last executing test programs: 6.978954836s ago: executing program 0 (id=2476): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00218000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.709632794s ago: executing program 0 (id=2502): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73", 0x2e}, {&(0x7f0000000640)="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", 0x24a}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c", 0x58}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x20000008) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e934"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffc}, 0x50) 3.599650963s ago: executing program 0 (id=2504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x500, 0x5, 0x4, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) getsockopt$packet_int(r6, 0x107, 0x15, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 3.189943482s ago: executing program 2 (id=2505): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f000001fec0)={0x34, &(0x7f000001ffc0)={0x40, 0x3, 0x5, "4b390fba03"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.189596512s ago: executing program 4 (id=2506): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 3.047245041s ago: executing program 4 (id=2507): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2, r0}) 3.004461901s ago: executing program 0 (id=2508): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/75, 0x4b}], 0x1) 2.955311101s ago: executing program 4 (id=2509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x2, 0x0) 2.894590451s ago: executing program 4 (id=2510): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f000001b640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0xffffffd8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x9}}, 0x50) 2.7522877s ago: executing program 1 (id=2514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080207830000c0"]) 2.64514257s ago: executing program 1 (id=2515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000001474a149000040"]) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000240)={0xc7, 0x0, 0x1}) 2.64454819s ago: executing program 2 (id=2516): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x9, 0xc6e, 0x290, 0x0, 0x1}, 0x6d) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) fstat(r0, &(0x7f0000000140)) 2.56240022s ago: executing program 2 (id=2518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) listen(r4, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 2.539255629s ago: executing program 1 (id=2519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x500, 0x5, 0x4, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) getsockopt$packet_int(r6, 0x107, 0x15, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 2.492109389s ago: executing program 3 (id=2520): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 1.983415568s ago: executing program 3 (id=2521): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.872819327s ago: executing program 0 (id=2522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x500, 0x5, 0x4, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 1.872338147s ago: executing program 1 (id=2523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000550001c0"]) 1.787473837s ago: executing program 4 (id=2524): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {0x30}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) 1.525948866s ago: executing program 2 (id=2525): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.491000986s ago: executing program 3 (id=2526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x18, r1, 0x4196ccce67868bab, 0xfffffffe, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040880}, 0xc880) 1.474236346s ago: executing program 0 (id=2527): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001580)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES64, @ANYRESDEC], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 1.417831946s ago: executing program 1 (id=2528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket(0x10, 0x400000000080803, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x15, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 1.369037355s ago: executing program 4 (id=2529): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffff0d850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.350652085s ago: executing program 3 (id=2530): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) preadv2(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0xfffffff8, 0x496, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 1.301820035s ago: executing program 2 (id=2531): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffff8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioprio_set$pid(0x0, 0x0, 0x6004) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') lseek(r3, 0xd7, 0x0) read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0x7) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r4, 0x0, 0x0, 0x0) 1.102058824s ago: executing program 1 (id=2532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}, "3297e3ba627aa2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88769ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c93148aa8d2934a15d29cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f686"}}, 0xfce) 172.899461ms ago: executing program 3 (id=2533): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x15}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0xd0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) 3.40356ms ago: executing program 3 (id=2534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd86, &(0x7f0000002480)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "195e3c", 0xd50, 0x6, 0x1, @local, @rand_addr=' \x01\x00', {[@hopopts={0x2e, 0x1a3, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @jumbo={0xc2, 0x4, 0xffffff81}, @generic={0x0, 0xcfc, "f873303cb93a305bfa9b2c25761e9c3e27e30159da45c5e27dd0e5251b18b2aa52e5e9de1cfb7747c90b30466d30bf5a61250f4c757222aa1159b95ddfca20210384f5d8d06bbbfda12b3866dc078a92ef8947cb1cdbc31147c5de861fc0b005f2c6d907b321f0df32e675a90fa2c8ad22270d8465442399fd3640405e9045df2749310de54b2c220819751effb0ed0ab18d582d579486ca5215a6155b00616e1934b93abdb2e41eb3de7b534a92db6c68fa86e6fdbfc731e7420a4737b493af86e5c56bad8b883e879af8ecf6a4fb92c514addc3aa01ee2f227bc2ab7724773f7c3bf8f7c9683dfa2296b6b3bf18da2d75998fb95db03f9205d32f1bade1b06159984605bc263fa05bce8dd98db3629fdd492e063285481a72f7dc26c1a144f75ad354cfa2f8910d4abc653e91dfa270e4065885e75fc6106c57e041d1cca7120889fee7d982505bf2c4dd4411fbbbf515991326ee058e76577dac23d1da677070299fbbdcdec4a6a40547638370cfee4fd801bab0b6c1658e6365225e1f0bc6058ed74f3ee534db0a314f00cac0cee14b7784ff80a5662acf2fb6f271204c63830d4ecdc9c9b5305a74425d90273b764ea6ea5b65d47dff0b24677c4c2c40b39a84a6a6780f76cffc0ebc932e0eca9143872af70f6d434b6440d569f3465cd4384f8b3296aa60b31cd5684066a3af3ceaa86352d4c5bb6abfd96c79fb35ddcd648558a4d90bdf914b37b05ee9a4fc45bf096e0a5d336bd03cf274af7f7170e7556a3fd3962547ab89e08b58fb5ccc0ef6f50da435ae393686cf5d4d43193932babd4d3f8ac617f32c2de9c849f5121a67cbfd8487b2c5c4d9ab6de59b96db33381964a6c9e3b5383919c51e0d95ccd5a095b744083b0691a5065708eeae25ee4cedb9c1722523621882da482e43b51e16fa462e7169964a76901f3bb2dcd0f73099049bab407f78ee459d877b2a5f34f80fbf0c79faee319e32e64e68a07667e3ef221c6a63c7ac5655b55198c70e733472dafae8b1af4a34001495978bf13f2454557fb9c19dc4d2c620d068d3f165b9cb25047b034f821d8e3b18568d9542787e543e7126b0f942651e0597b1fc6d75c2e524a15c2a53b1ffbb3b98249d5aa215c436b2d11bd57fbbc1deef289dd222232dd9d584547a274c9c028d729c484afffcd71c73a86bcd4d731c561d36bedc3a76aaefca582dd64b4987ba0a666bb2bdc1a9bac75321836784fba8fe36b88c662fa73c120e3820054096bf529d17b905656a4ca938415e0a34e8d8912f09f49573a11148459fb9f8d4bc04d565cda815e21fb0d1b5891f53e431377ec1e69043cfe29139b6d6f68a696f61d29acf6e97bb8beb4ea18236d59679bf389ec63fe5a9d2c32bc9561fcb780370949d03f20bb219e02d8ca98b7310df56567d3ca6b953d6251ffc5cf499c8a200b5377472f888fece3033aa066fdbdb4f8203e3f952c9ca02ef15bc1da9e16a31e86596f21c795d34182c16526e82d93a52b5e0d1cd0cd393f61c80165515c5154c0cc621bd65c4744647715f9f8cf2b63caf76f0ae42d1acc7de584529b77e4233ea9b3424ef4fa6bf5ba365869a232ca650157520b82eed16978013f806f46d29d58c12bc39c5dc83cd8818ab6e3bf38b61941cc6b99b0885dfbf00bb57780211d3d9c741c4fe67393b71bd93c11eb116ffcd9995aa69c286969f348d497fd802a1fa0004fa99c65661eff0cba877052eb84b5525ebc3b6e1e046988dde8517d526dbb3e9a71c07f68dd1e8ea03a65725b2a3fe483a237376780349aabed3bc375dadd5bb44ff26a498daa2921133cc5fea3f7421f502f9ac61d1dcecae447bc5f9e7d31b6f242dda9b6c11d2fb7a21305b9a09cd17620ed362501667041a653b81ea35374cc6a521caff5647257e9916b1b68156c1e0c7c3d854ff9ab7d3705b7f17e554dcc4085db110cd633f4f204ea1506e195990abd1130d9310b23257c9f0f22b49576afff8fc173be5c6f62d0afc07bf40861f4a310de4c4a4bdebae8fd3ac84199dc60eb0f19d0c83c7ad9538c0a0043decb4b8bf5701bd072b7b191782a28b5b4f553125a81a06b988e27e0ecb3e602fbc26abc48e81f5316257d9a2466140ba80286cef233e50cd76b71646ef1b61378ac8544d9647dabda6087bbcf35ac9d057faf5390f97672debe6428e2dfdf1959de628dd8b9f551c017306672f58d72fbde0419b3ea8a773665d7d0a9c29cd7cee325ff730ab3799e67c1ebe345da5cbd6f78f9b8cedd337465a70d2783893890d71e6918ebf891ee92623d08b24af0a4580110b6ddec4db660765743f787abf1eefa31e19decaaecd613795d5937cd7668db8c7e7656c15f9fc950daad2bf382cfb611c89126c51baec4229c11dc525050a5591a25d84519764184df6c44ad6eb3a8ddd0946c6b3f209e17fd3f4d4f38d93740462bc98572a5811693d07c3338a2c7bc8a5cc020dbdf60c539aedfa99e598aa795c972d537d55e33b365327fa5598be3cae33f9a84588c8fa10b66d3625f1f18fbf53dbabcc672f7b8a8cf0644a2a718bd83414a0adb3f8f4882df2ec2f644c9acd7c5afd9306a1cea2847eb2e374c221d1c72686087e32a3e650137488f638edd919953b403d91c1623295efef5a6e07aed698920af291ce804de3e88834168f6c2151aa42b5861e100f46a41d3f3c82dd4acb632fe1dd5f6c0283d9e34cca4e8a2bb1c628fe91833fef60843975611b280ddc60305f2826e7e00a0bfec22d2c1bdf5991c043f2f3e052648705dcce2df6a1e83c3517bf9765ec19279af3984efdc6a9f603225882d0320e2e842964870205cd4a997212125b58412aae8a2567dfd1a1d903eaf1085b5a2e80b93fc9a85e214beb4f1bd5b6d7ca7cb5c05449afd9aab7b145eab1899a24e449eadeb158917c5b0716e57ea21e05e83fc97b4029a5defd9d931bc2c422e84dbf12db38cb1cc2bdbd556ca8e82ff34efeeb4063f5603294ad3d2ec521bf5787ae3cdd33cf25a3c73b43cbfa952c2c12fddae4936d9f060474784d70bfbc71e381deb101921ec14d532d591ca576e73f04845eda6b2b84ce21c0acec6989398f721c3333fae9b1c5983237bcd5d0e5ab377bc900fe08fb3512caa131906f8b79177dd553bbeba4ee42c7f4248e288f6cba0726e82c0cbb8d5e339a9bff0fd09b38174e01a21db87577673ab82e165d1974bc3cf14bfc7e1bb7372e8fccf51a906e261f96ae8a4c236cc55604c226207f238b1ec17c05d272d34f5769dc8b229167f05e3152e6906eb9cb375a957e6f1861dd6ee3140529d3855f384eabb9d139626c3543f5e5b7ecab939f6f5da21d723347bd4485624a162b134897ef4b47fd9497a98d022959dada25f618d5d82c8dad903e6cf322f15f93a2633775122c906d185c706ba1a3a6a2287141f8edbf6e12e61b4bdf1e79ced059cf17cf29e5aa22795680bc32520ac6aff340c2b9acae086845110d047efd05d5d4091f1866c59a91e9d0bfc4918d40156c7fc1ee4363f14b9464cfed3d4f20f84e12349d7f3379f943a9b576d81ebd3000f9f80183ba7e74e18c9bddcf8e9e7608cdf81d76d152fa1d581959c8ee5c166f4577bd0f168f30534bb28de3ddf3b0c849f5148aa77500494cc82dfe1ea7fb0efedfb8945a2c5b889d2f19909671dc13ba3ac78c9dac9b41e5f519d2746d07715aaa03fb0be7ec81ad23d79780f08684a7caa7c09e3b630165a2a6ae256546f8ff7fa9b80dbde8d14956bce11b20b4e77fa2facc66788c41870e7f7e0876891115457b0a5c59e86876164a9f4149bdeb3564d13b6e70ee1ee66891dc37243d02b737c268e49572dd4be0eed70f37e56525002a414aeae5ac1436b0dbba30c1c069354b2b64a07f25576fb5d906058d961c2c43c1d542b25d3673812a807c8a04e3892bcc73c7d8c3bed54a34f9df5a2c7a83218105c6a1a8dc665da367b0d622eeaeddb8be5d2bfb1b51149edbb90d57ffa4f326269464840f27576c2695f7d54672848144be9be8754973ab4c5242870dfea053cc716a6d3abae79f180dac8441d087e10149d98c8dd2733599bb8b873e4fc4946921f7832027600af456469b56cdeb16e4294a347d7b85298174ccb0c58aa23b200e0c2a343ff72baad6581f7cfe12032e43d77f659c28430357aed7cccf26b47cb88f2c5e6bce374ad4d92d48d782536ea63e32a448a2b7f74a6cd4e2028fb00d7c3effdf754ac9b1253dfe3b0d2ca7feeb19429f3738107f5ca3f9458b51db887cfcef90f9136c7b3e86cf8f09dba1d4bb5dfe3c44ed5ffaea3b91d41d7ec5eeed1e597fe12744fba9d29aff342fdf996e1bc2b5e0e54aa94d94ef31f71593435036fcaaefe2a1def1157d19edf867277228c943ec64969d2ed40a19d3e1b7fb3df2459dec1192588c534c7f1f825ac24152e6f9188a662d8e067a8c5f576933fb6721a5e79b6181b01ad10eeb4eeb23a9853335be1b3dfea51e90906b58829be462870c9b6993c17c83bb808e1efc577b86a9494dd09d9d76fa125a448aafafc985cd747f6eaca00ac8f971d0ca229c594a2c4035f35f27d16970e7e098208ed1b793d55af6d82d4e436c448bba9d7df65d88569c6655ea761cbda135c983107b2ca0510eb53086f87dc94eb085ae2570e57305eb9854a63929cc3460353a12c2da4466de11147437fcf"}]}], @payload_named={{{{{0x28, 0x0, 0x1, 0x1, 0x1, 0xa, 0x2, 0x2, 0x937f, 0x0, 0x2, 0xb, 0x2, 0x2, 0x81, 0x7, 0x2, 0x4e24, 0x4e21}, 0x1, 0x2}, 0x4, 0x2}}}}}}}}, 0x0) 0s ago: executing program 2 (id=2535): r0 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3c}, {0xd, 0x24, 0xf, 0x1, 0xb492, 0x5, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0xfffa, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf, 0x7, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x47, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x9}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000006140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000006000)={0x20, 0x80, 0x1c, {0x0, 0xe37, 0x0, 0x5, 0x2, 0x3, 0x48, 0x1, 0xbf, 0xfff7, 0x3}}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): lave_0 [ 67.437409][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.450627][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.478051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.486615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.496180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.505335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.515144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.524972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.542661][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.555901][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.566168][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.577015][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.588562][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.616273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.626888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.638433][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.648424][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.657406][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.666448][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.746002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.759906][ T4177] device veth0_macvtap entered promiscuous mode [ 67.814884][ T4166] device veth0_vlan entered promiscuous mode [ 67.822020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.831469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.840576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.848825][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 67.854949][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.857487][ T4213] Bluetooth: hci2: command 0x040f tx timeout [ 67.868758][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.869383][ T4213] Bluetooth: hci1: command 0x040f tx