last executing test programs: 6.811643064s ago: executing program 1 (id=1629): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6.487379522s ago: executing program 1 (id=1632): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="c134b168c44b56b661cf624e8b62ea82ecd7110c514f52536b8ef8ffa47e89f19275746c558ecf489c454be52c596c7f0db2d01dcdf90bdb1ca81314b45161060fc372ee9bbb0f8f957dca87a0b2e5c2"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 5.511633116s ago: executing program 1 (id=1641): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) 4.328797775s ago: executing program 2 (id=1649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 3.823705247s ago: executing program 3 (id=1651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="c134b168c44b56b661cf624e8b62ea82ecd7110c514f52536b8ef8ffa47e89f19275746c558ecf489c454be52c596c7f0db2d01dcdf90bdb1ca81314b45161060fc372ee9bbb0f8f957dca87a0b2e5c2"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 3.68637358s ago: executing program 0 (id=1652): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 3.320385639s ago: executing program 2 (id=1653): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./mnt\x00', 0x0, 0xf6ff) 3.124752974s ago: executing program 2 (id=1654): syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.919973549s ago: executing program 3 (id=1655): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.743747083s ago: executing program 3 (id=1656): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, 0x0, 0x0) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) close(r0) r3 = accept(r2, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20008010}, 0xc0) 2.686147945s ago: executing program 0 (id=1657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.298304954s ago: executing program 1 (id=1658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x7, 0x7, 0xfa, 0xad, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.040779681s ago: executing program 0 (id=1659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1.801802416s ago: executing program 1 (id=1660): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f0000001780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @enter_looper], 0x0, 0x0, 0x0}) 1.719670738s ago: executing program 3 (id=1661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.64464677s ago: executing program 0 (id=1662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000001000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000002209000000000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="01000000000000000000004a51000000", @ANYRES64=r3, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=r0], 0x48}}, 0x0) 1.576877341s ago: executing program 2 (id=1663): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x1, 0x0, {0x4006, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, r2, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) write$binfmt_format(r3, &(0x7f0000000180)='0\x00', 0x2) 1.356009277s ago: executing program 3 (id=1664): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./mnt\x00', 0x0, 0xf6ff) 1.355591217s ago: executing program 0 (id=1665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="c134b168c44b56b661cf624e8b62ea82ecd7110c514f52536b8ef8ffa47e89f19275746c558ecf489c454be52c596c7f0db2d01dcdf90bdb1ca81314b45161060fc372ee9bbb0f8f957dca87a0b2e5c2"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 1.293984788s ago: executing program 4 (id=1666): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.119739683s ago: executing program 4 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x13, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001471e900b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.065116654s ago: executing program 3 (id=1668): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c0001000100000001090227000101008032"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) 1.064825904s ago: executing program 4 (id=1669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 869.991649ms ago: executing program 4 (id=1670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x7, 0x7, 0xfa, 0xad, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 792.245741ms ago: executing program 1 (id=1671): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, 0x0, 0x0) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) close(r0) r3 = accept(r2, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20008010}, 0xc0) 459.665509ms ago: executing program 2 (id=1672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 436.588349ms ago: executing program 4 (id=1673): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip_vti0\x00'}) dup2(0xffffffffffffffff, r0) 329.666352ms ago: executing program 0 (id=1674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080015"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='./fi', 0x4) close(r4) r5 = openat(0xffffffffffffffff, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='loop\n', 0x5) close(r6) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) 63.523029ms ago: executing program 4 (id=1675): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000001500)='pagemap\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x1}, {0xa, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x4a) 0s ago: executing program 2 (id=1676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000001000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000002209000000000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="01000000000000000000004a51000000", @ANYRES64=r3, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=r0], 0x48}}, 0x0) kernel console output (not intermixed with test programs): to HW filter on device batadv0 [ 99.664509][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.693395][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.701960][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.720964][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.752455][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.799524][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 99.801961][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.805690][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 99.845458][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.879736][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 99.885988][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 99.893419][ T4299] Bluetooth: hci1: command 0x040f tx timeout [ 99.916700][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.936606][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.953076][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.996063][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.011390][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.031385][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.050551][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.088406][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.104663][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.132538][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.142410][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.178417][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.193576][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.211452][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.250092][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.270826][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.307313][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.333155][ T4289] device veth0_vlan entered promiscuous mode [ 100.396951][ T4289] device veth1_vlan entered promiscuous mode [ 100.425586][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.440899][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.476618][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.551647][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.559252][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.568829][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.580356][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.597820][ T4290] device veth0_vlan entered promiscuous mode [ 100.644135][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.666241][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.676489][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.686381][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.715065][ T4290] device veth1_vlan entered promiscuous mode [ 