last executing test programs: 9.275086709s ago: executing program 3 (id=345): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000300080005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x2, &(0x7f00000007c0)=@raw=[@generic={0x87, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.629776835s ago: executing program 1 (id=347): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfec8) r3 = memfd_create(0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001400)) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001440)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, 0x0) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0xcb, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000012c0)={0x1, &(0x7f0000001300)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8.476146161s ago: executing program 3 (id=348): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x5543, 0x64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x63, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0xa1c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1, 0x2}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xe, 0x6, 0x7f, 0xff, 0xa}, 0x11, &(0x7f0000000080)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x10000, 0xf00, 0x7}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='27', 0x2) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000700)=0xd) 6.079134107s ago: executing program 4 (id=353): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, 0x0) 5.983851206s ago: executing program 4 (id=355): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = add_key$user(&(0x7f0000000600), 0x0, &(0x7f0000000640), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000006c0)={0x0, r1}, 0x0, 0x0, 0x0) 5.913263494s ago: executing program 4 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) syz_open_dev$usbmon(0x0, 0x6e2, 0x20480) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) syz_open_dev$loop(0x0, 0x4, 0x101c40) setitimer(0x2, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) 5.140382083s ago: executing program 1 (id=359): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000200)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000240)='tunl0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000280)='}\x00') 5.051272582s ago: executing program 3 (id=360): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000440)={0x84, @multicast2, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10005, 0x204e}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000000480)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) 5.000040607s ago: executing program 1 (id=361): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[0x0]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}]) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0xc000, &(0x7f0000000e00)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf727e1e38533740c5b1da10b83273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce837a5f88eb1f09a8a7f55959926a7fd5ac27fd519b5c217ed420e41ddcfd9072f503656169e720fdc2da8c998a870683232e5263a0", @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x1, 0x63a, &(0x7f0000005880)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.999550018s ago: executing program 0 (id=362): io_setup(0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000640)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xe, 0x0, &(0x7f00000007c0)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.998975598s ago: executing program 4 (id=363): r0 = epoll_create(0x3) openat(0xffffffffffffffff, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) pread64(r0, 0x0, 0x0, 0x8001) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 4.924279565s ago: executing program 2 (id=364): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b00)={0x20000014}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000b40)) 3.966675573s ago: executing program 0 (id=365): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000009c0)={0x980000, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0}) 3.911209389s ago: executing program 3 (id=366): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.911010869s ago: executing program 0 (id=367): write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) syz_clone3(&(0x7f0000000a00)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) 3.822563738s ago: executing program 1 (id=368): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x400005, 0x0, 0xa, "ff00050000000000000000e100e300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000080)="d5", 0xfffffedf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x1, 0x9, 0x5, 0x1, 0x32, 'fG\x00', 0x7f, 0x2}) 3.775431623s ago: executing program 2 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.758703915s ago: executing program 4 (id=370): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x5543, 0x64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x63, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0xa1c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1, 0x2}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xe, 0x6, 0x7f, 0xff, 0xa}, 0x11, &(0x7f0000000080)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x10000, 0xf00, 0x7}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='27', 0x2) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000700)=0xd) 3.600071381s ago: executing program 3 (id=371): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfec8) r3 = memfd_create(0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001400)) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001440)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, 0x0) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0xcb, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000012c0)={0x1, &(0x7f0000001300)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.501098961s ago: executing program 2 (id=372): unshare(0x22020400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004801) 2.789142424s ago: executing program 0 (id=373): sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x448c0}, 0x40040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 2.687799035s ago: executing program 2 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) syz_open_dev$usbmon(0x0, 0x6e2, 0x20480) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) syz_open_dev$loop(0x0, 0x4, 0x101c40) setitimer(0x2, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) 2.554402288s ago: executing program 1 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = msgget$private(0x0, 0x1c0) msgctl$IPC_RMID(r4, 0x0) 2.125285922s ago: executing program 0 (id=376): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x6000004, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000800000003"], 0xff04) 1.669529939s ago: executing program 2 (id=377): r0 = syz_open_dev$evdev(&(0x7f0000005b00), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 272.528112ms ago: executing program 1 (id=378): r0 = fsopen(&(0x7f00000004c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0xc9) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000006ec0)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) getdents64(r2, &(0x7f0000001500)=""/4103, 0x1007) 191.91943ms ago: executing program 3 (id=379): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[0x0]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}]) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0xc000, &(0x7f0000000e00)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf727e1e38533740c5b1da10b83273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce837a5f88eb1f09a8a7f55959926a7fd5ac27fd519b5c217ed420e41ddcfd9072f503656169e720fdc2da8c998a870683232e5263a0", @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x1, 0x63a, &(0x7f0000005880)="$eJzs3V1v29Ydx/EfZVlWPCAYtqEIgjycJivgYJkiyY0DIQM2jqJkdpIokPRmAwOKrLGLIHK6JRmw+KbwzR6A7g3srje72IsYsN3uXexyQLHdDdiNBpKin/ToRLbb5vsxYh6Rf/L8D+nwgJJ4KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMupl8sVSy2vs7FpxnPqgd+esDzd2qLupIU7U+uVrPifikVdSWdd+c7h4nfiX7d0LX11TcV4UtTeN9755sNv53PZ+hMSeh067QZfvNp7+qjX234+50S+BJSbIajpdrzQ99p20zVe6Jva2lr53nojNA2voHArjNy2cQI3F/mBWXHumEqttmrc0pa/0WnW7ZabzXzw/Wq5vGY+WBoc/nsflEJn3Wu1vE4ziYkXxzEPzGc/T0Ncu23MzpPe9uq0JOOgyixB1WlB1XK1WqlUq5W1+7X7D8rl/NCM8gkaipj7Hy2+YuZ38gbeUC7u//9pSS0V1dGGNmVG/jiqK5Cv9pjlA1n//949d2K9R/v/rJe/crj4qpL+/0b66sa4/n9MLkYmWWHUEmvM/Nf7eaFX2tNTPVJPPW3r+Xy2e3N+GZ7tT1PKS55C+fLUlq2mXJnBHKOa1rSmsj7UuhoKZdSQp5ZchdpSqEiu2skxCeTKViRfgYxW5OiOjCqqqaZVGbkqaUu+NtRRU3XZ+m+/39/Rk2S/r07IUVlQZZag6oSgcf3/Lz5N/07p/9922flrlhjgwvUH1/+ndPNssgEAAAAAAGfBSt59t5LP7q9L6qvhtdzyRacFAAAAAADmKPnk/1o8WYxL12WNuf7vn39uAAAAAABgPqzkHjtL0nLypX7r8E6oWb4EsHAOKQIAAAAAgDeUfP5/oyD1k7HXbso61fU/AAAAAAD4Cvj9kTH289kYu/3sY/2cpLC7ZP3130sKFq397uZ3rV07XmLvJjF/H/4GQNS4al0eDNSbTAqSkleOe826ngYNBsG00oF9pS92po31bwUnEigsZG9fTEtgLT94pc/0bhrz7qDex3s5JUvSWpYbXsstOX7rYUW2fTkXuZvRr589+Y0UHLRz50lvu/TRJ73HSS778az93TiPT4+lk5uWy0sN9sX1kS2+pEZW5R867WUrqbectX9B9m7uaEWztf+3upXG3FpOp8t72RFI2l+M218pJYfssPXJ6BDWYRaVky0fdSDGZFFMsridxtxeuZ1OsvwGWXxvQaqWho9BcDSL6tEspu8L6z9D+2JKFvG+WI2z+Fu8oTFZrJ4ui6EjAgAXZeewF0oGMR8eY/9kv/s6Z7npvfuPjtfy8k/99IbDBSk/+GxiYi1FxWf0lTSmoOTEmr864oxeHvQrRY05o5ffoHeL6/rL4TOQBmkPZfG/fr//sJLU+8cTvern8Qqfj6g37SrCVnUh3oX3Xu7+MhkAP/bx9sfbz6rV1bXy++Xy/aoWk2YMJvQ9AIARpj9jZ2qE9f7BVfXjf72Xlo71eN86+EpBSR/pE/X0WHezRwjcHL3V5SNfQ7g7fNUax16STsZWdHfsVZ2VvF+QxP5sq/DDNCj5vahsleM99eF2V8/2IAAAcM5u1QaFMf3wLP3/3ey6e+XqyOvu4335yScEj4utnO+OAADgLeIGX1jL0e+sIPC6H1ZqtYodrbsm8J2fmMCrN13jdSI3cNbtTtM13cCPfMdvmW6gJa/uhibc6Hb9IDINPzBdP/Q2TcNruWbw6PfQbdudyHPCbsu1Q9c4fieyncjUvdAx3Y0ft7xw3Q2SlcOu63gNz7Ejz++Y0N8IHLdkTOi6RwK9utuJvIYXFzumG3htO9gyP/VbG23X1N3QCbxu5KcbzOryOg0/aCebLal/6gcdAgDwdfTi1d7TR73e9vMJhX1NjxkUCqM2eNFtBAAAx9FLAwAAAAAAAAAAAAAAAAAAAADw5TfL/X+nKiyOullQOpjzq8szbcfSvBM7TSH3+qv/Y0LMpYM52e4/GrN/AS1VWsjPf8uXpNlvG51D4Qc76R4dGxMvHLlo6eBY5Of/3yEuPPvzmEX9fr8/efWl4/uwMKmBxwt5Sc8Lb3AILuZ8BOD8/D8AAP//qWlEKA==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 191.546411ms ago: executing program 2 (id=380): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000000a80)={"e35b50e9ff52c23c51af0eefd23f2f5a", r4, 0x0, {0x6, 0xedf}, {0x4, 0xe}, 0x9, [0x0, 0x7f, 0x0, 0x8000, 0x280000000, 0x9, 0xd3, 0x2, 0x9, 0x2, 0x3, 0xf680, 0x3, 0x7fff, 0x10000, 0x3b1]}) write(r3, &(0x7f0000000600)='loo', 0x3) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 46.225855ms ago: executing program 4 (id=381): r0 = epoll_create(0x3) openat(0xffffffffffffffff, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) pread64(r0, 0x0, 0x0, 0x8001) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 0s ago: executing program 0 (id=382): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000640)="04", 0x1}], 0x1, &(0x7f0000000680)=[@init={0x18, 0x84, 0x0, {0xa051, 0xe, 0x1, 0xffff}}], 0x18}], 0x1, 0x4000004) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7ff, 0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, 0x0, 0x0) kernel console output (not intermixed with test programs): dv0: Adding interface: batadv_slave_1 [ 68.751388][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.777639][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.797146][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.804925][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.813396][ T4286] device bridge_slave_1 entered promiscuous mode [ 68.840733][ T4284] team0: Port device team_slave_0 added [ 68.863538][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.888539][ T4284] team0: Port device team_slave_1 added [ 68.922012][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.936893][ T4276] device hsr_slave_0 entered promiscuous mode [ 68.949104][ T4276] device hsr_slave_1 entered promiscuous mode [ 68.966171][ T4279] device hsr_slave_0 entered promiscuous mode [ 68.973180][ T4279] device hsr_slave_1 entered promiscuous mode [ 68.980646][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.989207][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 68.996059][ T4279] Cannot create hsr debugfs directory [ 69.046465][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.053673][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.079962][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 69.086226][ T4292] Bluetooth: hci4: command 0x0409 tx timeout [ 69.092643][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 69.098966][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 69.106297][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.143314][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.158270][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.184604][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.205598][ T4286] team0: Port device team_slave_0 added [ 69.224551][ T4286] team0: Port device team_slave_1 added [ 69.357005][ T4284] device hsr_slave_0 entered promiscuous mode [ 69.364880][ T4284] device hsr_slave_1 entered promiscuous mode [ 69.371505][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.381225][ T4284] Cannot create hsr debugfs directory [ 69.387174][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.394997][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.421210][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.471084][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.478059][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.504419][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.515868][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 69.593005][ T4281] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.685366][ T4286] device hsr_slave_0 entered promiscuous mode [ 69.693752][ T4286] device hsr_slave_1 entered promiscuous mode [ 69.706567][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.714804][ T4286] Cannot create hsr debugfs directory [ 69.805246][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.812776][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.826722][ T4275] device bridge_slave_0 entered promiscuous mode [ 69.860089][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.867213][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.885054][ T4275] device bridge_slave_1 entered promiscuous mode [ 69.909683][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.932534][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.947329][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.969806][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.981541][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.009736][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.086907][ T4275] team0: Port device team_slave_0 added [ 70.094656][ T4275] team0: Port device team_slave_1 added [ 