timeout [ 67.883271][ T4213] Bluetooth: hci3: command 0x040f tx timeout [ 67.889364][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 67.911894][ T4177] device veth1_macvtap entered promiscuous mode [ 67.927879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.937310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.949797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.958158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.998617][ T4166] device veth1_vlan entered promiscuous mode [ 68.008553][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.019735][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.033833][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.046337][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.056940][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.068793][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.078966][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.090804][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.103857][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.125417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.135181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.143582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.153683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.172995][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.183960][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.189687][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.191955][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.203398][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.224865][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.235138][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.246507][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.258581][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.278645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.289106][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.297632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.307929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.324675][ T4177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.338155][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.354210][ T4177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.357270][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.363010][ T4177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.363063][ T4177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.406836][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.415583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.433677][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.434879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.453842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.473549][ T4166] device veth0_macvtap entered promiscuous mode [ 68.526017][ T4166] device veth1_macvtap entered promiscuous mode [ 68.540182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.550249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.560535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.610759][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.639216][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.644850][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.688218][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.700423][ T4248] mmap: syz.3.4 (4248) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 68.712452][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.712476][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.712488][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.712503][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.712515][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.712529][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.714332][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.795085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.831367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.841055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.868660][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.881352][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.891739][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.902378][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.915696][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.928646][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.942725][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.953467][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.979957][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.161886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.191579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.527368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 69.536793][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.562174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.571260][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.580362][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.590275][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.599330][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.608446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.617517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.626642][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.933333][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 69.939755][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 69.945871][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 69.952312][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 69.958413][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 69.966933][ T4166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.068429][ T4166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.078280][ T4166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.091469][ T4166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.146584][ T686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.188621][ T686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.201366][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.474212][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.623653][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.890570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.910900][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.920050][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.084720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.110604][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.117257][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.507832][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.517408][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.947291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.981390][ T4290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12'. [ 74.305070][ T4293] loop4: detected capacity change from 0 to 256 [ 77.419533][ T4318] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 78.052315][ T4264] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.987741][ T4326] loop0: detected capacity change from 0 to 4096 [ 79.273757][ T4326] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 79.289255][ T4326] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 79.364406][ T4339] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.371606][ T4339] overlayfs: failed to set xattr on upper [ 79.377394][ T4339] overlayfs: ...falling back to index=off,metacopy=off. [ 79.700689][ T4335] capability: warning: `syz.2.23' uses deprecated v2 capabilities in a way that may be insecure [ 80.798305][ T4347] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.867426][ T4335] syz.2.23 (4335) used greatest stack depth: 19616 bytes left [ 81.052298][ T23] Bluetooth: hci4: command 0x0405 tx timeout [ 81.129709][ T4356] loop3: detected capacity change from 0 to 512 [ 81.505088][ T4356] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.005271][ T1347] cfg80211: failed to load regulatory.db [ 82.022199][ T4356] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.077375][ T4356] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.148972][ T4356] EXT4-fs (loop3): 1 truncate cleaned up [ 82.202249][ T4356] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 83.848855][ T4377] Zero length message leads to an empty skb [ 84.951997][ T4166] ODEBUG: Out of memory. ODEBUG disabled [ 84.962100][ C1] sched: RT throttling activated [ 84.977755][ T23] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 84.986526][ T23] Bluetooth: hci1: Injecting HCI hardware error event [ 85.017527][ T4182] Bluetooth: hci1: hardware error 0x00 [ 87.985577][ T26] audit: type=1326 audit(1738083897.161:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 88.217911][ T26] audit: type=1326 audit(1738083897.221:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 88.546661][ T26] audit: type=1326 audit(1738083897.231:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 88.733321][ T26] audit: type=1326 audit(1738083897.231:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 88.758443][ T26] audit: type=1326 audit(1738083897.241:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 88.882538][ T1325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.039467][ T4407] loop2: detected capacity change from 0 to 256 [ 89.182340][ T1325] usb 2-1: Using ep0 maxpacket: 8 [ 89.242897][ T1325] usb 2-1: no configurations [ 89.252136][ T1325] usb 2-1: can't read configurations, error -22 [ 89.275210][ T26] audit: type=1326 audit(1738083897.241:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 89.437455][ T26] audit: type=1326 audit(1738083897.241:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 90.358548][ T4407] exfat: Unknown parameter 'nameª}t' [ 90.686572][ T26] audit: type=1326 audit(1738083897.251:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 90.785921][ T4423] netlink: 96 bytes leftover after parsing attributes in process `syz.0.42'. [ 92.516232][ T26] audit: type=1326 audit(1738083897.251:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 92.574533][ T26] audit: type=1326 audit(1738083897.251:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4446096da9 code=0x7fc00000 [ 93.109960][ T4434] loop3: detected capacity change from 0 to 128 [ 94.268820][ T4436] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 94.880319][ T4438] loop2: detected capacity change from 0 to 512 [ 94.949404][ T4434] hpfs: Bad magic ... probably not HPFS [ 94.971888][ T4438] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.068412][ T4441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 95.092310][ T4438] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.47: iget: bad extended attribute block 512 [ 95.250026][ T4438] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.47: couldn't read orphan inode 15 (err -117) [ 96.655574][ T4438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.783334][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 96.835522][ T4343] udevd[4343]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 97.109041][ T4463] loop1: detected capacity change from 0 to 1024 [ 100.519847][ T4311] hfsplus: b-tree write err: -5, ino 4 [ 101.062823][ T4489] overlayfs: failed to resolve './file0': -2 [ 105.429754][ T4521] device ip6gre0 entered promiscuous mode [ 105.439358][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 105.455580][ T4521] device ip6gre0 left promiscuous mode [ 106.399828][ T4533] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 106.407074][ T4533] overlayfs: failed to set xattr on upper [ 106.412883][ T4533] overlayfs: ...falling back to index=off,metacopy=off. [ 111.422268][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 111.422303][ T26] audit: type=1326 audit(1738083920.501:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 111.942225][ T26] audit: type=1326 audit(1738083920.501:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d6a32c710 code=0x7ffc0000 [ 112.037613][ T26] audit: type=1326 audit(1738083920.511:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 112.082245][ T26] audit: type=1326 audit(1738083920.511:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d6a32c710 code=0x7ffc0000 [ 112.132924][ T26] audit: type=1326 audit(1738083920.511:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2d6a32f5d7 code=0x7ffc0000 [ 112.161715][ T26] audit: type=1326 audit(1738083920.511:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 112.184289][ T26] audit: type=1326 audit(1738083920.511:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2d6a32f5d7 code=0x7ffc0000 [ 112.207021][ T26] audit: type=1326 audit(1738083920.511:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2d6a32ca0a code=0x7ffc0000 [ 112.249268][ T26] audit: type=1326 audit(1738083920.511:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 112.382309][ T26] audit: type=1326 audit(1738083920.521:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 114.328677][ T4580] loop1: detected capacity change from 0 to 2048 [ 114.531317][ T4580] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.040837][ T4580] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 115.060587][ T4580] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 115.080657][ T4580] EXT4-fs (loop1): This should not happen!! Data will be lost [ 115.080657][ T4580] [ 115.094342][ T4580] EXT4-fs (loop1): Total free blocks count 0 [ 115.149019][ T4580] EXT4-fs (loop1): Free/Dirty block details [ 115.185429][ T4580] EXT4-fs (loop1): free_blocks=66060288 [ 115.216803][ T4580] EXT4-fs (loop1): dirty_blocks=16 [ 115.258548][ T4580] EXT4-fs (loop1): Block reservation details [ 115.317865][ T4580] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 115.653219][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 115.707870][ T4610] loop2: detected capacity change from 0 to 64 [ 116.312788][ T4610] ======================================================= [ 116.312788][ T4610] WARNING: The mand mount option has been deprecated and [ 116.312788][ T4610] and is ignored by this kernel. Remove the mand [ 116.312788][ T4610] option from the mount to silence this warning. [ 116.312788][ T4610] ======================================================= [ 116.629054][ T4609] loop1: detected capacity change from 0 to 32768 [ 127.564911][ T4682] loop2: detected capacity change from 0 to 1764 [ 127.677475][ T4697] netlink: 96 bytes leftover after parsing attributes in process `syz.1.112'. [ 128.122143][ T4709] ax25_connect(): syz.2.107 uses autobind, please contact jreuter@yaina.de [ 129.209351][ T4719] loop4: detected capacity change from 0 to 256 [ 129.255067][ T4719] exfat: Deprecated parameter 'namecase' [ 129.260760][ T4719] exfat: Deprecated parameter 'namecase' [ 129.311107][ T4722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 129.320373][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 129.329906][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 130.091957][ T4719] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 132.644528][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.651034][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.418996][ T4745] bridge0: port 3(gretap0) entered blocking state [ 133.425721][ T4745] bridge0: port 3(gretap0) entered disabled state [ 133.434979][ T4745] device gretap0 entered promiscuous mode [ 133.441902][ T4745] bridge0: port 3(gretap0) entered blocking state [ 133.448607][ T4745] bridge0: port 3(gretap0) entered forwarding state [ 134.092374][ T4755] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 135.967714][ T4764] IPVS: set_ctl: invalid protocol: 41 172.20.20.28:20001 [ 139.853882][ T4817] bridge0: port 3(ip6gretap0) entered blocking state [ 139.860790][ T4817] bridge0: port 3(ip6gretap0) entered disabled state [ 139.875446][ T4817] device ip6gretap0 entered promiscuous mode [ 139.883643][ T4817] bridge0: port 3(ip6gretap0) entered blocking state [ 139.890656][ T4817] bridge0: port 3(ip6gretap0) entered forwarding state [ 140.633627][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 140.887277][ T4212] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.342228][ T4212] usb 5-1: Using ep0 maxpacket: 16 [ 141.449355][ T4833] overlayfs: failed to clone upperpath [ 143.122216][ T4212] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 143.131297][ T4212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.145126][ T4212] usb 5-1: config 0 descriptor?? [ 143.207870][ T4212] usb 5-1: can't set config #0, error -71 [ 143.375056][ T4212] usb 5-1: USB disconnect, device number 3 [ 147.803772][ T4856] batman_adv: batadv0: Adding interface: ipvlan2 [ 147.810141][ T4856] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.835511][ T4856] batman_adv: batadv0: Interface activated: ipvlan2 [ 149.972711][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 150.147074][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 150.478674][ T4910] process 'syz.4.180' launched './file1' with NULL argv: empty string added [ 150.533582][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 150.717030][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 150.902948][ T4907] syz.1.170 (4907) used greatest stack depth: 19320 bytes left [ 153.647114][ T4955] netlink: 68 bytes leftover after parsing attributes in process `syz.4.185'. [ 153.903221][ T4963] Cannot find add_set index 0 as target [ 154.398783][ T4958] usb usb8: usbfs: process 4958 (syz.4.187) did not claim interface 0 before use [ 154.772198][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 154.772217][ T26] audit: type=1326 audit(1738083963.931:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x0 [ 155.153076][ T4975] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 155.163009][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.186079][ T4975] batman_adv: batadv0: Adding interface: ipvlan3 [ 155.192579][ T4975] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.218073][ T4975] batman_adv: batadv0: Interface activated: ipvlan3 [ 156.669820][ T4994] bridge0: port 3(ip6gretap0) entered blocking state [ 156.677091][ T4994] bridge0: port 3(ip6gretap0) entered disabled state [ 156.703612][ T4994] device ip6gretap0 entered promiscuous mode [ 156.715914][ T4994] bridge0: port 3(ip6gretap0) entered blocking state [ 156.722746][ T4994] bridge0: port 3(ip6gretap0) entered forwarding state [ 160.319228][ T5033] netlink: 96 bytes leftover after parsing attributes in process `syz.0.203'. [ 160.472602][ T5036] overlayfs: failed to clone upperpath [ 162.997577][ T5076] overlayfs: failed to clone upperpath [ 163.049552][ T5078] overlayfs: failed to clone upperpath [ 164.562872][ T5090] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 166.886991][ T4212] Bluetooth: hci2: command 0x0409 tx timeout [ 170.604437][ T5157] bridge0: port 4(ip6gretap0) entered blocking state [ 170.611345][ T5157] bridge0: port 4(ip6gretap0) entered disabled state [ 170.624223][ T5157] device ip6gretap0 entered promiscuous mode [ 170.632094][ T5157] bridge0: port 4(ip6gretap0) entered blocking state [ 170.638812][ T5157] bridge0: port 4(ip6gretap0) entered forwarding state [ 180.815635][ T5277] Cannot find add_set index 0 as target [ 181.046881][ T5277] usb usb8: usbfs: process 5277 (syz.1.276) did not claim interface 0 before use [ 181.078436][ T26] audit: type=1326 audit(1738083990.251:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f317610eda9 code=0x0 [ 181.305416][ T5291] netlink: 96 bytes leftover after parsing attributes in process `syz.2.279'. [ 181.883653][ T26] audit: type=1800 audit(1738083991.061:63): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.278" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 182.842667][ T5306] netlink: 32 bytes leftover after parsing attributes in process `syz.2.282'. [ 183.630273][ T5314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.282'. [ 185.742217][ T5359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.295'. [ 185.922492][ T4215] Bluetooth: hci4: command 0x0406 tx timeout [ 185.932524][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 185.938587][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 185.980558][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 185.999080][ T5368] Cannot find del_set index 0 as target [ 186.034547][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 186.043965][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 186.068716][ T5373] Cannot find add_set index 0 as target [ 186.133981][ T26] audit: type=1326 audit(1738083995.311:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.2.296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ff2956da9 code=0x0 [ 186.494006][ T5381] bridge0: port 3(ip6gretap0) entered blocking state [ 186.500923][ T5381] bridge0: port 3(ip6gretap0) entered disabled state [ 186.513488][ T5381] device ip6gretap0 entered promiscuous mode [ 186.521417][ T5381] bridge0: port 3(ip6gretap0) entered blocking state [ 186.528163][ T5381] bridge0: port 3(ip6gretap0) entered forwarding state [ 192.204777][ T26] audit: type=1800 audit(1738084000.301:65): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.306" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 194.262588][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268904][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.270334][ T5458] bridge0: port 3(ip6gretap0) entered blocking state [ 195.277856][ T5458] bridge0: port 3(ip6gretap0) entered disabled state [ 195.307494][ T5458] device ip6gretap0 entered promiscuous mode [ 195.320183][ T5458] bridge0: port 3(ip6gretap0) entered blocking state [ 195.326956][ T5458] bridge0: port 3(ip6gretap0) entered listening state [ 198.517960][ T26] audit: type=1800 audit(1738084007.681:66): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.320" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 204.873689][ T5506] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 204.883597][ T5506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.893493][ T5506] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 204.904062][ T5506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.718288][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 207.214538][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 209.218314][ T4402] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 210.452536][ T4402] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 210.484730][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.495717][ T4402] usb 5-1: Product: syz [ 210.500135][ T4402] usb 5-1: Manufacturer: syz [ 210.723574][ C1] bridge0: port 3(ip6gretap0) entered learning state [ 210.782666][ T4402] usb 5-1: config 0 descriptor?? [ 210.814494][ T4402] usb 5-1: can't set config #0, error -71 [ 210.826099][ T4402] usb 5-1: USB disconnect, device number 4 [ 215.271304][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.352'. [ 215.420599][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 215.554371][ T5596] xt_ipvs: protocol family 7 not supported [ 215.646217][ T5611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 215.693687][ T5611] team0: Port device veth3 added [ 215.882967][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 218.208137][ T23] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 218.220722][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.232207][ T4402] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 218.232299][ T23] usb 1-1: Product: syz [ 218.244514][ T23] usb 1-1: Manufacturer: syz [ 218.249273][ T23] usb 1-1: SerialNumber: syz [ 218.280584][ T23] usb 1-1: config 0 descriptor?? [ 218.331552][ T23] usb 1-1: Found UVC 0.00 device syz (093a:2476) [ 218.339072][ T23] usb 1-1: No valid video chain found. [ 218.351103][ T23] gspca_main: pac207-2.14.0 probing 093a:2476 [ 218.432397][ T23] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 218.472209][ T4402] usb 2-1: Using ep0 maxpacket: 16 [ 218.473695][ T23] usb 1-1: USB disconnect, device number 2 [ 218.512230][ T5634] Cannot find add_set index 0 as target [ 218.607275][ T4402] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 218.619437][ T4402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.649285][ T4402] usb 2-1: config 0 descriptor?? [ 218.707596][ T4402] usb 2-1: interface 1 not found [ 219.802472][ T23] usb 2-1: USB disconnect, device number 4 [ 221.434435][ T5653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 222.387029][ T5653] team0: Port device veth3 added [ 222.454199][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 222.600278][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 222.990092][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 223.006494][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 223.026415][ T1347] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 223.782598][ T5686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.373'. [ 224.066211][ T1347] usb 1-1: Using ep0 maxpacket: 8 [ 224.692389][ T1347] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 224.702138][ T1347] usb 1-1: config 0 has no interface number 0 [ 224.708339][ T1347] usb 1-1: config 0 interface 74 has no altsetting 0 [ 225.090900][ T1347] usb 1-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice=81.cd [ 225.155319][ T1347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.286049][ T1347] usb 1-1: Product: syz [ 225.346355][ T1347] usb 1-1: Manufacturer: syz [ 225.537958][ T1347] usb 1-1: SerialNumber: syz [ 225.911700][ T1347] usb 1-1: config 0 descriptor?? [ 226.082111][ C1] bridge0: port 3(ip6gretap0) entered forwarding state [ 226.089019][ C1] bridge0: topology change detected, propagating [ 226.128109][ T1347] usb 1-1: can't set config #0, error -71 [ 227.016146][ T5709] overlayfs: failed to clone upperpath [ 227.138871][ T1347] usb 1-1: USB disconnect, device number 3 [ 227.552235][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 228.012226][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.023951][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.034727][ T23] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 228.044595][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.150805][ T23] usb 2-1: config 0 descriptor?? [ 230.570597][ T5748] Cannot find add_set index 0 as target [ 232.462947][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 232.469329][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 232.631686][ T23] usb 2-1: USB disconnect, device number 5 [ 232.751852][ T5762] sctp: failed to load transform for md5: -2 [ 233.290982][ T4212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 234.094976][ T5772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.397'. [ 234.492246][ T4212] usb 4-1: device not accepting address 2, error -71 [ 237.970001][ T5812] sctp: failed to load transform for md5: -2 [ 237.970992][ T5822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.410'. [ 240.782540][ T5846] Timeout policy `syz1' can only be used by L3 protocol number 2 [ 240.815078][ T5846] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 240.841380][ T5846] CIFS mount error: No usable UNC path provided in device string! [ 240.841380][ T5846] [ 240.851701][ T5846] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 241.668825][ T5859] vxcan1: tx address claim with dest, not broadcast [ 242.530081][ T5871] delete_channel: no stack [ 243.498759][ T5879] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 245.983753][ T5894] netlink: 164 bytes leftover after parsing attributes in process `syz.4.424'. [ 255.525424][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.565800][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.526796][ T5995] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.455'. [ 264.669868][ T6023] netlink: 'syz.0.465': attribute type 21 has an invalid length. [ 264.677963][ T6023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.465'. [ 266.145078][ T6036] Cannot find add_set index 0 as target [ 274.960873][ T6095] Cannot find add_set index 0 as target [ 280.925859][ T26] audit: type=1326 audit(1738084090.091:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1806fbda9 code=0x0 [ 281.647191][ T6146] loop0: detected capacity change from 0 to 256 [ 283.716349][ T6154] overlayfs: failed to clone upperpath [ 283.980983][ T6157] Cannot find add_set index 0 as target [ 285.866830][ T6174] ALSA: seq fatal error: cannot create timer (-22) [ 285.911111][ T6174] loop0: detected capacity change from 0 to 256 [ 286.558875][ T6180] mkiss: ax0: crc mode is auto. [ 287.455481][ T6181] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.504'. [ 289.770843][ T6196] ./file0: Can't open blockdev [ 291.754152][ T6203] delete_channel: no stack [ 292.417291][ T6219] loop1: detected capacity change from 0 to 2048 [ 292.579675][ T6219] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 292.606176][ T6219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.959185][ T4218] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 294.569559][ T6232] loop1: detected capacity change from 0 to 4096 [ 296.542568][ T4218] usb 4-1: device not accepting address 4, error -71 [ 296.621377][ T6249] delete_channel: no stack [ 297.021956][ T6253] loop0: detected capacity change from 0 to 8 [ 297.256069][ T6253] xt_NFQUEUE: number of total queues is 0 [ 297.911342][ T6259] Cannot find add_set index 0 as target [ 298.244999][ T6272] autofs4:pid:6272:autofs_fill_super: called with bogus options [ 301.678684][ T6288] loop1: detected capacity change from 0 to 256 [ 303.916235][ T6298] delete_channel: no stack [ 306.373901][ T6312] 9pnet: Insufficient options for proto=fd [ 306.397728][ T6312] netlink: 'syz.2.540': attribute type 10 has an invalid length. [ 307.201782][ T6312] bond0: (slave bond_slave_0): Releasing backup interface [ 307.233277][ T6327] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.291966][ T6333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.663377][ T6327] loop1: detected capacity change from 0 to 512 [ 307.744957][ T6327] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 307.762498][ T6329] device veth0_to_batadv entered promiscuous mode [ 307.809117][ T6329] device veth0_to_batadv left promiscuous mode [ 308.418623][ T6342] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 