: type=1326 audit(1760378029.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d823feec9 code=0x7ffc0000 [ 590.219959][ T37] audit: type=1326 audit(1760378029.510:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8239af79 code=0x7ffc0000 [ 590.220008][ T37] audit: type=1326 audit(1760378029.510:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d823feec9 code=0x7ffc0000 [ 590.220894][ T37] audit: type=1326 audit(1760378029.510:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8239af79 code=0x7ffc0000 [ 590.220942][ T37] audit: type=1326 audit(1760378029.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9876 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d823feec9 code=0x7ffc0000 [ 590.264796][ T5859] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 590.493026][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 590.496202][ T5859] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 590.496254][ T5859] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.496294][ T5859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.496316][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.575004][ T5859] usbtmc 4-1:16.0: bulk endpoints not found [ 590.665318][ T5881] usb 5-1: USB disconnect, device number 19 [ 590.770826][ T9646] hsr_slave_0: entered promiscuous mode [ 590.772219][ T9646] hsr_slave_1: entered promiscuous mode [ 590.780093][ T9881] overlayfs: missing 'workdir' [ 590.780555][ T9646] debugfs: 'hsr0' already exists in 'hsr' [ 590.780578][ T9646] Cannot create hsr debugfs directory [ 590.781387][ T9707] chnl_net:caif_netlink_parms(): no params data found [ 591.156711][ T9882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 591.156728][ T9882] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 592.203641][ T9882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 592.203664][ T9882] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 592.301994][ T9882] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 592.302099][ T9882] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 592.378780][ T9882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 592.378803][ T9882] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 592.432482][ T5881] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 592.533806][ T9882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 592.533821][ T9882] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 592.592911][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 592.604011][ T5881] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 592.604053][ T5881] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 592.604093][ T5881] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 592.604118][ T5881] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 592.604143][ T5881] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 592.604168][ T5881] usb 5-1: config 0 interface 0 has no altsetting 0 [ 592.609114][ T5881] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 592.609140][ T5881] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 592.609160][ T5881] usb 5-1: Product: syz [ 592.609174][ T5881] usb 5-1: Manufacturer: syz [ 592.609187][ T5881] usb 5-1: SerialNumber: syz [ 592.736993][ T5881] usb 5-1: config 0 descriptor?? [ 592.743383][ T9904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 592.758533][ T5881] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 592.782097][ T5881] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 592.953000][ T44] usb 4-1: USB disconnect, device number 21 [ 593.064855][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.064990][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.065181][ T9707] bridge_slave_0: entered allmulticast mode [ 593.079440][ T9707] bridge_slave_0: entered promiscuous mode [ 593.173562][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.173700][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.173930][ T9707] bridge_slave_1: entered allmulticast mode [ 593.205949][ T9707] bridge_slave_1: entered promiscuous mode [ 594.100725][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.186274][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.690512][ T9707] team0: Port device team_slave_0 added [ 595.089707][ T9707] team0: Port device team_slave_1 added [ 595.102293][ T5974] bridge_slave_1: left allmulticast mode [ 595.102320][ T5974] bridge_slave_1: left promiscuous mode [ 595.103420][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.203084][ T5974] bridge_slave_0: left allmulticast mode [ 595.203240][ T5974] bridge_slave_0: left promiscuous mode [ 595.203534][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.596348][ T9948] loop9: detected capacity change from 0 to 7 [ 596.634389][ T9675] Dev loop9: unable to read RDB block 7 [ 596.634434][ T9675] loop9: unable to read partition table [ 596.634704][ T9675] loop9: partition table beyond EOD, truncated [ 596.716571][ T9948] Dev loop9: unable to read RDB block 7 [ 596.716619][ T9948] loop9: unable to read partition table [ 596.716988][ T9948] loop9: partition table beyond EOD, truncated [ 596.717665][ T9948] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 