70.155076][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.167440][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.201445][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.235147][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.248761][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.276570][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.289334][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.317565][ T3936] infiniband rxe0: set active [ 70.332290][ T155] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.363785][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.396688][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.409422][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.435228][ T4275] device hsr_slave_0 entered promiscuous mode [ 70.442462][ T4275] device hsr_slave_1 entered promiscuous mode [ 70.449213][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.456756][ T4275] Cannot create hsr debugfs directory [ 70.497613][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.556916][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.576351][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.585286][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.600859][ T4284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.633327][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.644090][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.653866][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.661159][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.672647][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.681640][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.690225][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.697285][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.704911][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.717709][ T4284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.740228][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.757006][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.766028][ T4284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.778084][ T4284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.804975][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.814440][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.858878][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.904358][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.917360][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.926913][ T4286] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.941415][ T4286] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.961842][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.976700][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.993586][ T4286] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.003864][ T4286] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.020080][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.027248][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.036127][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.046904][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.068389][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 71.107543][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.128876][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.139234][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.149014][ T4292] Bluetooth: hci4: command 0x041b tx timeout [ 71.155044][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 71.161378][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 71.167397][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 71.191714][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.221450][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.232048][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.239372][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.259448][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.268999][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.280114][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.289121][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.296561][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.304373][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.313413][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.322589][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.329725][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.337464][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.346101][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.364032][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.372520][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.382974][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.393297][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.404033][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.429003][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.447319][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.460369][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.470320][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.483842][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.490985][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.500603][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.510208][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.519470][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.529039][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.537640][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.546374][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.581296][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.590839][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.602660][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.609763][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.618026][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.627765][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.636346][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.653632][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.668964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.676851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.685523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.694905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.703924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.713705][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.720842][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.731219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.739615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.747748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.757275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.765770][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.772913][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.786257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.796870][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.822215][ T4286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.833150][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.853104][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.875577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.897191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.914621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.924489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.936755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.946600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.963186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.975707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.990195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.999716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.007911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.015481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.023321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.032222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.041174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.049094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.056628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.095356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.128594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.144417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.164851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.193298][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.209198][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.234754][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.244809][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.260828][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.275773][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.321282][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.331633][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.359447][ T4276] device veth0_vlan entered promiscuous mode [ 72.383920][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.397587][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.407230][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.421570][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.436296][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.448903][ T4276] device veth1_vlan entered promiscuous mode [ 72.489534][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.542871][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.555078][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.564378][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.573129][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.581092][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.589447][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.597921][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.606827][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.613931][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.633908][ T4276] device veth0_macvtap entered promiscuous mode [ 72.664828][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.676392][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.685431][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.695891][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.705081][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.714970][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.722124][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.732053][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.741535][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.763090][ T4276] device veth1_macvtap entered promiscuous mode [ 72.789885][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.797986][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.806227][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.816196][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.829240][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.842823][ T4279] device veth0_vlan entered promiscuous mode [ 72.857774][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.866526][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.876964][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.885467][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.906995][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.918278][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.945217][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.973635][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.984004][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.993990][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.003535][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.013028][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.022102][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.031032][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.040073][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.052833][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.062964][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.077224][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.087435][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.096998][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.106560][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.115223][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.123629][ T4279] device veth1_vlan entered promiscuous mode [ 73.133718][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.144051][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.151837][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 73.170726][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.191353][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.228733][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 73.228750][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 73.234782][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 73.240887][ T4293] Bluetooth: hci4: command 0x040f tx timeout [ 73.244249][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.301944][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.319448][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.340373][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.349392][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.384987][ T4279] device veth0_macvtap entered promiscuous mode [ 73.430850][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.449358][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.458014][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.472889][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.481892][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.492769][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.502760][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.515991][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.532594][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.544119][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.557916][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.569202][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.590564][ T4279] device veth1_macvtap entered promiscuous mode [ 73.599840][ T4286] device veth0_vlan entered promiscuous mode [ 73.620129][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.642597][ T4286] device veth1_vlan entered promiscuous mode [ 