311.181856][ T6346] delete_channel: no stack [ 314.634117][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.556'. [ 314.664312][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 315.252285][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 315.642817][ T23] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 315.723550][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.875787][ T6390] loop1: detected capacity change from 0 to 1024 [ 315.920423][ T23] usb 1-1: Product: syz [ 315.969674][ T23] usb 1-1: Manufacturer: syz [ 315.990842][ T23] usb 1-1: SerialNumber: syz [ 316.003324][ T23] usb 1-1: config 0 descriptor?? [ 316.020762][ T6394] delete_channel: no stack [ 316.049695][ T23] ums-datafab 1-1:0.0: USB Mass Storage device detected [ 316.323850][ T6401] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 317.336002][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.342540][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.859973][ T23] ums-sddr55 1-1:0.0: USB Mass Storage device detected [ 320.596712][ T23] usb 1-1: USB disconnect, device number 4 [ 322.911117][ T6440] tipc: Started in network mode [ 322.916203][ T6440] tipc: Node identity 7, cluster identity 4711 [ 322.922434][ T6440] tipc: Node number set to 7 [ 324.171550][ T6449] delete_channel: no stack [ 326.432941][ T6467] tc_dump_action: action bad kind [ 326.488557][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 327.756914][ T1109] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 330.620579][ T1109] usb 2-1: device not accepting address 6, error -71 [ 330.701407][ T6504] delete_channel: no stack [ 336.221644][ T26] audit: type=1326 audit(1738084144.031:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 336.946087][ T26] audit: type=1326 audit(1738084144.031:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 340.786670][ T26] audit: type=1326 audit(1738084144.111:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 341.794535][ T6574] Cannot find add_set index 0 as target [ 341.841895][ T6577] delete_channel: no stack [ 341.872073][ T26] audit: type=1326 audit(1738084144.111:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 343.398221][ T26] audit: type=1326 audit(1738084144.121:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 343.481761][ T26] audit: type=1326 audit(1738084144.171:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 343.522797][ T26] audit: type=1326 audit(1738084144.171:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 343.802138][ T26] audit: type=1326 audit(1738084144.171:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 345.333645][ T6606] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 346.539582][ T26] audit: type=1326 audit(1738084144.221:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 346.638003][ T26] audit: type=1326 audit(1738084144.221:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 346.762909][ T6625] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 347.588089][ T26] audit: type=1326 audit(1738084144.231:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 347.672191][ T26] audit: type=1326 audit(1738084144.271:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 347.698154][ T26] audit: type=1326 audit(1738084144.271:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 347.762883][ T26] audit: type=1326 audit(1738084144.281:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 347.799269][ T26] audit: type=1326 audit(1738084144.331:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 348.062653][ T6638] Cannot find add_set index 0 as target [ 348.078451][ T26] audit: type=1326 audit(1738084144.351:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 348.102536][ T6638] loop0: detected capacity change from 0 to 1024 [ 351.979151][ T6654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.139462][ T26] audit: type=1326 audit(1738084144.351:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 352.379682][ T26] audit: type=1326 audit(1738084144.581:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 352.562361][ T26] audit: type=1326 audit(1738084144.591:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 352.585006][ T26] audit: type=1326 audit(1738084144.601:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 352.617859][ T26] audit: type=1326 audit(1738084144.631:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 352.646642][ T6664] sctp: [Deprecated]: syz.2.626 (pid 6664) Use of int in max_burst socket option deprecated. [ 352.646642][ T6664] Use struct sctp_assoc_value instead [ 352.695213][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 352.715395][ T26] audit: type=1326 audit(1738084144.651:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 352.798629][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 352.877706][ T26] audit: type=1326 audit(1738084144.661:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 352.890301][ T6669] delete_channel: no stack [ 352.935575][ T26] audit: type=1326 audit(1738084144.731:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 353.407268][ T6661] sctp: failed to load transform for md5: -2 [ 353.632083][ T26] audit: type=1326 audit(1738084144.741:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 353.765218][ T26] audit: type=1326 audit(1738084144.741:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 353.843227][ T6682] delete_channel: no stack [ 353.867478][ T26] audit: type=1326 audit(1738084144.751:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 353.917406][ T26] audit: type=1326 audit(1738084144.781:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 353.945947][ T26] audit: type=1326 audit(1738084144.781:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 356.455784][ T6697] delete_channel: no stack [ 356.490998][ T26] audit: type=1326 audit(1738084144.851:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6a32dda9 code=0x7ffc0000 [ 356.771671][ T1347] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 358.331338][ T6717] loop0: detected capacity change from 0 to 256 [ 358.502300][ T6717] MINIX-fs: mounting file system with errors, running fsck is recommended [ 360.085522][ T6731] delete_channel: no stack [ 364.925458][ T6779] netlink: 'syz.0.654': attribute type 49 has an invalid length. [ 364.933916][ T6779] netlink: 'syz.0.654': attribute type 49 has an invalid length. [ 364.978315][ T6779] netlink: 'syz.0.654': attribute type 49 has an invalid length. [ 365.870388][ T6789] delete_channel: no stack [ 367.057320][ T6801] delete_channel: no stack [ 367.320654][ T6807] udevd[6807]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 367.986559][ T6823] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 369.961163][ T6840] delete_channel: no stack [ 370.953469][ T6850] delete_channel: no stack [ 373.495431][ T6879] delete_channel: no stack [ 375.419087][ T6895] udevd[6895]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 375.506561][ T6900] Cannot find add_set index 0 as target [ 375.550848][ T6905] delete_channel: no stack [ 378.476072][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.640259][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.658612][ T6942] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 380.357809][ T6952] delete_channel: no stack [ 381.970106][ T6973] loop0: detected capacity change from 0 to 256 [ 384.256711][ T6994] Cannot find add_set index 0 as target [ 385.270901][ T6997] hub 2-0:1.0: USB hub found [ 385.280987][ T6997] hub 2-0:1.0: 1 port detected [ 387.448858][ T7009] misc userio: Invalid payload size [ 387.460134][ T7009] misc userio: No port type given on /dev/userio [ 387.783387][ T7007] device team0 entered promiscuous mode [ 387.809637][ T7007] device team_slave_0 entered promiscuous mode [ 387.841825][ T7007] device team_slave_1 entered promiscuous mode [ 387.892390][ T7007] device veth3 entered promiscuous mode [ 388.029311][ T7011] team0: Port device team_slave_0 removed [ 388.131727][ T7007] device team0 left promiscuous mode [ 388.140724][ T7007] device team_slave_1 left promiscuous mode [ 388.156008][ T7007] device veth3 left promiscuous mode [ 388.302454][ T7032] delete_channel: no stack [ 393.476554][ T7071] netlink: 68 bytes leftover after parsing attributes in process `syz.0.739'. [ 394.448769][ T7088] delete_channel: no stack [ 394.655055][ T7092] Cannot find add_set index 0 as target [ 400.275292][ T7138] Cannot find add_set index 0 as target [ 404.198051][ T7182] 9pnet_virtio: no channels available for device syz [ 407.235415][ T7216] udevd[7216]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 409.758749][ T7254] delete_channel: no stack [ 412.239981][ T7296] delete_channel: no stack [ 412.955940][ T7305] delete_channel: no stack [ 415.339249][ T7345] delete_channel: no stack [ 415.546167][ T7350] delete_channel: no stack [ 415.833279][ T7358] delete_channel: no stack [ 418.241311][ T7392] delete_channel: no stack [ 418.269641][ T7394] delete_channel: no stack [ 423.260365][ T7437] delete_channel: no stack [ 423.655567][ T7441] delete_channel: no stack [ 424.374144][ T7463] delete_channel: no stack [ 427.354573][ T7490] delete_channel: no stack [ 427.852598][ T7503] delete_channel: no stack [ 430.065517][ T7532] delete_channel: no stack [ 430.578981][ T7540] delete_channel: no stack [ 431.312403][ T7546] loop0: detected capacity change from 0 to 256 [ 431.397161][ T7546] MINIX-fs: mounting file system with errors, running fsck is recommended [ 431.754186][ T7563] delete_channel: no stack [ 433.490307][ T7577] delete_channel: no stack [ 435.153699][ T7612] delete_channel: no stack [ 436.386001][ T7627] delete_channel: no stack [ 439.281533][ T7652] delete_channel: no stack [ 440.609626][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.616026][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.068361][ T7669] delete_channel: no stack [ 443.952762][ T7679] xt_TCPMSS: Only works on TCP SYN packets [ 446.996457][ T7716] delete_channel: no stack [ 450.175802][ T7740] udevd[7740]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 452.349877][ T7760] delete_channel: no stack [ 454.839318][ T7764] loop0: detected capacity change from 0 to 256 [ 455.051186][ T7764] MINIX-fs: mounting file system with errors, running fsck is recommended [ 456.278877][ T7792] fuse: Unknown parameter 'grou00000000000000000000' [ 458.223782][ T7810] netlink: 'syz.3.957': attribute type 4 has an invalid length. [ 459.754826][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 459.773625][ T7826] delete_channel: no stack [ 459.843313][ T7816] netlink: 'syz.3.957': attribute type 7 has an invalid length. [ 459.871430][ T7816] netlink: 244 bytes leftover after parsing attributes in process `syz.3.957'. [ 466.502360][ T7883] netlink: 96 bytes leftover after parsing attributes in process `syz.3.972'. [ 471.867358][ T7934] loop0: detected capacity change from 0 to 256 [ 472.685205][ T7934] MINIX-fs: mounting file system with errors, running fsck is recommended [ 475.040333][ T7969] program syz.0.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.322617][ T8012] sctp: [Deprecated]: syz.1.1010 (pid 8012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.322617][ T8012] Use struct sctp_sack_info instead [ 481.527567][ T8016] Cannot find set identified by id 0 to match [ 483.358394][ T8042] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 483.712142][ T4212] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 484.137081][ T8047] delete_channel: no stack [ 484.153434][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 484.462619][ T4212] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 484.471707][ T4212] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 484.604288][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.883954][ T4212] usb 2-1: config 0 descriptor?? [ 485.507288][ T8066] bridge0: port 5(syz_tun) entered blocking state [ 485.514427][ T8066] bridge0: port 5(syz_tun) entered disabled state [ 485.534628][ T8066] device syz_tun entered promiscuous mode [ 485.544800][ T8066] bridge0: port 5(syz_tun) entered blocking state [ 485.551433][ T8066] bridge0: port 5(syz_tun) entered forwarding state [ 485.705039][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 485.705186][ T26] audit: type=1326 audit(1738084294.579:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 485.742545][ T26] audit: type=1326 audit(1738084294.579:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 485.742586][ T26] audit: type=1326 audit(1738084294.589:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 485.742621][ T26] audit: type=1326 audit(1738084294.599:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 485.742656][ T26] audit: type=1326 audit(1738084294.599:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 485.742691][ T26] audit: type=1326 audit(1738084294.599:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 485.742726][ T26] audit: type=1326 audit(1738084294.599:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 485.742760][ T26] audit: type=1326 audit(1738084294.609:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 485.742795][ T26] audit: type=1326 audit(1738084294.609:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 485.742830][ T26] audit: type=1326 audit(1738084294.619:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1806fbda9 code=0x7ffc0000 [ 487.013076][ T4402] usb 2-1: USB disconnect, device number 9 [ 488.552905][ T4214] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 488.923401][ T4214] usb 5-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 489.177955][ T4214] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.543477][ T4214] usb 5-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=32.00 [ 489.566515][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.639159][ T4214] usb 5-1: Product: syz [ 489.649484][ T4214] usb 5-1: Manufacturer: syz [ 489.659383][ T4214] usb 5-1: SerialNumber: syz [ 490.626383][ T4214] usb 5-1: config 0 descriptor?? [ 491.193429][ T4214] usb 5-1: USB disconnect, device number 5 [ 495.029305][ T8183] nfs4: Bad value for 'source' [ 495.264435][ T8187] 9pnet_virtio: no channels available for device syz [ 496.685391][ T8187] bond0: (slave rose0): Enslaving as an active interface with an up link [ 501.167456][ T8247] delete_channel: no stack [ 501.293935][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.300431][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.338460][ T8289] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 505.826489][ T8289] delete_channel: no stack [ 508.076347][ T8319] tipc: Started in network mode [ 508.081305][ T8319] tipc: Node identity 7, cluster identity 4711 [ 508.087570][ T8319] tipc: Node number set to 7 [ 509.077886][ T8321] hub 2-0:1.0: USB hub found [ 509.083721][ T8321] hub 2-0:1.0: 1 port detected [ 509.851702][ T8327] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 509.913136][ T8329] delete_channel: no stack [ 512.656497][ T8358] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 515.371527][ T8374] delete_channel: no stack [ 516.004329][ T8380] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.238681][ T8385] overlayfs: failed to clone upperpath [ 519.096383][ T8394] delete_channel: no stack [ 519.400169][ T8408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.621016][ T8421] xt_TCPMSS: Only works on TCP SYN packets [ 520.934016][ T8430] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1117'. [ 522.212760][ T8441] Cannot find add_set index 0 as target [ 524.791398][ T8390] udevd[8390]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 528.581591][ T8490] hugetlbfs: syz.0.1142 (8490): Using mlock ulimits for SHM_HUGETLB is deprecated [ 529.494543][ T8494] sctp: [Deprecated]: syz.0.1134 (pid 8494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.494543][ T8494] Use struct sctp_sack_info instead [ 529.632734][ T8496] Cannot find set identified by id 0 to match [ 533.683721][ T4214] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 533.984479][ T4214] Bluetooth: hci2: Injecting HCI hardware error event [ 534.120243][ T4180] Bluetooth: hci2: hardware error 0x00 [ 538.565825][ T8602] device team0 entered promiscuous mode [ 538.571421][ T8602] device team_slave_0 entered promiscuous mode [ 538.659668][ T8602] device team_slave_1 entered promiscuous mode [ 538.910769][ T8604] team0: Port device team_slave_0 removed [ 539.076704][ T8602] device team0 left promiscuous mode [ 539.182077][ T8602] device team_slave_1 left promiscuous mode [ 539.665397][ T8622] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1163'. [ 544.418265][ T8647] nfs4: Bad value for 'source' [ 544.427281][ T8647] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 545.975051][ T8658] device team0 entered promiscuous mode [ 546.016953][ T8658] device team_slave_0 entered promiscuous mode [ 546.040679][ T8658] device team_slave_1 entered promiscuous mode [ 546.131825][ T8658] team0: Port device team_slave_0 removed [ 546.170499][ T8671] ip6t_rpfilter: unknown options [ 546.220897][ T8658] device team0 left promiscuous mode [ 546.226670][ T8658] device team_slave_1 left promiscuous mode [ 547.228541][ T8683] program syz.4.