597.008139][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.127271][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.777197][ T9924] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 599.207574][ T5974] bond0 (unregistering): Released all slaves [ 599.623007][ T5873] usb 5-1: USB disconnect, device number 20 [ 599.644946][ T5873] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 600.339807][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.339825][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.339852][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.480238][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 600.545989][ T5974] hsr_slave_0: left promiscuous mode [ 600.580407][ T5974] hsr_slave_1: left promiscuous mode [ 600.581392][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.630761][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.647391][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 600.648770][ T10] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 600.648801][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.648823][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 600.648835][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.718680][ T10] usbtmc 1-1:16.0: bulk endpoints not found [ 601.413388][ T9963] Falling back ldisc for ttyprintk. [ 601.684337][ T9975] loop9: detected capacity change from 0 to 7 [ 601.687438][ T9975] Dev loop9: unable to read RDB block 7 [ 601.687481][ T9975] loop9: unable to read partition table [ 601.687713][ T9975] loop9: partition table beyond EOD, truncated [ 601.687730][ T9975] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 601.779133][ T9977] netlink: 104 bytes leftover after parsing attributes in process `syz.3.911'. [ 601.797780][ T9977] 9pnet_fd: Insufficient options for proto=fd [ 601.900047][ T5866] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 601.987211][ T9981] 9pnet_virtio: no channels available for device syz [ 602.059874][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 602.072451][ T5866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 602.072482][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 602.072505][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 602.072528][ T5866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.072568][ T5866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 602.072589][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.300280][ T5866] usb 5-1: GET_CAPABILITIES returned 0 [ 602.300326][ T5866] usbtmc 5-1:16.0: can't read capabilities [ 602.410397][ T5974] team0 (unregistering): Port device team_slave_1 removed [ 602.742714][ T5974] team0 (unregistering): Port device team_slave_0 removed [ 602.764618][ T5852] usb 5-1: USB disconnect, device number 21 [ 602.948472][ T5881] usb 1-1: USB disconnect, device number 18 [ 603.104749][T10005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 604.777065][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.777076][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.777090][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.371192][ T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 605.538917][T10029] qnx6: unable to read the first superblock [ 605.549262][T10029] qnx6: unable to read the first superblock [ 605.549307][T10029] qnx6: unable to read the first superblock [ 606.218549][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 606.220530][ T44] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 606.220553][ T44] usb 4-1: config 0 has no interface number 0 [ 606.220597][ T44] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.220619][ T44] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 606.220642][ T44] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.220674][ T44] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 606.220714][ T44] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 606.220736][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.311561][T10033] 9pnet_virtio: no channels available for device syz [ 606.315753][ T44] usb 4-1: config 0 descriptor?? [ 606.368894][ T44] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 606.546427][ T9069] usb 4-1: USB disconnect, device number 22 [ 606.636486][ T9069] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 606.821361][ T9069] ================================================================== [ 606.821378][ T9069] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 606.821415][ T9069] Read of size 8 at addr ffffc9000cc71008 by task kworker/1:7/9069 [ 606.821432][ T9069] [ 606.821452][ T9069] CPU: 1 UID: 0 PID: 9069 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.821474][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 606.821488][ T9069] Workqueue: usb_hub_wq hub_event [ 606.821514][ T9069] Call Trace: [ 606.821524][ T9069] [ 606.821533][ T9069] dump_stack_lvl+0x189/0x250 [ 606.821556][ T9069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.821578][ T9069] ? __pfx__printk+0x10/0x10 [ 606.821599][ T9069] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 606.821627][ T9069] ? __virt_addr_valid+0xdc/0x5c0 [ 606.821647][ T9069] ? __virt_addr_valid+0xdc/0x5c0 [ 606.821668][ T9069] print_report+0xca/0x240 [ 606.821692][ T9069] ? __list_add_valid_or_report+0x4e/0x130 [ 606.821713][ T9069] kasan_report+0x118/0x150 [ 606.821734][ T9069] ? __list_add_valid_or_report+0x4e/0x130 [ 606.821759][ T9069] __list_add_valid_or_report+0x4e/0x130 [ 606.821782][ T9069] kcov_remote_stop+0x52d/0x660 [ 606.821809][ T9069] hub_event+0x45d2/0x4a20 [ 606.821825][ T9069] ? cpuacct_charge+0x117/0x320 [ 606.821858][ T9069] ? do_raw_spin_lock+0x121/0x290 [ 606.821883][ T9069] ? register_lock_class+0x51/0x320 [ 606.821906][ T9069] ? __pfx_hub_event+0x10/0x10 [ 606.821922][ T9069] ? process_scheduled_works+0x9ef/0x17b0 [ 606.821950][ T9069] ? _raw_spin_unlock_irq+0x23/0x50 [ 606.821973][ T9069] ? process_scheduled_works+0x9ef/0x17b0 [ 606.821998][ T9069] ? process_scheduled_works+0x9ef/0x17b0 [ 606.822023][ T9069] process_scheduled_works+0xae1/0x17b0 [ 606.822062][ T9069] ? __pfx_process_scheduled_works+0x10/0x10 [ 606.822095][ T9069] worker_thread+0x8a0/0xda0 [ 606.822114][ T9069] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.822144][ T9069] ? __kthread_parkme+0x7b/0x200 [ 606.822167][ T9069] kthread+0x711/0x8a0 [ 606.822188][ T9069] ? __pfx_worker_thread+0x10/0x10 [ 606.822205][ T9069] ? __pfx_kthread+0x10/0x10 [ 606.822224][ T9069] ? rt_spin_unlock+0x150/0x200 [ 606.822248][ T9069] ? rt_spin_unlock+0x161/0x200 [ 606.822268][ T9069] ? __pfx_kthread+0x10/0x10 [ 606.822288][ T9069] ret_from_fork+0x4bc/0x870 [ 606.822314][ T9069] ? __pfx_ret_from_fork+0x10/0x10 [ 606.822341][ T9069] ? __switch_to_asm+0x39/0x70 [ 606.822363][ T9069] ? __switch_to_asm+0x33/0x70 [ 606.822383][ T9069] ? __pfx_kthread+0x10/0x10 [ 606.822403][ T9069] ret_from_fork_asm+0x1a/0x30 [ 606.822433][ T9069] [ 606.822439][ T9069] [ 606.822445][ T9069] The buggy address belongs to a vmalloc virtual mapping [ 606.822461][ T9069] Memory state around the buggy address: [ 606.822472][ T9069] ffffc9000cc70f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 606.822485][ T9069] ffffc9000cc70f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 606.822497][ T9069] >ffffc9000cc71000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 606.822513][ T9069] ^ [ 606.822523][ T9069] ffffc9000cc71080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 606.822535][ T9069] ffffc9000cc71100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 606.822545][ T9069] ================================================================== [ 606.822567][ T9069] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 606.822582][ T9069] CPU: 1 UID: 0 PID: 9069 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.822603][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 606.822616][ T9069] Workqueue: usb_hub_wq hub_event [ 606.822633][ T9069] Call Trace: [ 606.822640][ T9069] [ 606.822647][ T9069] dump_stack_lvl+0x99/0x250 [ 606.822669][ T9069] ? __asan_memcpy+0x40/0x70 [ 606.822693][ T9069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.822714][ T9069] ? __pfx__printk+0x10/0x10 [ 606.822740][ T9069] vpanic+0x237/0x6d0 [ 606.822758][ T9069] ? __pfx_vpanic+0x10/0x10 [ 606.822780][ T9069] panic+0xb9/0xc0 [ 606.822803][ T9069] ? __pfx_panic+0x10/0x10 [ 606.822821][ T9069] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 606.822847][ T9069] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.822874][ T9069] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.822902][ T9069] ? __list_add_valid_or_report+0x4e/0x130 [ 606.822923][ T9069] check_panic_on_warn+0x89/0xb0 [ 606.822945][ T9069] ? __list_add_valid_or_report+0x4e/0x130 [ 606.822964][ T9069] end_report+0x78/0x160 [ 606.822983][ T9069] kasan_report+0x129/0x150 [ 606.823002][ T9069] ? __list_add_valid_or_report+0x4e/0x130 [ 606.823025][ T9069] __list_add_valid_or_report+0x4e/0x130 [ 606.823048][ T9069] kcov_remote_stop+0x52d/0x660 [ 606.823069][ T9069] hub_event+0x45d2/0x4a20 [ 606.823086][ T9069] ? cpuacct_charge+0x117/0x320 [ 606.823119][ T9069] ? do_raw_spin_lock+0x121/0x290 [ 606.823145][ T9069] ? register_lock_class+0x51/0x320 [ 606.823170][ T9069] ? __pfx_hub_event+0x10/0x10 [ 606.823187][ T9069] ? process_scheduled_works+0x9ef/0x17b0 [ 606.823216][ T9069] ? _raw_spin_unlock_irq+0x23/0x50 [ 606.823241][ T9069] ? process_scheduled_works+0x9ef/0x17b0 [ 606.823267][ T9069] ? process_scheduled_works+0x9ef/0x17b0 [ 606.823293][ T9069] process_scheduled_works+0xae1/0x17b0 [ 606.823332][ T9069] ? __pfx_process_scheduled_works+0x10/0x10 [ 606.823366][ T9069] worker_thread+0x8a0/0xda0 [ 606.823384][ T9069] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.823414][ T9069] ? __kthread_parkme+0x7b/0x200 [ 606.823437][ T9069] kthread+0x711/0x8a0 [ 606.823459][ T9069] ? __pfx_worker_thread+0x10/0x10 [ 606.823476][ T9069] ? __pfx_kthread+0x10/0x10 [ 606.823495][ T9069] ? rt_spin_unlock+0x150/0x200 [ 606.823518][ T9069] ? rt_spin_unlock+0x161/0x200 [ 606.823539][ T9069] ? __pfx_kthread+0x10/0x10 [ 606.823558][ T9069] ret_from_fork+0x4bc/0x870 [ 606.823584][ T9069] ? __pfx_ret_from_fork+0x10/0x10 [ 606.823612][ T9069] ? __switch_to_asm+0x39/0x70 [ 606.823634][ T9069] ? __switch_to_asm+0x33/0x70 [ 606.823655][ T9069] ? __pfx_kthread+0x10/0x10 [ 606.823676][ T9069] ret_from_fork_asm+0x1a/0x30 [ 606.823707][ T9069] [ 606.823965][ T9069] Kernel Offset: disabled