73.677030][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.695320][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.707555][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.732368][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.746365][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.765226][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.775435][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.784176][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.796615][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.805568][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.814351][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.823818][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.866971][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.885631][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.895221][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.904016][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.926456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.935575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.977549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.987040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.002219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.011160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.029972][ T4286] device veth0_macvtap entered promiscuous mode [ 74.046136][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.061160][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.080421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.091638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.107921][ T4284] device veth0_vlan entered promiscuous mode [ 74.122694][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.128915][ T4284] device veth1_vlan entered promiscuous mode [ 74.142459][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.152031][ T4286] device veth1_macvtap entered promiscuous mode [ 74.162862][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.171682][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.180633][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.189862][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.197746][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.209833][ T4275] device veth0_vlan entered promiscuous mode [ 74.238667][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.246520][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.258598][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.266731][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.276265][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.292983][ T4275] device veth1_vlan entered promiscuous mode [ 74.319839][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.327924][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.337572][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.367177][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.379626][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.387845][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.397974][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.408435][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.420976][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.433006][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.456396][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.480133][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.500289][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.509840][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.524758][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.537327][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.555124][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.567183][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.583107][ T4275] device veth0_macvtap entered promiscuous mode [ 74.600191][ T4284] device veth0_macvtap entered promiscuous mode [ 74.607563][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.622912][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.633879][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.645024][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.656283][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.683832][ T4275] device veth1_macvtap entered promiscuous mode [ 74.692580][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.704952][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.712929][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.722307][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.731183][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.747147][ T4286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.756818][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.759385][ T4286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.765221][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.781835][ T4404] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.784772][ T4286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.799162][ T4286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.811366][ T4284] device veth1_macvtap entered promiscuous mode [ 74.823443][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.832954][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.867319][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.884694][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.896304][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.907002][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.917652][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.928794][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.940992][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.950066][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.963050][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.974066][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.984542][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.995568][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.004933][ T4404] usb 1-1: Using ep0 maxpacket: 16 [ 75.007972][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.021838][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.022251][ T4404] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.036188][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.059296][ T4404] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.060692][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.076043][ T4404] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.080501][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.100589][ T4404] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.107229][ T4404] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 75.110832][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.118078][ T4404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.126655][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.144785][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.146969][ T4404] usb 1-1: config 0 descriptor?? [ 75.162589][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.174585][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.186433][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.211037][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.228976][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 75.235910][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.246651][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.256496][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.274561][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.278847][ T4415] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 75.286960][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.308315][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 75.312957][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.323235][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 75.323264][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 75.323317][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 75.347193][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.356244][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.365223][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.377060][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.387884][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.405161][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.415965][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.426410][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.437599][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.447704][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.458704][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.471479][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.501603][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.522997][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.542589][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.553711][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.564124][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.575881][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.585389][ T4404] usbhid 1-1:0.0: can't add hid device: -71 [ 75.597398][ T4404] usbhid: probe of 1-1:0.0 failed with error -71 [ 75.616666][ T4404] usb 1-1: USB disconnect, device number 2 [ 75.649306][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.664891][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.710285][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.779098][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.807880][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.824108][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.834575][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.836139][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.842784][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.862987][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.871724][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.885371][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.921647][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.935913][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.955816][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.962976][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.968589][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.986927][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.064885][ T4424] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.101546][ T4424] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.165331][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.425909][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 77.138386][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.295595][ T4454] block device autoloading is deprecated and will be removed. [ 77.368293][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 77.376124][ T26] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 77.387210][ T4459] loop1: detected capacity change from 0 to 1024 [ 77.404805][ T26] usb 5-1: config 0 has no interface number 0 [ 77.418358][ T26] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 77.448241][ T26] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 77.475277][ T4454] md: pers->run() failed ... [ 77.479050][ T26] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.531673][ T26] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 77.566634][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.590501][ T26] usb 5-1: Product: syz [ 77.604188][ T26] usb 5-1: Manufacturer: syz [ 77.618052][ T26] usb 5-1: SerialNumber: syz [ 77.653630][ T26] usb 5-1: config 0 descriptor?? [ 77.695071][ T26] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input6 [ 77.885818][ T4370] usb 5-1: USB disconnect, device number 2 [ 78.008443][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.185840][ T4466] loop0: detected capacity change from 0 to 32768 [ 78.198295][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 78.216322][ T14] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.227864][ T4466] ======================================================= [ 78.227864][ T4466] WARNING: The mand mount option has been deprecated and [ 78.227864][ T4466] and is ignored by this kernel. Remove the mand [ 78.227864][ T4466] option from the mount to silence this warning. [ 78.227864][ T4466] ======================================================= [ 78.272123][ T14] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.284825][ T14] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.290148][ T4470] loop3: detected capacity change from 0 to 32768 [ 78.298935][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.325658][ T14] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 78.366138][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.375783][ T4466] JBD2: Ignoring recovery information on journal [ 78.419899][ T4470] XFS (loop3): Mounting V5 Filesystem [ 78.442021][ T14] usb 2-1: config 0 descriptor?? [ 78.545142][ T4466] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 78.558695][ T4470] XFS (loop3): Ending clean mount [ 78.608113][ T4470] XFS (loop3): Quotacheck needed: Please wait. [ 78.677315][ T4470] XFS (loop3): Quotacheck: Done. [ 78.688316][ T27] audit: type=1800 audit(1792940323.040:2): pid=4466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 78.844885][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 78.856061][ T4275] XFS (loop3): Unmounting Filesystem [ 78.906785][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 78.917263][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 78.944419][ T14] usb 2-1: USB disconnect, device number 2 [ 79.143424][ T4500] device gretap0 entered promiscuous mode [ 79.155900][ T4500] device vlan2 entered promiscuous mode [ 79.431286][ T4498] loop4: detected capacity change from 0 to 32768 [ 79.469848][ T4498] XFS: noattr2 mount option is deprecated. [ 79.476622][ T4498] XFS: noattr2 mount option is deprecated. [ 79.594817][ T4498] XFS (loop4): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 81.132875][ T4534] Illegal XDP return value 5 on prog (id 4) dev syz_tun, expect packet loss! [ 81.736685][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 81.756093][ T4264] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.770054][ T4538] syz.0.42: attempt to access beyond end of device [ 81.770054][ T4538] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 81.783464][ T4538] gfs2: error 10 reading superblock [ 82.097296][ T4545] loop4: detected capacity change from 0 to 512 [ 82.146695][ T4545] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.498033][ T4559] loop1: detected capacity change from 0 to 128 [ 82.547728][ T4559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 82.616149][ T4559] System zones: 1-3, 19-19, 35-36 [ 82.683132][ T4559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.697437][ T4570] loop4: detected capacity change from 0 to 