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.609248][ T8720] udevd[8720]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 556.903136][ T8735] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1196'. [ 558.603890][ T8749] xt_CT: No such helper "pptp" [ 563.096697][ T8776] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 563.105814][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1207'. [ 563.132928][ T8776] device ipvlan1 entered promiscuous mode [ 563.329244][ T8776] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 563.616308][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.622665][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.033696][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.331686][ T8802] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 566.507932][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.777643][ T8802] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 566.933695][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.758174][ T8824] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1220'. [ 569.814233][ T8833] delete_channel: no stack [ 572.107185][ T8844] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1226'. [ 575.639357][ T8850] device  entered promiscuous mode [ 575.755293][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 575.780560][ T8867] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1232'. [ 576.805926][ T8884] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 576.936446][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 577.189902][ T8888] device dummy0 entered promiscuous mode [ 577.212740][ T8888] device macvtap1 entered promiscuous mode [ 577.303670][ T8897] xt_socket: unknown flags 0x50 [ 579.504992][ T8916] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1245'. [ 583.809598][ T8957] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1255'. [ 583.840863][ T8957] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 584.088468][ T8961] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1258'. [ 584.384075][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.593511][ T21] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 587.094068][ T9001] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1267'. [ 587.802158][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 589.042288][ T21] usb 5-1: not running at top speed; connect to a high speed hub [ 589.122312][ T21] usb 5-1: config 2 has an invalid interface number: 131 but max is 0 [ 589.130570][ T21] usb 5-1: config 2 has no interface number 0 [ 589.462017][ T9014] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1270'. [ 591.486539][ T21] usb 5-1: config 2 interface 131 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0 [ 591.709978][ T9017] [U]  [ 591.805104][ T21] usb 5-1: config 2 interface 131 has no altsetting 0 [ 592.292174][ T21] usb 5-1: string descriptor 0 read error: -71 [ 592.298510][ T21] usb 5-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=57.30 [ 592.342270][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.442242][ T21] usb 5-1: can't set config #2, error -71 [ 592.473234][ T21] usb 5-1: USB disconnect, device number 6 [ 593.378017][ T9046] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1282'. [ 596.491164][ T9065] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1288'. [ 597.265892][ T9067] delete_channel: no stack [ 597.362621][ T21] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 597.571969][ T7997] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 597.733109][ T21] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 597.872170][ T21] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 597.881611][ T21] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 597.890258][ T21] usb 2-1: Manufacturer: syz [ 597.895114][ T21] usb 2-1: SerialNumber: syz [ 597.942253][ T7997] usb 4-1: config 3 has an invalid interface number: 1 but max is 0 [ 597.955364][ T7997] usb 4-1: config 3 has no interface number 0 [ 598.112097][ T7997] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=ae.d2 [ 598.121713][ T7997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.129807][ T7997] usb 4-1: Product: syz [ 598.134138][ T7997] usb 4-1: Manufacturer: syz [ 598.138740][ T7997] usb 4-1: SerialNumber: syz [ 598.175781][ T21] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 598.185880][ T21] usb 2-1: USB disconnect, device number 10 [ 598.195592][ T7997] usbhid 4-1:3.1: couldn't find an input interrupt endpoint [ 598.397751][ T1109] usb 4-1: USB disconnect, device number 6 [ 598.601171][ T9093] delete_channel: no stack [ 598.825039][ T9103] netlink: 'syz.1.1305': attribute type 10 has an invalid length. [ 598.833382][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1305'. [ 598.843890][ T9103] device ipvlan1 entered promiscuous mode [ 598.859282][ T9103] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 601.281059][ T9130] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1314'. [ 601.866737][ T9131] loop0: detected capacity change from 0 to 256 [ 602.004137][ T9131] MINIX-fs: mounting file system with errors, running fsck is recommended [ 604.591991][ T4264] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 604.842118][ T4264] usb 2-1: Using ep0 maxpacket: 32 [ 604.962253][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 605.137245][ T4264] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 605.153753][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.179068][ T4264] usb 2-1: Product: syz [ 605.184964][ T4264] usb 2-1: Manufacturer: syz [ 605.199838][ T4264] usb 2-1: SerialNumber: syz [ 605.220904][ T4264] usb 2-1: config 0 descriptor?? [ 605.264842][ T4264] usbtouchscreen: probe of 2-1:0.0 failed with error -12 [ 605.652550][ T7997] usb 2-1: USB disconnect, device number 11 [ 605.802565][ T9185] loop0: detected capacity change from 0 to 256 [ 605.866048][ T9185] MINIX-fs: mounting file system with errors, running fsck is recommended [ 606.422296][ T9197] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 606.450051][ T9197] delete_channel: no stack [ 606.852128][ T7997] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 607.101950][ T7997] usb 2-1: Using ep0 maxpacket: 8 [ 607.382157][ T7997] usb 2-1: New USB device found, idVendor=13d3, idProduct=3306, bcdDevice=88.be [ 607.407766][ T7997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.419028][ T7997] usb 2-1: Product: syz [ 607.623130][ T9221] loop0: detected capacity change from 0 to 1024 [ 607.624496][ T7997] usb 2-1: Manufacturer: syz [ 607.671098][ T7997] usb 2-1: SerialNumber: syz [ 608.506494][ T7997] usb 2-1: config 0 descriptor?? [ 608.544654][ T7997] r8712u: register rtl8712_netdev_ops to netdev_ops [ 608.551291][ T7997] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 608.738315][ T9235] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 608.758383][ T9235] delete_channel: no stack [ 608.773813][ T7997] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 608.780470][ T7997] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 608.823856][ T7997] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 608.850481][ T155] hfsplus: b-tree write err: -5, ino 4 [ 608.874624][ T7997] usb 2-1: USB disconnect, device number 12 [ 608.997246][ T9241] loop0: detected capacity change from 0 to 256 [ 609.050583][ T9243] tmpfs: Bad value for 'size' [ 609.108000][ T9241] FAT-fs (loop0): Directory bread(block 64) failed [ 609.138357][ T9241] FAT-fs (loop0): Directory bread(block 65) failed [ 609.151381][ T9241] FAT-fs (loop0): Directory bread(block 66) failed [ 609.168517][ T9241] FAT-fs (loop0): Directory bread(block 67) failed [ 609.179534][ T9241] FAT-fs (loop0): Directory bread(block 68) failed [ 609.192044][ T9241] FAT-fs (loop0): Directory bread(block 69) failed [ 609.211194][ T9241] FAT-fs (loop0): Directory bread(block 70) failed [ 609.228147][ T9241] FAT-fs (loop0): Directory bread(block 71) failed [ 609.244873][ T9241] FAT-fs (loop0): Directory bread(block 72) failed [ 609.260453][ T9241] FAT-fs (loop0): Directory bread(block 73) failed [ 609.263563][ T9248] ieee802154 phy0 wpan0: encryption failed: -22 [ 609.686519][ T9258] [U]  [ 609.772132][ T4264] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 609.772180][ T7997] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 610.499769][ T9260] delete_channel: no stack [ 610.528929][ T7997] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 610.538485][ T7997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.549259][ T7997] usb 2-1: config 0 descriptor?? [ 610.572082][ T4264] usb 5-1: Using ep0 maxpacket: 16 [ 611.602775][ T4264] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 611.612243][ T4264] usb 5-1: config 0 has no interface number 0 [ 611.622338][ T7997] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 611.648597][ T7997] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 611.772227][ T4264] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 611.781352][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.800473][ T4264] usb 5-1: Product: syz [ 611.818112][ T4264] usb 5-1: Manufacturer: syz [ 611.831966][ T4264] usb 5-1: SerialNumber: syz [ 611.871998][ T7997] [drm:udl_init] *ERROR* Selecting channel failed [ 611.884700][ T4264] usb 5-1: config 0 descriptor?? [ 611.953659][ T7997] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 611.961180][ T7997] [drm] Initialized udl on minor 2 [ 611.992438][ T7997] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 612.015716][ T7997] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 612.034203][ T7997] usb 2-1: USB disconnect, device number 13 [ 612.046676][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 612.093189][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 612.122754][ T21] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 612.189185][ T21] usb 5-1: USB disconnect, device number 7 [ 613.791201][ T1109] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 613.812800][ T9297] delete_channel: no stack [ 613.874214][ T9299] loop1: detected capacity change from 0 to 64 [ 614.058311][ T9301] loop0: detected capacity change from 0 to 1764 [ 614.222239][ T1109] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 614.243920][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.274682][ T1109] usb 5-1: config 0 descriptor?? [ 614.542174][ T4402] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 614.602285][ T1109] usb 5-1: string descriptor 0 read error: -71 [ 614.615969][ T1109] ldusb 5-1:0.0: Interrupt in endpoint not found [ 614.632575][ T1109] usb 5-1: USB disconnect, device number 8 [ 614.922245][ T4402] usb 4-1: not running at top speed; connect to a high speed hub [ 615.046122][ T4402] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 615.077119][ T4402] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 615.095012][ T4402] usb 4-1: config 1 interface 0 has no altsetting 0 [ 615.121273][ T9328] ebt_among: src integrity fail: 100 [ 615.298121][ T4402] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 615.307702][ T4402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.323388][ T4402] usb 4-1: Product: syz [ 615.327603][ T4402] usb 4-1: Manufacturer: syz [ 615.343092][ T4402] usb 4-1: SerialNumber: syz [ 615.442459][ T9307] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 615.566160][ T9341] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1393'. [ 616.786868][ T4402] usbhid 4-1:1.0: can't add hid device: -71 [ 616.792983][ T4402] usbhid: probe of 4-1:1.0 failed with error -71 [ 616.802918][ T4402] usb 4-1: USB disconnect, device number 7 [ 619.009866][ T9390] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1409'. [ 620.204425][ T9405] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1414'. [ 621.701899][ T9415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 622.439642][ T9422] udevd[9422]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 623.702422][ T9445] delete_channel: no stack [ 624.086110][ T9454] netlink: 'syz.1.1433': attribute type 10 has an invalid length. [ 624.148284][ T9454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1433'. [ 624.172003][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.178485][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.215393][ T9454] batman_adv: batadv0: Adding interface: virt_wifi0 [ 624.335601][ T9454] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.382119][ T9454] batman_adv: batadv0: Interface activated: virt_wifi0 [ 625.701512][ T9488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1448'. [ 625.778803][ T9492] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 627.706249][ T9517] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 627.735013][ T9519] IPVS: set_ctl: invalid protocol: 2 172.30.0.5:20002 [ 627.785449][ T9517] delete_channel: no stack [ 629.146206][ T9548] delete_channel: no stack [ 629.499607][ T9565] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1475'. [ 630.890242][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 631.123769][ T9590] delete_channel: no stack [ 632.110638][ T9607] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1492'. [ 634.784599][ T9643] [U]  [ 636.308694][ T9656] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1508'. [ 638.701490][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 638.701506][ T26] audit: type=1326 audit(1738084447.869:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.4.1520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a32dda9 code=0x0 [ 638.926049][ T9682] delete_channel: no stack [ 640.540787][ T9711] Device name cannot be null; rc = [-22] [ 643.506712][ T9767] netlink: 'syz.1.1552': attribute type 2 has an invalid length. [ 646.437314][ T9806] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1562'. [ 647.083572][ T9809] Cannot find add_set index 0 as target [ 647.380405][ T9814] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1568'. [ 647.620880][ T26] audit: type=1326 audit(1738084456.789:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.1.1570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f317610eda9 code=0x0 [ 648.432691][ T9836] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1574'. [ 649.511772][ T9857] delete_channel: no stack [ 650.402158][ T4214] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 650.445633][ T9885] netlink: 'syz.0.1594': attribute type 1 has an invalid length. [ 650.465114][ T9883] delete_channel: no stack [ 651.122285][ T4214] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.137914][ T4214] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.263350][ T4214] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 651.318740][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 651.406075][ T4214] usb 2-1: SerialNumber: syz [ 651.877764][ T9902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1601'. [ 652.097627][ T4214] usb 2-1: 0:2 : does not exist [ 652.529325][ T4214] usb 2-1: USB disconnect, device number 14 [ 652.868651][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 652.959377][ T9931] sp0: Synchronizing with TNC [ 653.008550][ T9873] udevd[9873]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.842248][ T9960] netlink: 'syz.1.1623': attribute type 4 has an invalid length. [ 654.902741][ T9960] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1623'. [ 654.983185][ T9963] delete_channel: no stack [ 655.070313][ T9960] syz.1.1623 (9960) used greatest stack depth: 19192 bytes left [ 655.206821][ T9970] syz.0.1626[9970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.206931][ T9970] syz.0.1626[9970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.408255][ T9974] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 655.531642][ T9974] delete_channel: no stack [ 656.591958][ T1109] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 656.831963][ T1109] usb 4-1: Using ep0 maxpacket: 32 [ 656.846317][T10000] delete_channel: no stack [ 656.952207][ T1109] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 656.971238][ T1109] usb 4-1: config 0 has no interface number 0 [ 657.152308][ T1109] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 657.380845][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.484110][ T1109] usb 4-1: Product: syz [ 657.492241][ T1109] usb 4-1: Manufacturer: syz [ 657.496921][ T1109] usb 4-1: SerialNumber: syz [ 657.536301][ T1109] usb 4-1: config 0 descriptor?? [ 657.613897][ T1109] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 657.989811][ T1109] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 658.002109][ T4214] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 658.013559][ T1109] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 658.782070][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 658.985285][ T4212] usb 4-1: USB disconnect, device number 8 [ 659.003561][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 659.058844][ T4212] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 659.072402][ T4214] usb 2-1: Using ep0 maxpacket: 16 [ 659.107353][ T4212] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 659.263280][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.328490][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.390347][ T4214] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.427852][ T4212] quatech2 4-1:0.51: device disconnected [ 659.447904][ T4214] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 659.464624][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.136477][ T4214] usb 2-1: config 0 descriptor?? [ 660.684852][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0xe [ 660.712160][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 660.719477][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 660.781934][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 660.801166][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 661.008800][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 661.238209][T10046] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1654'. [ 661.476494][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 661.513196][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 661.553106][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 661.590812][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 661.630371][ T4214] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 661.904543][ T4214] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 662.022089][ T4214] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 662.071941][ T4214] microsoft 0003:045E:07DA.0001: no inputs found [ 662.078467][ T4214] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 662.110200][ T4214] usb 2-1: USB disconnect, device number 15 [ 662.442083][ T7997] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 662.852094][ T7997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.873776][ T7997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.912187][ T7997] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 662.941988][ T7997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.971402][ T7997] usb 4-1: config 0 descriptor?? [ 663.453823][ T7997] dragonrise 0003:0079:0006.0002: item fetching failed at offset 2/5 [ 664.253950][ T7997] dragonrise 0003:0079:0006.0002: parse failed [ 664.260176][ T7997] dragonrise: probe of 0003:0079:0006.0002 failed with error -22 [ 664.290674][ T7997] usb 4-1: USB disconnect, device number 9 [ 665.082151][ T9050] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 665.101980][ T1109] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 665.602686][ T9050] usb 5-1: Using ep0 maxpacket: 16 [ 665.607980][ T1109] usb 4-1: Using ep0 maxpacket: 32 [ 665.782226][ T1109] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 665.790481][ T9050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.802030][ T1109] usb 4-1: config 0 has no interface number 0 [ 665.808158][ T1109] usb 4-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 665.819163][ T9050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.829155][ T9050] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 665.838367][ T1109] usb 4-1: config 0 interface 244 has no altsetting 0 [ 665.845244][ T9050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.869131][ T9050] usb 5-1: config 0 descriptor?? [ 666.012170][ T1109] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 666.021262][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.041921][ T1109] usb 4-1: Product: syz [ 666.046115][ T1109] usb 4-1: Manufacturer: syz [ 666.050709][ T1109] usb 4-1: SerialNumber: syz [ 666.066024][ T1109] usb 4-1: config 0 descriptor?? [ 666.115630][ T1109] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort found [ 666.333861][ T1109] snd_usb_toneport 4-1:0.244: cannot get proper max packet size [ 666.354357][ T1109] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort now disconnected [ 666.375562][ T1109] snd_usb_toneport: probe of 4-1:0.244 failed with error -22 [ 666.468606][ T9050] elecom 0003:056E:00FC.0003: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 666.573736][T10081] udc-core: couldn't find an available UDC or it's busy [ 666.587953][T10122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1684'. [ 666.597416][T10081] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 666.609447][ T1109] usb 4-1: USB disconnect, device number 10 [ 666.667230][ T9050] usb 5-1: USB disconnect, device number 9 [ 667.386760][T10148] tipc: Enabling of bearer rejected, failed to enable media [ 667.643863][ T9050] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 668.293356][ T9050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 668.319613][ T9050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.415088][ T9050] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 668.427020][ T9050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.451577][ T9050] usb 4-1: config 0 descriptor?? [ 668.708091][T10180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.506874][ T9050] sony 0003:054C:0268.0004: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 669.591948][ T9050] sony 0003:054C:0268.0004: failed to claim input [ 669.646485][ T9050] usb 4-1: USB disconnect, device number 11 [ 669.932161][ T4264] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 670.372305][ T4264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.389989][ T4264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.401143][ T4264] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 670.425376][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.460606][ T4264] usb 5-1: config 0 descriptor?? [ 670.803014][ T21] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 671.057099][ T4264] waltop 0003:172F:0034.0005: item fetching failed at offset 5/7 [ 671.146878][ T4264] waltop: probe of 0003:172F:0034.0005 failed with error -22 [ 671.292921][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.500444][ T4264] usb 5-1: USB disconnect, device number 10 [ 671.506915][ T21] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 671.522801][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.540832][ T21] usb 2-1: config 0 descriptor?? [ 672.484698][ T21] prodikeys 0003:041E:2801.0006: unknown main item tag 0x6 [ 672.500780][ T21] prodikeys 0003:041E:2801.0006: report_id 29495 is invalid [ 672.519050][ T21] prodikeys 0003:041E:2801.0006: item 0 2 1 8 parsing failed [ 672.654581][T10217] bridge0: port 4(hsr_slave_1) entered blocking state [ 672.663053][T10217] bridge0: port 4(hsr_slave_1) entered disabled state [ 672.669932][ T21] prodikeys 0003:041E:2801.0006: hid parse failed [ 672.677627][ T21] prodikeys: probe of 0003:041E:2801.0006 failed with error -22 [ 672.693763][ T4212] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 672.700914][ T21] usb 2-1: USB disconnect, device number 16 [ 672.889418][T10228] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1725'. [ 672.952080][ T4212] usb 4-1: Using ep0 maxpacket: 32 [ 673.078590][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.098108][ T4212] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 673.120172][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.140276][ T4212] usb 4-1: config 0 descriptor?? [ 673.269084][T10241] mkiss: ax0: crc mode is auto. [ 673.580471][ T4212] usbhid 4-1:0.0: can't add hid device: -71 [ 673.586904][ T4212] usbhid: probe of 4-1:0.0 failed with error -71 [ 673.598675][ T4212] usb 4-1: USB disconnect, device number 12 [ 674.459317][ T9050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 674.498545][T10254] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 674.827282][T10272] netlink: 'syz.1.1741': attribute type 4 has an invalid length. [ 674.839134][T10272] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1741'. [ 674.869570][T10272] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 674.950190][T10274] delete_channel: no stack [ 679.771154][T10341] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 679.779654][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 679.797118][T10341] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 680.971998][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 684.217226][ T9936] udevd[9936]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 684.343169][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.354041][ T4212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.560425][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 685.326630][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.608589][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.615153][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.669074][T10451] netlink: 'syz.1.1811': attribute type 2 has an invalid length. [ 686.194062][T10475] netlink: 'syz.1.1821': attribute type 16 has an invalid length. [ 687.073941][T10494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.270656][T10504] delete_channel: no stack [ 689.575060][T10545] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 689.599735][T10545] delete_channel: no stack [ 689.940142][ T4264] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 690.192008][ T4264] usb 5-1: Using ep0 maxpacket: 16 [ 690.474114][ T4264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.526279][ T4264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.678269][ T4264] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.700637][ T4264] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 690.710774][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.815075][ T4264] usb 5-1: config 0 descriptor?? [ 691.148030][T10577] sctp: [Deprecated]: syz.3.1859 (pid 10577) Use of int in maxseg socket option. [ 691.148030][T10577] Use struct sctp_assoc_value instead [ 691.314827][ T4264] uclogic 0003:5543:0064.0007: No inputs registered, leaving [ 691.327671][ T4264] uclogic 0003:5543:0064.0007: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.4-1/input0 [ 691.525223][ T1109] usb 5-1: USB disconnect, device number 11 [ 691.785858][T10597] delete_channel: no stack [ 692.496208][T10620] delete_channel: no stack [ 692.546211][T10627] delete_channel: no stack [ 692.989598][T10639] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1882'. [ 693.986677][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 694.998603][T10663] delete_channel: no stack [ 696.356606][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1901'. [ 697.578976][T10697] SET target dimension over the limit! [ 698.722482][T10717] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1913'. [ 700.670630][T10736] delete_channel: no stack [ 700.690813][T10742] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1922'. [ 700.810471][T10746] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 700.859590][T10746] delete_channel: no stack [ 701.009092][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1929'. [ 701.333666][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 701.565117][T10768] delete_channel: no stack [ 703.532096][ T9050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.543250][ T4212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.659487][T10785] delete_channel: no stack [ 704.402151][ T1347] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 704.787938][T10814] delete_channel: no stack [ 704.842550][ T1347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.870265][ T1347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.932974][ T1347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.971931][ T1347] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 705.012271][ T1347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.049579][ T1347] usb 5-1: config 0 descriptor?? [ 706.538505][T10824] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1956'. [ 707.145707][ T1347] kye 0003:0458:4018.0008: unbalanced collection at end of report description [ 707.308161][ T1347] kye 0003:0458:4018.0008: parse failed [ 707.321896][ T1347] kye: probe of 0003:0458:4018.0008 failed with error -22 [ 707.509935][ T1347] usb 5-1: USB disconnect, device number 12 [ 708.497465][T10841] sp0: Synchronizing with TNC [ 709.488688][T10869] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1970'. [ 709.918621][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 709.938210][T10879] netlink: 'syz.3.1975': attribute type 2 has an invalid length. [ 710.064717][T10885] capability: warning: `syz.3.1979' uses 32-bit capabilities (legacy support in use) [ 710.197504][T10889] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 710.813908][T10910] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1986'. [ 711.778685][T10921] delete_channel: no stack [ 712.927183][T10938] delete_channel: no stack [ 713.167689][T10946] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1999'. [ 713.808526][ T4212] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 713.819494][ T6108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.092310][T10954] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2005'. [ 714.838243][ T4212] usb 2-1: Using ep0 maxpacket: 32 [ 715.092121][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.117017][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.148197][ T4212] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 716.026039][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.051325][ T4212] usb 2-1: config 0 descriptor?? [ 716.242162][ T4212] usb 2-1: can't set config #0, error -71 [ 716.262133][ T4212] usb 2-1: USB disconnect, device number 17 [ 716.427334][ T4264] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 716.752032][ T4264] usb 5-1: Using ep0 maxpacket: 16 [ 716.872753][ T4264] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.088351][ T4264] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.112011][ T4264] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 717.131342][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.169821][ T4264] usb 5-1: config 0 descriptor?? [ 717.702848][ T4264] corsair 0003:1B1C:1B34.0009: unknown main item tag 0x0 [ 717.726387][ T4264] corsair 0003:1B1C:1B34.0009: unknown main item tag 0x0 [ 717.732022][ T4212] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 717.734413][ T4264] corsair 0003:1B1C:1B34.0009: unknown main item tag 0x0 [ 717.774782][ T4264] corsair 0003:1B1C:1B34.0009: unknown main item tag 0x0 [ 717.783598][ T4264] corsair 0003:1B1C:1B34.0009: unknown main item tag 0x0 [ 717.793726][ T4264] corsair 0003:1B1C:1B34.0009: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.4-1/input0 [ 717.806474][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 718.412681][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.485193][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.695295][ T4212] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 718.899384][T11005] ptrace attach of ""[11006] was attempted by "./syz-executor exec"[11005] [ 718.997924][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.012907][ T6108] usb 5-1: USB disconnect, device number 13 [ 719.030408][ T4212] usb 4-1: config 0 descriptor?? [ 719.168414][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 720.130692][ T4212] hid-led 0003:1D34:000A.000A: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 720.147479][ T4212] hid-led 0003:1D34:000A.000A: Dream Cheeky Webmail Notifier initialized [ 720.159960][ T4212] usb 4-1: USB disconnect, device number 13 [ 720.485573][T11040] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2033'. [ 721.313239][T11044] delete_channel: no stack [ 721.563795][T10967] udevd[10967]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 721.950003][T11061] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 722.003992][T11066] delete_channel: no stack [ 722.740533][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.478956][T11089] delete_channel: no stack [ 723.529955][ T9050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.101196][T11106] tap0: tun_chr_ioctl cmd 1074025677 [ 724.117142][T11106] tap0: linktype set to 774 [ 726.062121][ T9050] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 726.373348][T11149] delete_channel: no stack [ 726.423090][ T9050] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 726.441930][ T9050] usb 2-1: config 0 has no interface number 0 [ 726.480345][ T9050] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 726.520728][ T9050] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 726.542025][T11154] delete_channel: no stack [ 726.632618][ T9050] usb 2-1: config 0 interface 255 has no altsetting 0 [ 726.639453][ T9050] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 726.669181][ T9050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.697811][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 726.713430][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 726.719165][ T9050] usb 2-1: config 0 descriptor?? [ 726.733831][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 726.747555][T11159] netlink: 'syz.2.2080': attribute type 1 has an invalid length. [ 726.757653][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 726.772875][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 726.782437][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 726.783138][ T9050] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 726.791948][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 726.817521][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 726.827164][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 726.938749][T11168] delete_channel: no stack [ 727.000383][ T9050] usb 2-1: USB disconnect, device number 18 [ 727.122838][T11176] delete_channel: no stack [ 727.230580][T11181] kvm [11180]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x0 [ 727.367647][T11186] delete_channel: no stack [ 728.572534][T11209] delete_channel: no stack [ 728.746977][T11221] delete_channel: no stack [ 728.924514][T11229] netlink: 'syz.2.2110': attribute type 12 has an invalid length. [ 728.956957][T11229] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2110'. [ 729.010617][T11233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2110'. [ 729.463930][T11244] delete_channel: no stack [ 729.611998][ T6108] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 729.677586][T11252] delete_channel: no stack [ 729.992452][ T6108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 730.032047][ T6108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.061930][ T6108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 730.115058][ T6108] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 730.139310][ T6108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.188593][ T6108] usb 2-1: config 0 descriptor?? [ 730.313065][T11259] netlink: 'syz.3.2122': attribute type 15 has an invalid length. [ 730.673866][ T6108] logitech 0003:046D:C50C.000B: unknown main item tag 0x0 [ 730.681061][ T6108] logitech 0003:046D:C50C.000B: unknown main item tag 0x0 [ 730.728419][ T6108] logitech 0003:046D:C50C.000B: hidraw0: USB HID vff.fe Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 730.890983][ T1347] usb 2-1: USB disconnect, device number 19 [ 732.261284][T11279] delete_channel: no stack [ 732.425550][T11291] device bridge0 entered promiscuous mode [ 732.455847][T11291] device macvlan2 entered promiscuous mode [ 732.493100][T11291] bridge0: port 6(macvlan2) entered blocking state [ 732.510134][T11291] bridge0: port 6(macvlan2) entered disabled state [ 732.532336][T11291] device bridge0 left promiscuous mode [ 733.691008][ T9050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 733.894395][T11324] delete_channel: no stack [ 735.761632][T11379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2160'. [ 736.160872][T11403] delete_channel: no stack [ 737.998715][T11448] netlink: 'syz.1.2181': attribute type 21 has an invalid length. [ 738.033464][T11447] delete_channel: no stack [ 740.312650][T11479] delete_channel: no stack [ 740.728834][T11498] netlink: 'syz.0.2199': attribute type 14 has an invalid length. [ 741.170598][T11519] tap0: tun_chr_ioctl cmd 2147767519 [ 741.602113][ T1347] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 741.926757][ T9050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.100934][ T1347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.220728][ T1347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.288423][ T1347] usb 4-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 742.318752][ T1347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.339951][ T1347] usb 4-1: config 0 descriptor?? [ 742.654553][ T26] audit: type=1326 audit(1738084551.829:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff2956da9 code=0x7ffc0000 [ 742.728699][ T26] audit: type=1326 audit(1738084551.829:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ff2956da9 code=0x7ffc0000 [ 742.825270][ T1347] wacom 0003:056A:032A.000C: unknown main item tag 0x4 [ 742.832226][ T26] audit: type=1326 audit(1738084551.849:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff2956da9 code=0x7ffc0000 [ 742.832271][ T26] audit: type=1326 audit(1738084551.879:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ff2956da9 code=0x7ffc0000 [ 742.832322][ T26] audit: type=1326 audit(1738084551.879:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff2956da9 code=0x7ffc0000 [ 742.971404][ T26] audit: type=1326 audit(1738084551.879:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff2956da9 code=0x7ffc0000 [ 743.014993][ T26] audit: type=1326 audit(1738084551.879:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f7ff2956da9 code=0x7ffc0000 [ 743.055275][ T1347] wacom 0003:056A:032A.000C: hidraw0: USB HID v0.00 Device [HID 056a:032a] on usb-dummy_hcd.3-1/input0 [ 743.131698][ T26] audit: type=1326 audit(1738084551.879:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff2956da9 code=0x7ffc0000 [ 743.202892][ T9050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.222092][ T26] audit: type=1326 audit(1738084551.879:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff2956da9 code=0x7ffc0000 [ 743.275247][ T1347] usb 4-1: USB disconnect, device number 14 [ 743.879037][T11616] device bridge_slave_0 left promiscuous mode [ 744.064649][T11616] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.119001][T11616] syz.3.2237 (11616) used greatest stack depth: 18808 bytes left [ 744.462006][T11636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.463244][T11636] bridge0: port 4(bond2) entered blocking state [ 744.475446][T11636] bridge0: port 4(bond2) entered disabled state [ 744.483666][T11636] device bond2 entered promiscuous mode [ 744.490292][T11636] bridge0: port 4(bond2) entered blocking state [ 744.496705][T11636] bridge0: port 4(bond2) entered forwarding state [ 745.224452][ T4385] bridge0: port 4(bond2) entered disabled state [ 745.464527][T11649] loop0: detected capacity change from 0 to 32768 [ 746.574486][T11649] JBD2: Ignoring recovery information on journal [ 746.776445][T11649] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 747.092357][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.098692][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.147651][ T26] audit: type=1800 audit(1738084556.319:140): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2251" name="file1" dev="loop0" ino=16946 res=0 errno=0 [ 747.310518][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 747.938613][T11720] net_ratelimit: 251 callbacks suppressed [ 747.938630][T11720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.993621][T11720] syz.0.2274 (11720) used greatest stack depth: 18360 bytes left [ 748.063385][T11722] delete_channel: no stack [ 748.365555][T11733] loop0: detected capacity change from 0 to 1024 [ 748.429322][T11733] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 748.449206][T11733] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 748.449750][T11735] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2281'. [ 748.458418][T11733] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 748.482067][ T9050] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 748.722083][ T9050] usb 4-1: Using ep0 maxpacket: 8 [ 748.790031][T11742] loop0: detected capacity change from 0 to 64 [ 748.847052][ T9050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 749.065533][ T9050] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 749.085268][ T9050] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.101968][ T9050] usb 4-1: Product: syz [ 749.108978][ T9050] usb 4-1: Manufacturer: syz [ 749.116002][T11748] delete_channel: no stack [ 749.122006][ T9050] usb 4-1: SerialNumber: syz [ 749.137710][ T9050] usb 4-1: config 0 descriptor?? [ 749.184485][ T9050] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 749.246225][T11752] loop0: detected capacity change from 0 to 128 [ 749.421668][ T9050] usb 4-1: USB disconnect, device number 15 [ 750.636478][T11778] delete_channel: no stack [ 750.693153][T11784] tipc: Started in network mode [ 750.712083][T11784] tipc: Node identity ac14140f, cluster identity 4711 [ 750.728769][T11784] tipc: New replicast peer: 255.255.255.255 [ 750.747080][T11784] tipc: Enabled bearer , priority 10 [ 750.936449][T11801] loop0: detected capacity change from 0 to 256 [ 751.055831][T11801] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 751.116032][T11801] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 751.136200][T11801] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 751.154706][T11801] UDF-fs: Scanning with blocksize 512 failed [ 751.174708][T11801] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 751.210635][T11801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.349697][T11818] delete_channel: no stack [ 751.401968][ T9050] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 751.753237][ T21] tipc: Node number set to 2886997007 [ 751.763116][ T9050] usb 2-1: unable to get BOS descriptor or descriptor too short [ 751.892038][ T9050] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 751.908373][ T9050] usb 2-1: can't read configurations, error -71 [ 751.915662][T11827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2318'. [ 751.929382][T11827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2318'. [ 752.150310][T11833] mkiss: ax0: crc mode is auto. [ 752.248046][T11838] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2330'. [ 753.006484][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.688829][T11873] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 754.565788][T11896] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2341'. [ 