512 [ 82.757702][ T4559] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.760270][ T4570] EXT4-fs (loop4): invalid journal inode [ 82.897324][ T4570] EXT4-fs (loop4): can't get journal size [ 82.956350][ T4570] EXT4-fs (loop4): 1 truncate cleaned up [ 82.958248][ T4264] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.969831][ T4570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.170839][ T4577] capability: warning: `syz.3.54' uses deprecated v2 capabilities in a way that may be insecure [ 83.188066][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 83.218486][ T4264] usb 1-1: Using ep0 maxpacket: 16 [ 83.226507][ T4264] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.268315][ T4264] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.278084][ T4264] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.328217][ T4264] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.337923][ T4264] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 83.368375][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.415751][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 83.473237][ T4264] usb 1-1: config 0 descriptor?? [ 83.783938][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.892296][ T4591] loop4: detected capacity change from 0 to 164 [ 83.949581][ T26] usb 4-1: device descriptor read/64, error -71 [ 84.248842][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.472479][ T26] usb 4-1: device descriptor read/64, error -71 [ 84.568502][ T4264] usbhid 1-1:0.0: can't add hid device: -71 [ 84.574520][ T4264] usbhid: probe of 1-1:0.0 failed with error -71 [ 84.596294][ T4264] usb 1-1: USB disconnect, device number 3 [ 84.649503][ T26] usb usb4-port1: attempt power cycle [ 84.948219][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.951542][ T4568] loop2: detected capacity change from 0 to 32768 [ 85.027548][ T4568] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.046035][ T4568] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.058263][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.089496][ T26] usb 4-1: device descriptor read/8, error -71 [ 85.136105][ T4568] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 85.139337][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 85.156803][ T4404] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 85.170110][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.172208][ T4404] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 85.200992][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.238386][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.268429][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 85.296213][ T4404] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms [ 85.299025][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.327022][ T4404] gfs2: fsid=syz:syz.0: jid=0: Done [ 85.344722][ T4568] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 85.368385][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.401539][ T14] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 85.427073][ T14] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 85.429425][ T26] usb 4-1: device descriptor read/8, error -71 [ 85.463395][ T14] usb 2-1: Manufacturer: syz [ 85.477493][ T14] usb 2-1: config 0 descriptor?? [ 85.588452][ T26] usb usb4-port1: unable to enumerate USB device [ 85.643348][ T4620] syz.4.62 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.738269][ T4361] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.938348][ T4361] usb 1-1: Using ep0 maxpacket: 16 [ 85.956550][ T4361] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.986575][ T4361] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.006857][ T4361] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.030777][ T4361] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 86.073265][ T4361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.138096][ T4361] usb 1-1: config 0 descriptor?? [ 86.587394][ T4361] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x6 [ 86.599596][ T129] cfg80211: failed to load regulatory.db [ 86.637754][ T4361] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 86.685817][ T4627] tipc: Started in network mode [ 86.696566][ T4627] tipc: Node identity 3e58541ff2aa, cluster identity 4711 [ 86.750519][ T4627] tipc: Enabled bearer , priority 0 [ 86.766938][ T4629] device syzkaller0 entered promiscuous mode [ 86.790063][ T4361] usb 1-1: USB disconnect, device number 4 [ 86.897480][ T4627] tipc: Resetting bearer [ 86.956334][ T4626] tipc: Resetting bearer [ 86.987104][ T4626] tipc: Disabling bearer [ 87.861989][ T4292] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 88.068234][ T14] rc_core: IR keymap rc-hauppauge not found [ 88.074459][ T14] Registered IR keymap rc-empty [ 88.079799][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.142506][ T4659] loop1: detected capacity change from 0 to 164 [ 88.348843][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.558488][ T26] usb 5-1: device descriptor read/64, error -71 [ 88.709141][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.820293][ T14] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 88.837253][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 88.864252][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.891182][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.965051][ T4667] tipc: Started in network mode [ 88.969333][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.978251][ T4667] tipc: Node identity ce565f4c993, cluster identity 4711 [ 88.985548][ T4667] tipc: Enabled bearer , priority 0 [ 89.007601][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.033426][ T4669] device syzkaller0 entered promiscuous mode [ 89.039864][ T26] usb 5-1: device descriptor read/64, error -71 [ 89.070878][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.079571][ T4667] tipc: Resetting bearer [ 89.105443][ T4666] tipc: Resetting bearer [ 89.119376][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.140413][ T4666] tipc: Disabling bearer [ 89.159274][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.160640][ T26] usb usb5-port1: attempt power cycle [ 89.193278][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.239344][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.279286][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.308312][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.339638][ T14] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 89.347674][ T14] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 89.379541][ T14] usb 2-1: USB disconnect, device number 3 [ 89.581289][ T4668] loop2: detected capacity change from 0 to 32768 [ 89.608449][ T4668] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 89.610337][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.623354][ T4668] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 89.687795][ T27] audit: type=1326 audit(1792940334.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.82" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafbb9f559 code=0x7ffc0000 [ 89.711247][ T4668] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 89.722696][ T26] usb 5-1: device descriptor read/8, error -71 [ 89.747881][ T129] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 89.768709][ T129] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 89.769153][ T27] audit: type=1326 audit(1792940334.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.82" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafbb9f559 code=0x7ffc0000 [ 89.778481][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.844773][ T27] audit: type=1326 audit(1792940334.080:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.82" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafbb9f559 code=0x7ffc0000 [ 89.921952][ T129] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 153ms [ 89.937596][ T27] audit: type=1326 audit(1792940334.080:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.82" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7faafbb9f559 code=0x7ffc0000 [ 89.949338][ T129] gfs2: fsid=syz:syz.0: jid=0: Done [ 89.968649][ T27] audit: type=1326 audit(1792940334.080:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.82" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafbb9f559 code=0x7ffc0000 [ 89.988229][ T4668] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 90.003716][ T27] audit: type=1326 audit(1792940334.080:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.82" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafbb9f559 code=0x7ffc0000 [ 90.028278][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 90.030087][ T14] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.048298][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.071832][ T14] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.093658][ T26] usb 5-1: device descriptor read/8, error -71 [ 90.113258][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.124200][ T27] audit: type=1326 audit(1792940334.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.82" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafbb9f559 code=0x7ffc0000 [ 90.140504][ T14] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 90.156244][ T27] audit: type=1326 audit(1792940334.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.82" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faafbb9f559 code=0x7ffc0000 [ 90.195176][ T27] audit: type=1326 audit(1792940334.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.82" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faafbb9f559 code=0x7ffc0000 [ 90.208204][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.229054][ T26] usb usb5-port1: unable to enumerate USB device [ 90.255080][ T14] usb 2-1: config 0 descriptor?? [ 90.298211][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 90.498313][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 90.511087][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.528769][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.544234][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 90.556584][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 90.567137][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.587834][ T22] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 90.598246][ T22] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 90.606372][ T22] usb 4-1: Manufacturer: syz [ 90.617169][ T22] usb 4-1: config 0 descriptor?? [ 90.706143][ T14] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x6 [ 90.715696][ T14] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 90.929540][ T129] usb 2-1: USB disconnect, device number 4 [ 91.412518][ T4698] loop2: detected capacity change from 0 to 164 [ 92.103243][ T4701] tipc: Enabled bearer , priority 0 [ 92.140364][ T4701] device syzkaller0 entered promiscuous mode [ 92.178188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 92.236215][ T4701] tipc: Resetting bearer [ 92.264338][ T4700] tipc: Resetting bearer [ 92.299609][ T4700] tipc: Disabling bearer [ 92.938467][ T4404] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.108261][ T4404] usb 1-1: device descriptor read/64, error -71 [ 93.208251][ T22] rc_core: IR keymap rc-hauppauge not found [ 93.214337][ T22] Registered IR keymap rc-empty [ 93.229743][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.416944][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.448766][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 93.456935][ T4717] loop1: detected capacity change from 0 to 32768 [ 93.479521][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 93.559277][ T4736] loop3: detected capacity change from 0 to 164 [ 93.719817][ T4717] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 93.884605][ T4717] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 94.165463][ T4717] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 94.168695][ T4404] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.223546][ T4370] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 94.230692][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.237955][ T4370] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 94.258407][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.300292][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.349777][ T4404] usb 1-1: device descriptor read/64, error -71 [ 94.356140][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.403195][ T4370] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 165ms [ 94.420516][ T4370] gfs2: fsid=syz:syz.0: jid=0: Done [ 94.428512][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.448949][ T4717] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 94.468355][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.476206][ T4404] usb usb1-port1: attempt power cycle [ 94.508429][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.548292][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.578255][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.605812][ T4747] tipc: Started in network mode [ 94.618430][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.649352][ T22] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 94.655825][ T4747] tipc: Node identity 36606b9ad5ab, cluster identity 4711 [ 94.670287][ T22] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 94.697683][ T4747] tipc: Enabled bearer , priority 0 [ 94.722447][ T22] usb 4-1: USB disconnect, device number 6 [ 94.754412][ T4750] device syzkaller0 entered promiscuous mode [ 94.815873][ T4747] tipc: Resetting bearer [ 94.835057][ T4746] tipc: Resetting bearer [ 94.864724][ T4746] tipc: Disabling bearer [ 94.898352][ T4404] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 94.938947][ T4404] usb 1-1: device descriptor read/8, error -71 [ 95.248220][ T4404] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 95.288893][ T4404] usb 1-1: device descriptor read/8, error -71 [ 95.302120][ T4753] loop2: detected capacity change from 0 to 32768 [ 95.329398][ T4753] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.108 (4753) [ 95.423545][ T4404] usb usb1-port1: unable to enumerate USB device [ 95.437311][ T4753] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.448954][ T4753] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.457659][ T4753] BTRFS info (device loop2): disabling tree log [ 95.464738][ T4753] BTRFS info (device loop2): turning on sync discard [ 95.472030][ T4361] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.479965][ T4753] BTRFS info (device loop2): use zlib compression, level 3 [ 95.487195][ T4753] BTRFS info (device loop2): using free space tree [ 95.538388][ T4370] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 95.668484][ T4361] usb 