754.988633][T11898] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 755.036224][T11898] delete_channel: no stack [ 759.866610][T11960] delete_channel: no stack [ 760.204163][T11963] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2364'. [ 760.582479][T11972] input: syz0 as /devices/virtual/input/input9 [ 760.636370][T11980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2370'. [ 761.762916][T11994] delete_channel: no stack [ 761.798496][ T9050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.836860][T11996] delete_channel: no stack [ 762.312658][T12026] delete_channel: no stack [ 763.562112][ T9050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 764.273314][T12042] delete_channel: no stack [ 764.399049][T12046] syz.1.2394 uses obsolete (PF_INET,SOCK_PACKET) [ 767.299163][T12077] loop0: detected capacity change from 0 to 2048 [ 767.423797][T12077] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 767.855383][ T9050] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 767.930779][T12108] device bond0 entered promiscuous mode [ 767.941502][T12108] device bond_slave_0 entered promiscuous mode [ 767.954736][T12108] device bond_slave_1 entered promiscuous mode [ 768.111947][ T9050] usb 2-1: Using ep0 maxpacket: 8 [ 769.033647][T12126] netlink: 'syz.2.2422': attribute type 15 has an invalid length. [ 769.062070][ T9050] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 769.092026][ T9050] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 769.116211][ T9050] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 769.133723][ T9050] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.144145][ T9050] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.158442][ T9050] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 769.168529][ T9050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.287408][T12140] delete_channel: no stack [ 769.461884][ T4212] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 769.512132][ T9050] usb 2-1: GET_CAPABILITIES returned 0 [ 769.518196][ T9050] usbtmc 2-1:16.0: can't read capabilities [ 769.947077][ T4212] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.962383][ T4212] usb 4-1: config 0 interface 0 has no altsetting 0 [ 769.974776][ T4212] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 769.987370][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.384912][ T21] usb 2-1: USB disconnect, device number 22 [ 770.581534][ T4212] usb 4-1: config 0 descriptor?? [ 771.068848][ T4212] wacom 0003:056A:0003.000D: unknown main item tag 0x0 [ 771.092113][ T4212] wacom 0003:056A:0003.000D: unknown main item tag 0x0 [ 771.099039][ T4212] wacom 0003:056A:0003.000D: unknown main item tag 0x0 [ 771.971771][ T4212] wacom 0003:056A:0003.000D: unknown main item tag 0x0 [ 771.978865][ T4212] wacom 0003:056A:0003.000D: unknown main item tag 0x0 [ 771.985857][ T4212] wacom 0003:056A:0003.000D: unknown main item tag 0x0 [ 771.993027][ T4212] wacom 0003:056A:0003.000D: unknown main item tag 0x0 [ 772.002400][ T4212] wacom 0003:056A:0003.000D: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 772.027558][ T4212] wacom 0003:056A:0003.000D: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.3-1/input0 [ 772.055487][ T4212] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0003.000D/input/input10 [ 772.132966][T12177] delete_channel: no stack [ 772.172933][ T4264] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 772.328417][ T4212] usb 4-1: USB disconnect, device number 16 [ 772.440541][T12192] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2443'. [ 772.461984][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 772.582193][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 772.613401][ T4264] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 772.671147][ T4264] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 772.707162][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.768298][ T4264] usb 2-1: config 0 descriptor?? [ 772.961222][ T9050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 773.170638][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'. [ 773.434080][ T4264] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 773.441284][ T4264] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 773.468522][ T4264] kovaplus 0003:1E7D:2D50.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 773.506351][ T26] audit: type=1326 audit(1738084582.679:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12232 comm="syz.3.2464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1806fbda9 code=0x0 [ 773.746691][ T4264] kovaplus 0003:1E7D:2D50.000E: couldn't init struct kovaplus_device [ 773.755215][ T4264] kovaplus 0003:1E7D:2D50.000E: couldn't install mouse [ 773.770871][T12239] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2466'. [ 773.785665][ T4264] kovaplus: probe of 0003:1E7D:2D50.000E failed with error -71 [ 773.801112][ T4264] usb 2-1: USB disconnect, device number 23 [ 775.407630][T12272] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2478'. [ 775.427802][T12268] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2477'. [ 776.091866][ T4212] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 777.031975][ T4212] usb 2-1: Using ep0 maxpacket: 16 [ 777.152255][ T4212] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.172573][ T4212] usb 2-1: config 0 interface 0 has no altsetting 0 [ 777.179243][ T4212] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 777.225274][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.259853][ T4212] usb 2-1: config 0 descriptor?? [ 777.435434][T12310] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2491'. [ 777.728245][T12323] netlink: 'syz.3.2496': attribute type 1 has an invalid length. [ 777.754510][ T4212] apple 0003:05AC:0247.000F: unexpected long global item [ 777.766513][ T4212] apple 0003:05AC:0247.000F: parse failed [ 777.792668][ T4212] apple: probe of 0003:05AC:0247.000F failed with error -22 [ 777.968319][ T4212] usb 2-1: USB disconnect, device number 24 [ 778.927250][T12346] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2504'. [ 779.048056][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2506'. [ 779.577125][T12371] kvm [12370]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000049 [ 779.598830][T12376] Illegal XDP return value 4294966772, expect packet loss! [ 779.790192][T12382] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2519'. [ 780.571335][T12393] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2522'. [ 780.908648][T12402] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2528'. [ 781.114308][T12407] loop0: detected capacity change from 0 to 4096 [ 781.197626][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 781.242913][ T4286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 781.832229][T12417] device syzkaller1 entered promiscuous mode [ 781.896040][T12407] NILFS (loop0): invalid segment: Checksum error in segment payload [ 781.961875][T12407] NILFS (loop0): trying rollback from an earlier position [ 782.051669][T12407] NILFS (loop0): recovery complete [ 782.111375][T12424] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 782.175813][ C0] ------------[ cut here ]------------ [ 782.181318][ C0] WARNING: CPU: 0 PID: 12404 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 782.191032][ C0] Modules linked in: [ 782.194999][ C0] CPU: 0 PID: 12404 Comm: syz.0.2527 Not tainted 5.15.177-syzkaller #0 [ 782.203321][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 782.213447][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 782.219639][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 782.239498][ C0] RSP: 0000:ffffc90000007690 EFLAGS: 00010246 [ 782.245649][ C0] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff888021b1d940 [ 782.253711][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 782.261720][ C0] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: ffffed1004363b29 [ 782.269790][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000dfffff8 [ 782.277831][ C0] R13: 0000000000000000 R14: 000000000dfffff8 R15: ffffc90000007708 [ 782.285905][ C0] FS: 0000555586556500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 782.294910][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.301541][ C0] CR2: 000000110c230000 CR3: 0000000059e72000 CR4: 00000000003506f0 [ 782.309623][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 782.317656][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 782.325708][ C0] Call Trace: [ 782.329012][ C0] [ 782.331918][ C0] ? __warn+0x15b/0x300 [ 782.336168][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 782.341911][ C0] ? report_bug+0x1b7/0x2e0 [ 782.346523][ C0] ? handle_bug+0x3d/0x70 [ 782.350964][ C0] ? exc_invalid_op+0x16/0x40 [ 782.355731][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 782.360878][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 782.366468][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 782.372079][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 782.377666][ C0] bpf_probe_read_compat+0xe4/0x180 [ 782.383050][ C0] ? bpf_trace_run4+0x1ea/0x390 [ 782.388024][ C0] ? bpf_trace_run3+0x380/0x380 [ 782.392972][ C0] ? __bpf_trace_mm_page_alloc+0xba/0xe0 [ 782.398700][ C0] ? __alloc_pages+0x6e0/0x700 [ 782.403630][ C0] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 782.408972][ C0] ? alloc_pages+0x458/0x570 [ 782.413706][ C0] ? skb_page_frag_refill+0x220/0x4b0 [ 782.419170][ C0] ? try_fill_recv+0x49d/0x17d0 [ 782.424176][ C0] ? free_old_xmit_skbs+0x24e/0x2c0 [ 782.429414][ C0] ? virtnet_poll+0x83a/0x1260 [ 782.434298][ C0] ? refill_work+0x220/0x220 [ 782.438941][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 782.445065][ C0] ? __napi_poll+0xc7/0x440 [ 782.449627][ C0] ? net_rx_action+0x617/0xda0 [ 782.454507][ C0] ? net_tx_action+0x8e0/0x8e0 [ 782.459311][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 782.465433][ C0] ? handle_softirqs+0x3a7/0x930 [ 782.470491][ C0] ? __irq_exit_rcu+0x157/0x240 [ 782.475435][ C0] ? do_softirq+0x240/0x240 [ 782.479965][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 782.485337][ C0] ? __irq_exit_rcu+0x157/0x240 [ 782.490223][ C0] ? irq_exit_rcu+0x20/0x20 [ 782.494837][ C0] ? irq_exit_rcu+0x5/0x20 [ 782.499289][ C0] ? common_interrupt+0xb3/0xd0 [ 782.504251][ C0] [ 782.507218][ C0] [ 782.510173][ C0] ? asm_common_interrupt+0x22/0x40 [ 782.515480][ C0] ? next_uptodate_page+0x4ca/0x900 [ 782.520791][ C0] ? next_uptodate_page+0x4d9/0x900 [ 782.526116][ C0] ? next_uptodate_page+0x4d9/0x900 [ 782.531464][ C0] ? filemap_map_pages+0xfa1/0x15c0 [ 782.536782][ C0] ? filemap_read_page+0x4b0/0x4b0 [ 782.541973][ C0] ? pte_alloc_one+0x2d4/0x360 [ 782.546867][ C0] ? mark_lock+0x98/0x340 [ 782.551232][ C0] ? handle_mm_fault+0x341b/0x5960 [ 782.556500][ C0] ? numa_migrate_prep+0x1a0/0x1a0 [ 782.561742][ C0] ? vmacache_find+0x4f9/0x590 [ 782.566569][ C0] ? vmacache_update+0x9f/0xf0 [ 782.571364][ C0] ? exc_page_fault+0x271/0x700 [ 782.576285][ C0] ? asm_exc_page_fault+0x22/0x30 [ 782.581420][ C0] ? trace_user_exit+0x7/0x1b0 [ 782.586235][ C0] ? perf_trace_context_tracking_user+0x5d/0x3d0 [ 782.592660][ C0] [ 782.595707][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 782.602990][ C0] CPU: 0 PID: 12404 Comm: syz.0.2527 Not tainted 5.15.177-syzkaller #0 [ 782.611265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 782.621329][ C0] Call Trace: [ 782.624612][ C0] [ 782.627447][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 782.632155][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 782.637785][ C0] ? panic+0x860/0x860 [ 782.641855][ C0] ? copy_from_user_nofault+0x60/0x1c0 [ 782.647312][ C0] ? copy_from_user_nofault+0x60/0x1c0 [ 782.652773][ C0] panic+0x318/0x860 [ 782.656700][ C0] ? __warn+0x16a/0x300 [ 782.660870][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 782.666079][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 782.671623][ C0] __warn+0x2b2/0x300 [ 782.675603][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 782.681146][ C0] report_bug+0x1b7/0x2e0 [ 782.685475][ C0] handle_bug+0x3d/0x70 [ 782.689631][ C0] exc_invalid_op+0x16/0x40 [ 782.694128][ C0] asm_exc_invalid_op+0x16/0x20 [ 782.698999][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 782.705179][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 782.724803][ C0] RSP: 0000:ffffc90000007690 EFLAGS: 00010246 [ 782.730872][ C0] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff888021b1d940 [ 782.738840][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 782.746804][ C0] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: ffffed1004363b29 [ 782.754786][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000dfffff8 [ 782.762870][ C0] R13: 0000000000000000 R14: 000000000dfffff8 R15: ffffc90000007708 [ 782.771001][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 782.776501][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 782.782092][ C0] bpf_probe_read_compat+0xe4/0x180 [ 782.787373][ C0] ? bpf_trace_run4+0x1ea/0x390 [ 782.792261][ C0] ? bpf_trace_run3+0x380/0x380 [ 782.797121][ C0] ? __bpf_trace_mm_page_alloc+0xba/0xe0 [ 782.802765][ C0] ? __alloc_pages+0x6e0/0x700 [ 782.807561][ C0] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 782.812869][ C0] ? alloc_pages+0x458/0x570 [ 782.817461][ C0] ? skb_page_frag_refill+0x220/0x4b0 [ 782.822839][ C0] ? try_fill_recv+0x49d/0x17d0 [ 782.827689][ C0] ? free_old_xmit_skbs+0x24e/0x2c0 [ 782.832914][ C0] ? virtnet_poll+0x83a/0x1260 [ 782.837684][ C0] ? refill_work+0x220/0x220 [ 782.842283][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 782.848311][ C0] ? __napi_poll+0xc7/0x440 [ 782.852855][ C0] ? net_rx_action+0x617/0xda0 [ 782.857657][ C0] ? net_tx_action+0x8e0/0x8e0 [ 782.862475][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 782.868522][ C0] ? handle_softirqs+0x3a7/0x930 [ 782.873519][ C0] ? __irq_exit_rcu+0x157/0x240 [ 782.878424][ C0] ? do_softirq+0x240/0x240 [ 782.882963][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 782.888183][ C0] ? __irq_exit_rcu+0x157/0x240 [ 782.893041][ C0] ? irq_exit_rcu+0x20/0x20 [ 782.897560][ C0] ? irq_exit_rcu+0x5/0x20 [ 782.901978][ C0] ? common_interrupt+0xb3/0xd0 [ 782.906845][ C0] [ 782.909775][ C0] [ 782.912712][ C0] ? asm_common_interrupt+0x22/0x40 [ 782.917926][ C0] ? next_uptodate_page+0x4ca/0x900 [ 782.923129][ C0] ? next_uptodate_page+0x4d9/0x900 [ 782.928351][ C0] ? next_uptodate_page+0x4d9/0x900 [ 782.933584][ C0] ? filemap_map_pages+0xfa1/0x15c0 [ 782.938806][ C0] ? filemap_read_page+0x4b0/0x4b0 [ 782.943925][ C0] ? pte_alloc_one+0x2d4/0x360 [ 782.948698][ C0] ? mark_lock+0x98/0x340 [ 782.953037][ C0] ? handle_mm_fault+0x341b/0x5960 [ 782.958174][ C0] ? numa_migrate_prep+0x1a0/0x1a0 [ 782.963307][ C0] ? vmacache_find+0x4f9/0x590 [ 782.968067][ C0] ? vmacache_update+0x9f/0xf0 [ 782.972835][ C0] ? exc_page_fault+0x271/0x700 [ 782.977783][ C0] ? asm_exc_page_fault+0x22/0x30 [ 782.982813][ C0] ? trace_user_exit+0x7/0x1b0 [ 782.987578][ C0] ? perf_trace_context_tracking_user+0x5d/0x3d0 [ 782.993917][ C0] [ 782.997223][ C0] Kernel Offset: disabled [ 783.001554][ C0] Rebooting in 86400 seconds..