5-1: Using ep0 maxpacket: 16 [ 95.675614][ T4361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.696440][ T4361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.720835][ T4361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.740473][ T4753] BTRFS info (device loop2): enabling ssd optimizations [ 95.751329][ T4361] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 95.765985][ T4361] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.808344][ T4361] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 95.817840][ T4361] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 95.860872][ T4787] loop1: detected capacity change from 0 to 164 [ 96.068068][ T4361] usb 5-1: Manufacturer: syz [ 96.364627][ T4361] usb 5-1: config 0 descriptor?? [ 96.388225][ T4370] usb 4-1: Using ep0 maxpacket: 8 [ 96.399247][ T4370] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 96.437821][ T4370] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.549052][ T4370] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 96.561515][ T4370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.590212][ T4370] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected [ 96.618839][ T4370] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 96.698649][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 96.719883][ T4286] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.898206][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 96.916869][ T14] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.927987][ T14] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.938325][ T14] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.951538][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.977263][ T14] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 96.987391][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.999297][ T14] usb 1-1: config 0 descriptor?? [ 97.226454][ T4810] tipc: Started in network mode [ 97.234284][ T4810] tipc: Node identity d64766757ac5, cluster identity 4711 [ 97.248549][ T4810] tipc: Enabled bearer , priority 0 [ 97.256442][ T4810] device syzkaller0 entered promiscuous mode [ 97.282736][ T4810] tipc: Resetting bearer [ 97.291250][ T4809] tipc: Resetting bearer [ 97.318605][ T4809] tipc: Disabling bearer [ 97.369831][ T4370] usb 4-1: USB disconnect, device number 7 [ 97.387063][ T4370] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 97.407715][ T4370] kobil_sct 4-1:1.0: device disconnected [ 97.420674][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 97.432767][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 97.466013][ T14] usb 1-1: USB disconnect, device number 9 [ 97.878326][ T4804] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.158408][ T4804] usb 2-1: device descriptor read/64, error -71 [ 98.219242][ T4834] loop3: detected capacity change from 0 to 164 [ 98.941408][ T4804] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.120852][ T4804] usb 2-1: device descriptor read/64, error -71 [ 99.131201][ T4847] tipc: Enabled bearer , priority 0 [ 99.151500][ T4847] device syzkaller0 entered promiscuous mode [ 99.168236][ T4361] rc_core: IR keymap rc-hauppauge not found [ 99.175340][ T4361] Registered IR keymap rc-empty [ 99.194805][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.205615][ T4847] Zero length message leads to an empty skb [ 99.228483][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.230882][ T4847] tipc: Resetting bearer [ 99.248415][ T4804] usb usb2-port1: attempt power cycle [ 99.266018][ T4846] tipc: Resetting bearer [ 99.269884][ T4361] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 99.307762][ T4361] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 99.324078][ T4846] tipc: Disabling bearer [ 99.343040][ T4292] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 99.358562][ T4292] CPU: 1 PID: 4292 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 99.360943][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.366122][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.366158][ T4292] Workqueue: hci4 hci_rx_work [ 99.366207][ T4292] Call Trace: [ 99.366215][ T4292] [ 99.366223][ T4292] dump_stack_lvl+0x188/0x24e [ 99.398944][ T4292] ? show_regs_print_info+0x12/0x12 [ 99.404164][ T4292] ? load_image+0x410/0x410 [ 99.408716][ T4292] sysfs_create_dir_ns+0x26a/0x290 [ 99.413848][ T4292] ? __lock_acquire+0x7ea0/0x7ea0 [ 99.418895][ T4292] ? sysfs_warn_dup+0xa0/0xa0 [ 99.423594][ T4292] ? do_raw_spin_unlock+0x11d/0x230 [ 99.428811][ T4292] kobject_add_internal+0x617/0xca0 [ 99.429188][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.434018][ T4292] kobject_add+0x160/0x230 [ 99.434050][ T4292] ? kobject_init+0x1c0/0x1c0 [ 99.450258][ T4292] ? __raw_spin_lock_init+0x41/0x100 [ 99.455560][ T4292] ? klist_children_get+0x50/0x50 [ 99.460603][ T4292] ? get_device_parent+0x121/0x3e0 [ 99.465740][ T4292] device_add+0x470/0x1050 [ 99.470186][ T4292] hci_conn_add_sysfs+0xd1/0x1e0 [ 99.475168][ T4292] le_conn_complete_evt+0xf93/0x15c0 [ 99.480496][ T4292] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 99.486763][ T4292] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 99.488224][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.492401][ T4292] ? mutex_unlock+0x10/0x10 [ 99.492426][ T4292] ? skb_pull_data+0xec/0x1f0 [ 99.508710][ T4292] hci_le_conn_complete_evt+0x183/0x440 [ 99.514286][ T4292] ? hci_remote_host_features_evt+0x230/0x230 [ 99.520375][ T4292] hci_event_packet+0x7b3/0x1290 [ 99.525335][ T4292] ? lock_chain_count+0x20/0x20 [ 99.530208][ T4292] ? bis_list+0x280/0x280 [ 99.534550][ T4292] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.539384][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.540452][ T4292] ? kcov_remote_start+0x50f/0x810 [ 99.540478][ T4292] ? lockdep_hardirqs_on+0x94/0x140 [ 99.540504][ T4292] ? hci_send_to_monitor+0x9c/0x4a0 [ 99.563102][ T4292] hci_rx_work+0x3eb/0xd40 [ 99.567541][ T4292] ? _raw_spin_unlock+0x40/0x40 [ 99.572415][ T4292] ? process_one_work+0x7b4/0x1160 [ 99.577545][ T4292] process_one_work+0x8ab/0x1160 [ 99.579230][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.582494][ T4292] ? worker_detach_from_pool+0x240/0x240 [ 99.582525][ T4292] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.600262][ T4292] ? _raw_spin_lock_irqsave+0x100/0x100 [ 99.605835][ T4292] ? wq_worker_running+0x97/0x190 [ 99.610876][ T4292] worker_thread+0xaf5/0x12a0 [ 99.615603][ T4292] kthread+0x29d/0x330 [ 99.619681][ T4292] ? worker_clr_flags+0x1a0/0x1a0 [ 99.624722][ T4292] ? kthread_blkcg+0xd0/0xd0 [ 99.629328][ T4292] ret_from_fork+0x1f/0x30 [ 99.629388][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.633757][ T4292] [ 99.638214][ T4292] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 99.658268][ T4804] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.666323][ T4292] Bluetooth: hci4: failed to register connection device [ 99.689749][ T4804] usb 2-1: device descriptor read/8, error -71 [ 99.708735][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.757301][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.808244][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.862879][ T4361] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 99.866801][ T4856] loop4: detected capacity change from 0 to 32768 [ 99.894690][ T4856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.137 (4856) [ 99.929222][ T4361] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 99.937253][ T4361] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.964210][ T4856] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.968312][ T4804] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 100.008418][ T4361] usb 5-1: USB disconnect, device number 7 [ 100.017565][ T4856] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 100.042071][ T4856] BTRFS info (device loop4): setting nodatasum [ 100.049127][ T4804] usb 2-1: device descriptor read/8, error -71 [ 100.079038][ T4856] BTRFS info (device loop4): force zlib compression, level 3 [ 100.278182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.288202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.298168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.308163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.318165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.328165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.338166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.348162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.358164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.677541][ T4861] futex_wake_op: syz.2.139 tries to shift op by 144; fix this program [ 100.687079][ T4861] futex_wake_op: syz.2.139 tries to shift op by 144; fix this program [ 101.281501][ T4804] usb usb2-port1: unable to enumerate USB device [ 101.358204][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 101.359213][ T4856] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 101.388362][ T4856] BTRFS info (device loop4): use lzo compression, level 0 [ 101.395527][ T4856] BTRFS info (device loop4): turning on flush-on-commit [ 101.438222][ T4856] BTRFS info (device loop4): enabling auto defrag [ 101.448513][ T4856] BTRFS info (device loop4): max_inline at 4096 [ 101.454915][ T4856] BTRFS info (device loop4): using free space tree [ 101.548235][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 101.555155][ T14] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.586510][ T14] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.612979][ T14] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.638495][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.645151][ T14] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 101.685375][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.703886][ T4856] BTRFS info (device loop4): enabling ssd optimizations [ 101.736001][ T14] usb 1-1: config 0 descriptor?? [ 101.818337][ T4370] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 102.003423][ T4284] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.016971][ T4370] usb 2-1: Using ep0 maxpacket: 16 [ 102.027068][ T4370] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.057876][ T4370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.073413][ T4370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.104314][ T4370] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.114745][ T4370] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.134976][ T4370] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.144724][ T4370] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.153363][ T4370] usb 2-1: Manufacturer: syz [ 102.169672][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 102.175833][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 102.179337][ T4370] usb 2-1: config 0 descriptor?? [ 102.199623][ T14] usb 1-1: USB disconnect, device number 10 [ 102.674983][ T4900] loop4: detected capacity change from 0 to 164 [ 103.775862][ T4912] tipc: Enabled bearer , priority 0 [ 103.795211][ T4912] device syzkaller0 entered promiscuous mode [ 103.838526][ T4912] tipc: Resetting bearer [ 103.851899][ T4911] tipc: Resetting bearer [ 103.883694][ T4911] tipc: Disabling bearer [ 104.513757][ T4892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.638844][ T4370] rc_core: IR keymap rc-hauppauge not found [ 104.646490][ T4370] Registered IR keymap rc-empty [ 104.654842][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 104.668494][ T4892] usb 3-1: device descriptor read/64, error -71 [ 104.730561][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 104.771696][ T4370] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 104.789664][ T4370] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 104.857352][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 104.978363][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 105.008316][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 105.089843][ T4947] loop0: detected capacity change from 0 to 164 [ 105.627964][ T4892] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.698190][ T14] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.756983][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 105.795482][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 105.878319][ T4892] usb 3-1: device descriptor read/64, error -71 [ 105.918522][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 105.976107][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 105.998542][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 106.013717][ T14] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.024848][ T4892] usb usb3-port1: attempt power cycle [ 106.038668][ T14] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.039496][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.049060][ T14] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.088253][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.108267][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.116866][ T14] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 106.145825][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.148312][ T4370] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.162765][ T14] usb 5-1: config 0 descriptor?? [ 106.208090][ T4956] tipc: Enabled bearer , priority 0 [ 106.213954][ T4370] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 106.217440][ T4956] device syzkaller0 entered promiscuous mode [ 106.228385][ T4370] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 106.248800][ T4370] usb 2-1: USB disconnect, device number 9 [ 106.277067][ T4956] tipc: Resetting bearer [ 106.289346][ T4955] tipc: Resetting bearer [ 106.317703][ T4955] tipc: Disabling bearer [ 106.407395][ T4964] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 106.458218][ T4892] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.507255][ T4892] usb 3-1: device descriptor read/8, error -71 [ 106.513584][ T4804] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 106.779490][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 106.785468][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 106.798586][ T14] usb 5-1: USB disconnect, device number 8 [ 107.274888][ T4804] usb 1-1: Using ep0 maxpacket: 16 [ 107.300968][ T4804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.315706][ T4804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.340281][ T4804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.363318][ T4804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.520836][ T4804] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.546408][ T4804] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.555800][ T4804] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.564312][ T4804] usb 1-1: Manufacturer: syz [ 107.572322][ T4804] usb 1-1: config 0 descriptor?? [ 107.661881][ T4992] loop1: detected capacity change from 0 to 164 [ 108.563415][ T4997] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 108.590085][ T4374] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 108.628218][ T4804] rc_core: IR keymap rc-hauppauge not found [ 108.634232][ T4804] Registered IR keymap rc-empty [ 108.662217][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.738323][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.768995][ T4804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 108.804828][ T4804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 108.815833][ T5004] tipc: Started in network mode [ 108.832676][ T5004] tipc: Node identity ca84857c6a4f, cluster identity 4711 [ 108.842897][ T5004] tipc: Enabled bearer , priority 0 [ 108.858040][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.863710][ T5004] device syzkaller0 entered promiscuous mode [ 108.893014][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.906813][ T5004] tipc: Resetting bearer [ 108.926038][ T5003] tipc: Resetting bearer [ 108.932444][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.970215][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.978469][ T5003] tipc: Disabling bearer [ 109.010436][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.043101][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.068265][ T4374] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.081543][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.128238][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.163616][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.199527][ T4804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.259500][ T4804] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 109.275606][ T4804] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 109.328250][ T26] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 109.347703][ T4804] usb 1-1: USB disconnect, device number 11 [ 109.629843][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 109.640415][ T4374] usb 3-1: no configurations [ 109.649407][ T4374] usb 3-1: can't read configurations, error -22 [ 109.798341][ T4374] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.828233][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 109.835034][ T26] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.849237][ T26] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.860866][ T26] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.901696][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.946294][ T5033] loop4: detected capacity change from 0 to 164 [ 110.409923][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 110.425195][ T4374] usb 3-1: no configurations [ 110.489191][ T4374] usb 3-1: can't read configurations, error -22 [ 110.500869][ T26] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 110.515487][ T4374] usb usb3-port1: attempt power cycle [ 110.527432][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.544803][ T26] usb 2-1: config 0 descriptor?? [ 110.968366][ T4374] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.977372][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 110.989512][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 111.007262][ T26] usb 2-1: USB disconnect, device number 10 [ 111.018922][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 111.027003][ T4374] usb 3-1: no configurations [ 111.037815][ T4374] usb 3-1: can't read configurations, error -22 [ 111.180706][ T5048] tipc: Enabled bearer , priority 0 [ 111.188693][ T5048] device syzkaller0 entered promiscuous mode [ 111.198414][ T4374] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 111.215499][ T5048] tipc: Resetting bearer [ 111.223287][ T5047] tipc: Resetting bearer [ 111.245758][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 111.251967][ T4374] usb 3-1: no configurations [ 111.256761][ T4374] usb 3-1: can't read configurations, error -22 [ 111.266069][ T4374] usb usb3-port1: unable to enumerate USB device [ 111.274362][ T5047] tipc: Disabling bearer [ 111.453971][ T5054] ip_tables: iptables: counters copy to user failed while replacing table [ 112.000795][ T4892] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.029970][ T5054] sctp: failed to load transform for md5: -2 [ 112.188584][ T4892] usb 4-1: Using ep0 maxpacket: 16 [ 112.205332][ T4892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.247791][ T4892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.275136][ T4892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.304459][ T4892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.317404][ T4892] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.347878][ T4892] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.348317][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 112.364836][ T4892] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.373211][ T4892] usb 4-1: Manufacturer: syz [ 112.386989][ T4892] usb 4-1: config 0 descriptor?? [ 112.404171][ T5073] loop2: detected capacity change from 0 to 64 [ 112.664052][ T5079] loop0: detected capacity change from 0 to 164 [ 113.548277][ T4892] rc_core: IR keymap rc-hauppauge not found [ 113.554211][ T4892] Registered IR keymap rc-empty [ 113.706676][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.784287][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.839985][ T4892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 113.889302][ T4892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 114.217058][ T5089] sctp: failed to load transform for md5: -2 [ 114.448281][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.548515][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.563610][ T5098] tipc: Enabled bearer , priority 0 [ 114.608352][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.625910][ T5098] device syzkaller0 entered promiscuous mode [ 114.642508][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.648281][ T4374] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.654085][ T5098] tipc: Resetting bearer [ 114.708273][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.715760][ T5091] tipc: Resetting bearer [ 114.749730][ T5091] tipc: Disabling bearer [ 114.759353][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.798489][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.828392][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.850630][ T4374] usb 5-1: Using ep0 maxpacket: 16 [ 114.858081][ T4374] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.878271][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.895498][ T4374] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.918289][ T4892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.926432][ T4374] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.948207][ T4374] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.955387][ T4892] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 114.965733][ T4374] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 114.973735][ T4892] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 114.978839][ T4374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.022818][ T4892] usb 4-1: USB disconnect, device number 8 [ 115.035909][ T4374] usb 5-1: config 0 descriptor?? [ 115.056584][ T5087] loop0: detected capacity change from 0 to 32768 [ 115.491712][ T5125] loop2: detected capacity change from 0 to 256 [ 115.776768][ T5125] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 115.836460][ T27] audit: type=1800 audit(1792940360.180:12): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="file1" dev="loop2" ino=1048632 res=0 errno=0 [ 115.943184][ T4892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.988298][ T4374] usbhid 5-1:0.0: can't add hid device: -71 [ 116.000719][ T4374] usbhid: probe of 5-1:0.0 failed with error -71 [ 116.035787][ T4374] usb 5-1: USB disconnect, device number 9 [ 116.178406][ T4892] usb 4-1: Using ep0 maxpacket: 16 [ 116.204979][ T4892] usb 4-1: no configurations [ 116.209881][ T4892] usb 4-1: can't read configurations, error -22 [ 116.372037][ T5132] loop1: detected capacity change from 0 to 164 [ 116.458477][ T4892] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 116.698924][ T4892] usb 4-1: Using ep0 maxpacket: 16 [ 116.712835][ T4892] usb 4-1: no configurations [ 116.860313][ T4892] usb 4-1: can't read configurations, error -22 [ 116.925146][ T5134] loop2: detected capacity change from 0 to 512 [ 116.942025][ T4892] usb usb4-port1: attempt power cycle [ 117.077952][ T5134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.103634][ T27] audit: type=1800 audit(1792940361.460:13): pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.221" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 117.108325][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.363090][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 117.368218][ T4892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 117.376425][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 117.380819][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.395986][ T5143] tipc: Enabled bearer , priority 0 [ 117.406671][ T5143] device syzkaller0 entered promiscuous mode [ 117.417422][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.418897][ T4892] usb 4-1: Using ep0 maxpacket: 16 [ 117.444084][ T4892] usb 4-1: no configurations [ 117.444458][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.459972][ T4892] usb 4-1: can't read configurations, error -22 [ 117.480493][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 117.494297][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.536494][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.555910][ T22] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.583258][ T22] usb 1-1: Manufacturer: syz [ 117.597132][ T22] usb 1-1: config 0 descriptor?? [ 117.608253][ T4892] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 117.611086][ T5144] tipc: Resetting bearer [ 117.631906][ T5148] xt_hashlimit: size too large, truncated to 1048576 [ 117.668779][ T5142] tipc: Resetting bearer [ 117.714610][ T5142] tipc: Disabling bearer [ 117.828465][ T4892] usb 4-1: device not accepting address 12, error -71 [ 117.846491][ T4892] usb usb4-port1: unable to enumerate USB device [ 118.048464][ T22] rc_core: IR keymap rc-hauppauge not found [ 118.055342][ T22] Registered IR keymap rc-empty [ 118.069831][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.128910][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.169059][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 118.194035][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 118.217114][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.252542][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.288301][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.318360][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.348998][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.388261][ T4892] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.398576][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.439554][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.478367][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.589290][ T4892] usb 3-1: Using ep0 maxpacket: 16 [ 118.601673][ T4892] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.651569][ T4892] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.656933][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.694429][ T4892] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.708258][ T22] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.724212][ T4892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.735995][ T5171] loop4: detected capacity change from 0 to 164 [ 118.747793][ T22] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 118.763663][ T4892] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 118.768516][ T22] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 118.804284][ T4892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.835887][ T4892] usb 3-1: config 0 descriptor?? [ 118.859895][ T22] usb 1-1: USB disconnect, device number 12 [ 119.208320][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 119.279658][ T4892] usbhid 3-1:0.0: can't add hid device: -71 [ 119.294243][ T4892] usbhid: probe of 3-1:0.0 failed with error -71 [ 119.346542][ T4892] usb 3-1: USB disconnect, device number 10 [ 119.398296][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 119.404123][ T14] usb 4-1: no configurations [ 119.420046][ T14] usb 4-1: can't read configurations, error -22 [ 119.593915][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 119.868275][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 119.877139][ T5184] tipc: Enabled bearer , priority 0 [ 119.888347][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 119.888917][ T5184] device syzkaller0 entered promiscuous mode [ 119.899183][ T14] usb 4-1: no configurations [ 119.916643][ T14] usb 4-1: can't read configurations, error -22 [ 119.939027][ T14] usb usb4-port1: attempt power cycle [ 119.978693][ T5184] tipc: Resetting bearer [ 120.005024][ T5183] tipc: Resetting bearer [ 120.045967][ T5183] tipc: Disabling bearer [ 120.358238][ T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 120.543805][ T5199] loop1: detected capacity change from 0 to 256 [ 120.565421][ T5199] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 120.575512][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 120.576556][ T5199] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 120.591444][ T5199] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.599136][ T5199] UDF-fs: Scanning with blocksize 512 failed [ 120.608008][ T5199] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 120.619885][ T5199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.699770][ T14] usb 4-1: no configurations [ 120.704441][ T14] usb 4-1: can't read configurations, error -22 [ 120.758360][ T4892] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.900595][ T14] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 120.938837][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 120.945029][ T14] usb 4-1: no configurations [ 120.950998][ T14] usb 4-1: can't read configurations, error -22 [ 120.958627][ T14] usb usb4-port1: unable to enumerate USB device [ 120.970843][ T5207] loop4: detected capacity change from 0 to 164 [ 121.008531][ T4892] usb 3-1: Using ep0 maxpacket: 32 [ 121.016059][ T4892] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 121.036791][ T4892] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 121.055455][ T4892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.072827][ T4892] usb 3-1: Product: syz [ 121.080589][ T4892] usb 3-1: Manufacturer: syz [ 121.097961][ T4892] usb 3-1: SerialNumber: syz [ 121.124288][ T4892] usb 3-1: config 0 descriptor?? [ 121.147230][ T4892] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 121.173948][ T4892] dvb-usb: bulk message failed: -22 (2/0) [ 121.204126][ T4892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.216816][ T4892] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 121.234649][ T4892] usb 3-1: media controller created [ 121.273188][ T4892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.313936][ T4892] usb 3-1: selecting invalid altsetting 7 [ 121.325956][ T4892] cxusb: set interface failed [ 121.336036][ T4892] dvb-usb: bulk message failed: -22 (1/0) [ 121.346797][ T5197] cxusb: i2c wr: len=78 is too big! [ 121.346797][ T5197] [ 121.426560][ T4892] DVB: Unable to find symbol lgdt330x_attach() [ 121.434371][ T4892] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 121.558690][ T4892] rc_core: IR keymap rc-dvico-portable not found [ 121.566879][ T4892] Registered IR keymap rc-empty [ 121.572522][ T4892] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 121.586212][ T4892] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 121.682302][ T4892] dvb-usb: schedule remote query interval to 100 msecs. [ 121.689617][ T4892] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 121.701080][ T4892] usb 3-1: USB disconnect, device number 11 [ 121.767127][ T4892] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 123.462027][ T5220] tipc: Enabled bearer , priority 0 [ 123.469553][ T5220] device syzkaller0 entered promiscuous mode [ 123.542026][ T5220] tipc: Resetting bearer [ 123.582517][ T5219] tipc: Resetting bearer [ 123.611382][ T4804] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 123.627990][ T5219] tipc: Disabling bearer [ 123.808248][ T4804] usb 1-1: Using ep0 maxpacket: 16 [ 123.816025][ T4804] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.836719][ T4804] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.850763][ T5238] loop2: detected capacity change from 0 to 2048 [ 123.853294][ T4804] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.891184][ T5238] UDF-fs: bad mount option "uid=00000000000000060929" or missing value [ 123.901809][ T4804] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.908979][ T4892] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.917380][ T4804] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 123.927022][ T4804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.944595][ T4804] usb 1-1: config 0 descriptor?? [ 124.260046][ T4892] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 124.268783][ T4892] usb 5-1: config 0 has no interface number 0 [ 124.274980][ T4892] usb 5-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 124.286079][ T4892] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 124.295272][ T4892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.310355][ T5246] loop2: detected capacity change from 0 to 164 [ 124.332365][ T4892] usb 5-1: config 0 descriptor?? [ 124.341874][ T5242] loop1: detected capacity change from 0 to 32768 [ 124.344039][ T5227] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 124.396389][ T5242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.262 (5242) [ 124.432965][ T5242] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.449780][ T4804] usbhid 1-1:0.0: can't add hid device: -71 [ 124.457946][ T4804] usbhid: probe of 1-1:0.0 failed with error -71 [ 124.477250][ T5242] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 124.498536][ T4804] usb 1-1: USB disconnect, device number 13 [ 124.512166][ T5242] BTRFS info (device loop1): setting nodatasum [ 124.533613][ T5242] BTRFS info (device loop1): force zlib compression, level 3 [ 124.555948][ T5242] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 124.580521][ T5242] BTRFS info (device loop1): use lzo compression, level 0 [ 124.580855][ T4892] usb 5-1: USB disconnect, device number 10 [ 124.587787][ T5242] BTRFS info (device loop1): turning on flush-on-commit [ 124.609837][ T5242] BTRFS info (device loop1): enabling auto defrag [ 124.626092][ T5242] BTRFS info (device loop1): max_inline at 4096 [ 124.637426][ T5242] BTRFS info (device loop1): using free space tree [ 124.711622][ T5242] BTRFS info (device loop1): enabling ssd optimizations [ 124.749222][ T27] audit: type=1800 audit(1792940369.110:14): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.262" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 124.864590][ T5242] BTRFS info (device loop1): balance: start -sconvert=single,soft,usage=21474836481,usage=1..5,drange=0..19,limit=0..0 [ 124.970446][ T5242] BTRFS info (device loop1): balance: ended with status: 0 [ 125.020171][ T4279] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.205410][ T5274] loop0: detected capacity change from 0 to 1024 [ 125.358198][ T4374] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.578679][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 125.586447][ T4374] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 125.645025][ T4374] usb 3-1: can't read configurations, error -61 [ 125.848487][ T4374] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.952784][ T5286] tipc: Enabled bearer , priority 0 [ 125.977846][ T5286] device syzkaller0 entered promiscuous mode [ 126.052636][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 126.064435][ T4374] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 126.080005][ T5286] tipc: Resetting bearer [ 126.135882][ T4374] usb 3-1: can't read configurations, error -61 [ 126.147781][ T4374] usb usb3-port1: attempt power cycle [ 126.152853][ T5285] tipc: Resetting bearer [ 126.177643][ T5285] tipc: Disabling bearer [ 126.548407][ T4374] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 126.606016][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 126.650264][ T4374] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 126.736542][ T4374] usb 3-1: can't read configurations, error -61 [ 127.003466][ T5302] loop3: detected capacity change from 0 to 164 [ 127.098322][ T4374] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 127.747513][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 127.809725][ T4374] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 127.817360][ T4374] usb 3-1: can't read configurations, error -61 [ 127.898448][ T4374] usb usb3-port1: unable to enumerate USB device [ 128.207175][ T5318] fuse: root generation should be zero [ 128.365700][ T4374] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 128.844865][ T5326] syz.3.281 (5326) used greatest stack depth: 16592 bytes left [ 129.088264][ T4374] usb 1-1: Using ep0 maxpacket: 16 [ 129.110629][ T4374] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.245055][ T4374] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.289826][ T4374] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.317013][ T5331] tipc: Enabled bearer , priority 0 [ 129.336113][ T4374] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.360276][ T5331] device syzkaller0 entered promiscuous mode [ 129.406076][ T4374] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 129.507978][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.689357][ T4374] usb 1-1: config 0 descriptor?? [ 130.182677][ T4374] usbhid 1-1:0.0: can't add hid device: -71 [ 130.198951][ T5340] tipc: Resetting bearer [ 130.207306][ T4374] usbhid: probe of 1-1:0.0 failed with error -71 [ 130.248688][ T4374] usb 1-1: USB disconnect, device number 14 [ 130.289142][ T5330] tipc: Resetting bearer [ 130.461217][ T5330] tipc: Disabling bearer [ 130.633942][ T4418] tipc: Node number set to 3821759386 [ 130.995471][ T5351] FAULT_INJECTION: forcing a failure. [ 130.995471][ T5351] name failslab, interval 1, probability 0, space 0, times 1 [ 131.008183][ T5351] CPU: 0 PID: 5351 Comm: syz.4.291 Not tainted syzkaller #0 [ 131.015471][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.025511][ T5351] Call Trace: [ 131.028777][ T5351] [ 131.031693][ T5351] dump_stack_lvl+0x188/0x24e [ 131.036369][ T5351] ? show_regs_print_info+0x12/0x12 [ 131.041550][ T5351] ? load_image+0x410/0x410 [ 131.046057][ T5351] ? __might_sleep+0xd0/0xd0 [ 131.050655][ T5351] ? __lock_acquire+0x7ea0/0x7ea0 [ 131.055688][ T5351] should_fail_ex+0x390/0x4c0 [ 131.060362][ T5351] should_failslab+0x5/0x20 [ 131.064851][ T5351] slab_pre_alloc_hook+0x59/0x300 [ 131.069865][ T5351] ? kvmalloc_node+0x6c/0x180 [ 131.074530][ T5351] __kmem_cache_alloc_node+0x4f/0x270 [ 131.079897][ T5351] ? kvmalloc_node+0x6c/0x180 [ 131.084569][ T5351] __kmalloc_node+0xa2/0x240 [ 131.089149][ T5351] kvmalloc_node+0x6c/0x180 [ 131.093651][ T5351] bpf_int_jit_compile+0x474/0xcbe0 [ 131.098853][ T5351] ? slab_free_freelist_hook+0x133/0x1b0 [ 131.104475][ T5351] ? bpf_convert_filter+0x5067/0x5220 [ 131.109837][ T5351] ? __kmem_cache_free+0xb6/0x200 [ 131.114860][ T5351] ? kasan_set_track+0x60/0x70 [ 131.119708][ T5351] ? emit_bpf_dispatcher+0x1060/0x1060 [ 131.125162][ T5351] ? sk_filter_release_rcu+0x110/0x110 [ 131.130626][ T5351] ? rcu_is_watching+0x11/0xa0 [ 131.135384][ T5351] bpf_prog_select_runtime+0x48b/0x7d0 [ 131.140830][ T5351] ? bpf_prog_realloc+0x142/0x1c0 [ 131.145857][ T5351] bpf_prepare_filter+0x100e/0x11b0 [ 131.151086][ T5351] ? seccomp_notify_detach+0x220/0x220 [ 131.156531][ T5351] ? bpf_prog_create+0x1f0/0x1f0 [ 131.161452][ T5351] ? rcu_is_watching+0x11/0xa0 [ 131.166226][ T5351] ? kmemdup+0x42/0x60 [ 131.170303][ T5351] ? memcpy+0x3c/0x60 [ 131.174274][ T5351] bpf_prog_create_from_user+0x2cc/0x420 [ 131.179898][ T5351] ? seccomp_notify_detach+0x220/0x220 [ 131.185352][ T5351] do_seccomp+0x806/0xe00 [ 131.189675][ T5351] ? prctl_set_seccomp+0x60/0x60 [ 131.194605][ T5351] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.200579][ T5351] ? lockdep_hardirqs_on+0x94/0x140 [ 131.205769][ T5351] do_syscall_64+0x4c/0xa0 [ 131.210172][ T5351] ? clear_bhb_loop+0x60/0xb0 [ 131.214837][ T5351] ? clear_bhb_loop+0x60/0xb0 [ 131.219503][ T5351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.225407][ T5351] RIP: 0033:0x7f09aa19f559 [ 131.229810][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.249426][ T5351] RSP: 002b:00007f09aaf99028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 131.257854][ T5351] RAX: ffffffffffffffda RBX: 00007f09aa425fa0 RCX: 00007f09aa19f559 [ 131.265814][ T5351] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 131.273769][ T5351] RBP: 00007f09aa236b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.281723][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.289679][ T5351] R13: 00007f09aa426038 R14: 00007f09aa425fa0 R15: 00007ffcf16b64d8 [ 131.297662][ T5351] [ 131.491187][ T5356] loop2: detected capacity change from 0 to 164 [ 131.648598][ T4374] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 131.700482][ T5365] FAULT_INJECTION: forcing a failure. [ 131.700482][ T5365] name failslab, interval 1, probability 0, space 0, times 0 [ 131.714202][ T5365] CPU: 1 PID: 5365 Comm: syz.0.297 Not tainted syzkaller #0 [ 131.721517][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.731583][ T5365] Call Trace: [ 131.734881][ T5365] [ 131.737824][ T5365] dump_stack_lvl+0x188/0x24e [ 131.742524][ T5365] ? show_regs_print_info+0x12/0x12 [ 131.747740][ T5365] ? load_image+0x410/0x410 [ 131.752257][ T5365] ? __might_sleep+0xd0/0xd0 [ 131.756835][ T5365] ? __lock_acquire+0x7ea0/0x7ea0 [ 131.761856][ T5365] should_fail_ex+0x390/0x4c0 [ 131.766530][ T5365] should_failslab+0x5/0x20 [ 131.771031][ T5365] slab_pre_alloc_hook+0x59/0x300 [ 131.776072][ T5365] kmem_cache_alloc+0x56/0x2f0 [ 131.780834][ T5365] ? security_file_alloc+0x30/0x110 [ 131.786032][ T5365] security_file_alloc+0x30/0x110 [ 131.791054][ T5365] __alloc_file+0xc2/0x230 [ 131.795469][ T5365] alloc_empty_file+0x90/0x180 [ 131.800233][ T5365] alloc_file+0x5b/0x5f0 [ 131.804477][ T5365] alloc_file_pseudo+0x180/0x200 [ 131.809410][ T5365] ? alloc_empty_file_noaccount+0x80/0x80 [ 131.815139][ T5365] ? alloc_fd+0x590/0x640 [ 131.819476][ T5365] sock_alloc_file+0xb3/0x240 [ 131.824154][ T5365] __sys_socket+0x12d/0x190 [ 131.828655][ T5365] __x64_sys_socket+0x76/0x80 [ 131.833330][ T5365] do_syscall_64+0x4c/0xa0 [ 131.837740][ T5365] ? clear_bhb_loop+0x60/0xb0 [ 131.842415][ T5365] ? clear_bhb_loop+0x60/0xb0 [ 131.847088][ T5365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.852982][ T5365] RIP: 0033:0x7f83cdf9f559 [ 131.857390][ T5365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.876992][ T5365] RSP: 002b:00007f83cee9afc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 131.885399][ T5365] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f83cdf9f559 [ 131.893361][ T5365] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 000000000000001f [ 131.901322][ T5365] RBP: 00007f83ce036b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.909284][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.917258][ T5365] R13: 00007f83ce226038 R14: 00007f83ce225fa0 R15: 00007ffcbf2efe68 [ 131.925241][ T5365] [ 132.128780][ T4374] usb 2-1: Using ep0 maxpacket: 16 [ 132.670667][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.677106][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.959005][ T4374] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 132.966630][ T4374] usb 2-1: can't read configurations, error -61 [ 133.101171][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 133.178360][ T4374] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 133.368276][ T4374] usb 2-1: Using ep0 maxpacket: 16 [ 133.381298][ T4374] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 133.389476][ T4374] usb 2-1: can't read configurations, error -61 [ 133.396480][ T4374] usb usb2-port1: attempt power cycle [ 133.759801][ T5393] tipc: Enabled bearer , priority 0 [ 133.774656][ T5393] device syzkaller0 entered promiscuous mode [ 133.812334][ T5393] tipc: Resetting bearer [ 133.852987][ T4892] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.868951][ T5392] tipc: Resetting bearer [ 133.908290][ T5392] tipc: Disabling bearer [ 133.938965][ T5398] loop3: detected capacity change from 0 to 512 [ 134.023316][ T5398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.040775][ T5403] loop0: detected capacity change from 0 to 512 [ 134.055033][ T4892] usb 5-1: Using ep0 maxpacket: 16 [ 134.058456][ T5398] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.070517][ T4892] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.070544][ T4892] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.070563][ T4892] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.082299][ T4374] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 134.108191][ T4892] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.149032][ T4374] usb 2-1: Using ep0 maxpacket: 16 [ 134.157512][ T4374] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 134.170458][ T4374] usb 2-1: can't read configurations, error -61 [ 134.180754][ T4892] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 134.215626][ T4892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.237650][ T4892] usb 5-1: config 0 descriptor?? [ 134.243651][ T5407] syz.2.311 uses obsolete (PF_INET,SOCK_PACKET) [ 134.290353][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 134.324491][ T4374] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 134.372675][ T4374] usb 2-1: Using ep0 maxpacket: 16 [ 134.437017][ T4374] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 134.458216][ T4374] usb 2-1: can't read configurations, error -71 [ 134.487327][ T4374] usb usb2-port1: unable to enumerate USB device [ 134.588288][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.605530][ T5416] loop2: detected capacity change from 0 to 16 [ 134.628884][ T5416] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 134.661193][ T5416] erofs: DAX unsupported by block device. Turning off DAX. [ 134.677966][ T5415] loop3: detected capacity change from 0 to 164 [ 134.679633][ T5416] erofs: (device loop2): mounted with root inode @ nid 36. [ 134.817258][ T4892] usbhid 5-1:0.0: can't add hid device: -71 [ 134.827907][ T4892] usbhid: probe of 5-1:0.0 failed with error -71 [ 134.855004][ T4892] usb 5-1: USB disconnect, device number 11 [ 135.204851][ T5420] loop2: detected capacity change from 0 to 32768 [ 135.223407][ T5420] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.316 (5420) [ 135.326113][ T5420] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.402398][ T5420] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 135.436594][ T5420] BTRFS info (device loop2): setting nodatasum [ 135.485744][ T5420] BTRFS info (device loop2): force zlib compression, level 3 [ 135.504165][ T5420] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 135.532998][ T5420] BTRFS info (device loop2): use lzo compression, level 0 [ 136.438235][ T5420] BTRFS info (device loop2): turning on flush-on-commit [ 136.445233][ T5420] BTRFS info (device loop2): enabling auto defrag [ 136.538263][ T5420] BTRFS info (device loop2): max_inline at 4096 [ 136.544574][ T5420] BTRFS info (device loop2): using free space tree [ 136.577117][ T5433] tipc: Enabled bearer , priority 0 [ 136.594325][ T5433] device syzkaller0 entered promiscuous mode [ 136.694192][ T5433] tipc: Resetting bearer [ 136.735862][ T5432] tipc: Resetting bearer [ 137.934626][ T5432] tipc: Disabling bearer [ 137.965523][ T4799] tipc: Node number set to 1466326860 [ 138.090050][ T5420] BTRFS error (device loop2): open_ctree failed: -12 [ 138.246669][ T5463] loop0: detected capacity change from 0 to 1024 [ 138.352822][ T4294] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4294) [ 138.394678][ T5463] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.403481][ T5463] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.498290][ T4264] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 139.316149][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 139.321380][ T4806] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 139.325274][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 139.332096][ T4264] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 139.359237][ T4264] usb 2-1: can't read configurations, error -61 [ 139.518304][ T4806] usb 3-1: Using ep0 maxpacket: 16 [ 139.526669][ T4806] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.538060][ T4264] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 139.556237][ T4806] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.568824][ T4806] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.586073][ T4806] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.597930][ T4806] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 139.608564][ T4806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.103266][ T5483] loop4: detected capacity change from 0 to 1024 [ 140.274144][ T4806] usb 3-1: config 0 descriptor?? [ 140.544462][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 140.578860][ T4264] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 140.586477][ T4264] usb 2-1: can't read configurations, error -61 [ 140.593077][ T4264] usb usb2-port1: attempt power cycle [ 140.665598][ T5493] loop3: detected capacity change from 0 to 164 [ 140.872084][ T4806] usbhid 3-1:0.0: can't add hid device: -71 [ 140.899189][ T4806] usbhid: probe of 3-1:0.0 failed with error -71 [ 141.105342][ T4806] usb 3-1: USB disconnect, device number 16 [ 141.258261][ T4264] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 141.387964][ T5497] loop0: detected capacity change from 0 to 32768 [ 141.496363][ T5497] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 141.907302][ T4264] usb 2-1: device descriptor read/8, error -71 [ 141.944522][ T5505] tipc: Enabled bearer , priority 0 [ 141.952919][ T5505] device syzkaller0 entered promiscuous mode [ 142.040546][ T5508] tipc: Resetting bearer [ 142.051319][ T5504] tipc: Resetting bearer [ 142.137399][ T5504] tipc: Disabling bearer [ 143.882886][ T5538] loop2: detected capacity change from 0 to 164 [ 144.208219][ T4806] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 144.291806][ T4264] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 144.398189][ T4806] usb 4-1: Using ep0 maxpacket: 16 [ 144.405038][ T4806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.427050][ T4806] usb 4-1: config 0 has no interfaces? [ 144.548219][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 144.554604][ T4806] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 144.564289][ T4806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.572890][ T4806] usb 4-1: Product: syz [ 144.577298][ T4806] usb 4-1: Manufacturer: syz [ 144.582143][ T4264] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.593191][ T4806] usb 4-1: SerialNumber: syz [ 144.598825][ T4264] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.610060][ T4806] usb 4-1: config 0 descriptor?? [ 144.615118][ T4264] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.643073][ T4264] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.660178][ T4264] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 144.670766][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.692853][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 144.696297][ T4264] usb 2-1: config 0 descriptor?? [ 145.321081][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.429885][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.511574][ T4264] usbhid 2-1:0.0: can't add hid device: -71 [ 145.517587][ T4264] usbhid: probe of 2-1:0.0 failed with error -71 [ 145.526533][ T4264] usb 2-1: USB disconnect, device number 19 [ 145.568895][ T5544] FAULT_INJECTION: forcing a failure. [ 145.568895][ T5544] name failslab, interval 1, probability 0, space 0, times 0 [ 145.614459][ T5544] CPU: 1 PID: 5544 Comm: syz.3.348 Not tainted syzkaller #0 [ 145.621792][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.631836][ T5544] Call Trace: [ 145.635099][ T5544] [ 145.638038][ T5544] dump_stack_lvl+0x188/0x24e [ 145.642703][ T5544] ? show_regs_print_info+0x12/0x12 [ 145.647888][ T5544] ? load_image+0x410/0x410 [ 145.652400][ T5544] ? __might_sleep+0xd0/0xd0 [ 145.656970][ T5544] ? __lock_acquire+0x7ea0/0x7ea0 [ 145.662003][ T5544] should_fail_ex+0x390/0x4c0 [ 145.666683][ T5544] should_failslab+0x5/0x20 [ 145.671169][ T5544] slab_pre_alloc_hook+0x59/0x300 [ 145.676177][ T5544] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 145.682059][ T5544] ? n_hdlc_alloc_buf+0x83/0x210 [ 145.686981][ T5544] __kmem_cache_alloc_node+0x4f/0x270 [ 145.692339][ T5544] ? n_hdlc_alloc_buf+0x83/0x210 [ 145.697261][ T5544] __kmalloc+0xa3/0x240 [ 145.701400][ T5544] n_hdlc_alloc_buf+0x83/0x210 [ 145.706153][ T5544] n_hdlc_tty_open+0x256/0x450 [ 145.710905][ T5544] tty_ldisc_open+0x9d/0x100 [ 145.715485][ T5544] tty_set_ldisc+0x361/0x540 [ 145.720065][ T5544] tty_ioctl+0xa20/0xba0 [ 145.724296][ T5544] ? tty_get_icount+0xa0/0xa0 [ 145.728956][ T5544] __se_sys_ioctl+0xfa/0x170 [ 145.733538][ T5544] do_syscall_64+0x4c/0xa0 [ 145.737937][ T5544] ? clear_bhb_loop+0x60/0xb0 [ 145.742599][ T5544] ? clear_bhb_loop+0x60/0xb0 [ 145.747287][ T5544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.753173][ T5544] RIP: 0033:0x7faafbb9f559 [ 145.757578][ T5544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.777168][ T5544] RSP: 002b:00007faafca5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.785565][ T5544] RAX: ffffffffffffffda RBX: 00007faafbe26090 RCX: 00007faafbb9f559 [ 145.793526][ T5544] RDX: 0000200000000700 RSI: 0000000000005423 RDI: 0000000000000006 [ 145.801480][ T5544] RBP: 00007faafbc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 145.809437][ T5544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.817391][ T5544] R13: 00007faafbe26128 R14: 00007faafbe26090 R15: 00007ffc011dc898 [ 145.825358][ T5544] [ 145.875876][ T5550] loop2: detected capacity change from 0 to 64 [ 146.023973][ T5555] tipc: Enabled bearer , priority 0 [ 146.032508][ T5555] device syzkaller0 entered promiscuous mode [ 146.061584][ T5555] tipc: Resetting bearer [ 146.078072][ T5554] tipc: Resetting bearer [ 146.107760][ T5554] tipc: Disabling bearer [ 146.929102][ T129] usb 4-1: USB disconnect, device number 17 [ 147.292107][ T5583] loop1: detected capacity change from 0 to 164 [ 148.312769][ T5597] tipc: Enabled bearer , priority 0 [ 148.352850][ T5597] device syzkaller0 entered promiscuous mode [ 148.402069][ T5597] tipc: Resetting bearer [ 148.417273][ T5596] tipc: Resetting bearer [ 148.435295][ T5596] tipc: Disabling bearer [ 150.546812][ T4802] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 151.925047][ T5629] nvmet: adding nsid 1 to subsystem testsubsys [ 151.965606][ T5627] loop3: detected capacity change from 0 to 164 [ 152.053387][ T5629] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 152.065150][ T5629] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 152.073567][ T5629] CPU: 0 PID: 5629 Comm: syz.2.380 Not tainted syzkaller #0 [ 152.080864][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.090928][ T5629] RIP: 0010:strlen+0x25/0x60 [ 152.095537][ T5629] Code: da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 152.115154][ T5629] RSP: 0018:ffffc900043a79c0 EFLAGS: 00010246 [ 152.121232][ T5629] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 152.129216][ T5629] RDX: ffffc9000cc69000 RSI: 0000000000000e19 RDI: 0000000000000000 [ 152.137198][ T5629] RBP: ffffc900043a7af8 R08: ffffffff8f22dfef R09: 1ffffffff1e45bfd [ 152.145219][ T5629] R10: dffffc0000000000 R11: fffffbfff1e45bfe R12: 1ffff92000874f48 [ 152.153203][ T5629] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 152.161185][ T5629] FS: 00007fd25e9b16c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 152.170123][ T5629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.176715][ T5629] CR2: 000000110c2c3fdc CR3: 000000002031f000 CR4: 00000000003506f0 [ 152.184697][ T5629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.192674][ T5629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.200655][ T5629] Call Trace: [ 152.203942][ T5629] [ 152.206882][ T5629] getname_kernel+0x24/0x2f0 [ 152.211489][ T5629] filp_open+0x84/0x1e0 [ 152.215667][ T5629] ? file_open_name+0x1b0/0x1b0 [ 152.220532][ T5629] ? nvmet_ns_enable+0x49/0x8c0 [ 152.225400][ T5629] ? mutex_lock_nested+0x10/0x10 [ 152.230350][ T5629] nvmet_file_ns_enable+0x70/0x330 [ 152.235473][ T5629] ? rwsem_write_trylock+0x135/0x1c0 [ 152.240769][ T5629] nvmet_ns_enable+0xf0/0x8c0 [ 152.245462][ T5629] nvmet_ns_enable_store+0xd4/0x170 [ 152.250666][ T5629] ? nvmet_ns_enable_show+0x60/0x60 [ 152.255870][ T5629] ? down_read+0x1a8/0x2d0 [ 152.260296][ T5629] configfs_write_iter+0x30b/0x400 [ 152.265418][ T5629] ? nvmet_ns_enable_show+0x60/0x60 [ 152.270627][ T5629] vfs_write+0x482/0x9a0 [ 152.274885][ T5629] ? file_end_write+0x250/0x250 [ 152.279751][ T5629] ? __fget_files+0x3fc/0x460 [ 152.284446][ T5629] ? __fdget_pos+0x2ae/0x360 [ 152.289047][ T5629] ? ksys_write+0x70/0x260 [ 152.293480][ T5629] ksys_write+0x14d/0x260 [ 152.297824][ T5629] ? __ia32_sys_read+0x80/0x80 [ 152.302609][ T5629] ? lockdep_hardirqs_on+0x94/0x140 [ 152.307817][ T5629] do_syscall_64+0x4c/0xa0 [ 152.312238][ T5629] ? clear_bhb_loop+0x60/0xb0 [ 152.316920][ T5629] ? clear_bhb_loop+0x60/0xb0 [ 152.321608][ T5629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.327514][ T5629] RIP: 0033:0x7fd25db9f559 [ 152.331935][ T5629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.351548][ T5629] RSP: 002b:00007fd25e9b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.359973][ T5629] RAX: ffffffffffffffda RBX: 00007fd25de25fa0 RCX: 00007fd25db9f559 [ 152.367949][ T5629] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000004 [ 152.375956][ T5629] RBP: 00007fd25dc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 152.383937][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.391921][ T5629] R13: 00007fd25de26038 R14: 00007fd25de25fa0 R15: 00007fffd0c78618 [ 152.399916][ T5629] [ 152.402964][ T5629] Modules linked in: [ 152.828502][ T5642] tipc: Enabled bearer , priority 0 [ 152.889855][ T5629] ---[ end trace 0000000000000000 ]--- [ 152.895326][ T5640] device syzkaller0 entered promiscuous mode [ 152.896161][ T5629] RIP: 0010:strlen+0x25/0x60 [ 152.906149][ T5629] Code: da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 152.925904][ T5629] RSP: 0018:ffffc900043a79c0 EFLAGS: 00010246 [ 152.932101][ T5629] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 152.940272][ T5629] RDX: ffffc9000cc69000 RSI: 0000000000000e19 RDI: 0000000000000000 [ 152.948451][ T5629] RBP: ffffc900043a7af8 R08: ffffffff8f22dfef R09: 1ffffffff1e45bfd [ 152.952362][ T5636] tipc: Resetting bearer [ 152.956488][ T5629] R10: dffffc0000000000 R11: fffffbfff1e45bfe R12: 1ffff92000874f48 [ 152.970538][ T5629] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 152.979828][ T5629] FS: 00007fd25e9b16c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 152.990325][ T5629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.997191][ T5629] CR2: 000000110c3ce518 CR3: 000000002031f000 CR4: 00000000003506f0 [ 152.997500][ T5635] tipc: Resetting bearer [ 153.005574][ T5629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.021357][ T5629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.029718][ T5629] Kernel panic - not syncing: Fatal exception [ 153.036029][ T5629] Kernel Offset: disabled [ 153.040366][ T5629] Rebooting in 86400 seconds..