100.737062][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.752641][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.771217][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.820608][ T4289] device veth0_macvtap entered promiscuous mode [ 100.828470][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.851240][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.880672][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.915071][ T4289] device veth1_macvtap entered promiscuous mode [ 100.946257][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.956867][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.967054][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.981369][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.992665][ T4284] device veth0_vlan entered promiscuous mode [ 101.029062][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.045591][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.056195][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.065871][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.095057][ T4284] device veth1_vlan entered promiscuous mode [ 101.108061][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.125658][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.137765][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.147339][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.160858][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.170680][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.180754][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.193142][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.206543][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.216394][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.226489][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.242508][ T4290] device veth0_macvtap entered promiscuous mode [ 101.256899][ T4288] device veth0_vlan entered promiscuous mode [ 101.265314][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.275290][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.286482][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.309053][ T4290] device veth1_macvtap entered promiscuous mode [ 101.328125][ T4288] device veth1_vlan entered promiscuous mode [ 101.338251][ T4289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.348934][ T4289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.358568][ T4289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.367837][ T4289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.397532][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.405993][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.417810][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.430784][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.440685][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.452999][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.493568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.502501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.513629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.534931][ T4284] device veth0_macvtap entered promiscuous mode [ 101.558963][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.573972][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.586772][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.602684][ T4284] device veth1_macvtap entered promiscuous mode [ 101.626946][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.637144][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.654455][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.664775][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.675912][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.686342][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.695925][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.706933][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.719024][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.741350][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.754738][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.766195][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.776688][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.790991][ T4288] device veth0_macvtap entered promiscuous mode [ 101.805420][ T4290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.826609][ T4290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.835823][ T4290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.844938][ T4290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.871613][ T4288] device veth1_macvtap entered promiscuous mode [ 101.879802][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 101.885898][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 101.903331][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.914758][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.927076][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.940744][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.953897][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.962440][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 101.968655][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 101.975094][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 102.017360][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.031241][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.042283][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.052484][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.064278][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.075833][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.086314][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.097979][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.110927][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.133756][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.145497][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.156354][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.169817][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.179908][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.191091][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.204558][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.221191][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.231759][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.242248][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.253341][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.264464][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.274427][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.293307][ T4297] device veth0_vlan entered promiscuous mode [ 102.306646][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.316086][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.326126][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.335628][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.357363][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.371127][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.386380][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.393138][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.399722][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.416704][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.427126][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.438359][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.456757][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.466450][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.481588][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.490511][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.500874][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.510107][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.546683][ T4297] device veth1_vlan entered promiscuous mode [ 102.565649][ T4288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.577366][ T4288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.587471][ T4288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.596729][ T4288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.672906][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.693420][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.740022][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.747930][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.782449][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.795329][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.804257][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.816977][ T4297] device veth0_macvtap entered promiscuous mode [ 102.855774][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.872024][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.906132][ T4297] device veth1_macvtap entered promiscuous mode [ 102.919820][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.936116][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.945344][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.961045][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.980714][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.995353][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.073411][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.088796][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.127741][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.140903][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.151319][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.162090][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.174753][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.188791][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.212705][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.227166][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.236217][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.273239][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.292038][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.306743][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.327383][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.366893][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.379497][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.393549][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.405760][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.416687][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.427119][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.438714][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.451302][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.469266][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.477676][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.515310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.535357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.545254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.564139][ T4297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.575261][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.589753][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.589777][ T4297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.615414][ T4297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.626609][ T4297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.678031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.779734][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.787750][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.859799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.996340][ T4378] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 104.049144][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.108633][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.234562][ T4384] sock: sock_timestamping_bind_phc: sock not bind to device [ 104.304478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.418183][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.445509][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.491803][ T4386] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 104.501554][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.695824][ T4390] device syzkaller0 entered promiscuous mode [ 106.138706][ T4411] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 106.246866][ T4437] device syzkaller0 entered promiscuous mode [ 107.644098][ T4486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.50'. [ 107.842163][ T4494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'. [ 107.885106][ T4494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'. [ 107.972405][ T4499] device veth0_to_bridge entered promiscuous mode [ 108.076535][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.427301][ T4514] netlink: 76 bytes leftover after parsing attributes in process `syz.1.62'. [ 109.321678][ T4590] netlink: 64 bytes leftover after parsing attributes in process `syz.4.70'. [ 109.427363][ T4609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 109.530171][ T4592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 109.811712][ T4609] device veth0_to_bond entered promiscuous mode [ 110.824834][ T4644] netlink: 76 bytes leftover after parsing attributes in process `syz.1.76'. [ 111.307996][ T4662] device syzkaller0 entered promiscuous mode [ 111.588792][ T4671] netlink: 64 bytes leftover after parsing attributes in process `syz.1.83'. [ 113.443231][ T4750] netlink: 76 bytes leftover after parsing attributes in process `syz.4.91'. [ 114.258020][ T4765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'. [ 114.295251][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.96'. [ 114.355277][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 114.449076][ T4768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.518530][ T4768] device batadv_slave_1 entered promiscuous mode [ 114.668931][ T4778] device syzkaller0 entered promiscuous mode [ 115.180132][ T4797] netlink: 76 bytes leftover after parsing attributes in process `syz.3.106'. [ 117.709706][ T4816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.112'. [ 118.156968][ T4836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.116'. [ 118.200601][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 118.242095][ T4836] device macvlan0 entered promiscuous mode [ 118.306406][ T4838] device syzkaller0 entered promiscuous mode [ 118.385224][ T4841] netlink: 76 bytes leftover after parsing attributes in process `syz.0.118'. [ 123.142366][ T4884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 123.454453][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 123.487715][ T4899] netlink: 76 bytes leftover after parsing attributes in process `syz.4.134'. [ 123.500727][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 123.682010][ T4901] device wlan1 entered promiscuous mode [ 123.765318][ T4907] netlink: 64 bytes leftover after parsing attributes in process `syz.2.137'. [ 123.817626][ T4905] device syzkaller0 entered promiscuous mode [ 127.745551][ T5005] netlink: 76 bytes leftover after parsing attributes in process `syz.4.148'. [ 128.068150][ T5015] netlink: 64 bytes leftover after parsing attributes in process `syz.2.150'. [ 128.135049][ T5016] device syzkaller0 entered promiscuous mode [ 129.260452][ T5098] netlink: 76 bytes leftover after parsing attributes in process `syz.0.161'. [ 132.394532][ T5119] netlink: 64 bytes leftover after parsing attributes in process `syz.0.166'. [ 132.896659][ T5153] netlink: 76 bytes leftover after parsing attributes in process `syz.4.174'. [ 133.167997][ T5161] device syzkaller0 entered promiscuous mode [ 134.344381][ T5212] netlink: 64 bytes leftover after parsing attributes in process `syz.3.181'. [ 134.655303][ T5208] device syzkaller1 entered promiscuous mode [ 135.125392][ T5225] device syzkaller0 entered promiscuous mode [ 135.492465][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 135.625095][ T5243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.864600][ T5243] device bond1 entered promiscuous mode [ 137.918747][ T5258] device syzkaller0 entered promiscuous mode [ 137.927572][ T5263] tipc: Enabling of bearer rejected, failed to enable media [ 138.444040][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.453719][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.806757][ T5285] device syzkaller0 entered promiscuous mode [ 138.888570][ T5295] netlink: 64 bytes leftover after parsing attributes in process `syz.3.197'. [ 141.453495][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'. [ 141.494259][ T5298] device syzkaller1 entered promiscuous mode [ 143.502185][ T5313] device syzkaller0 entered promiscuous mode [ 145.385929][ T5350] device syzkaller0 entered promiscuous mode [ 145.425550][ T5350] tipc: Enabling of bearer rejected, failed to enable media [ 145.863282][ T5367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.214'. [ 145.929743][ T5367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.077628][ T5367] device bond1 entered promiscuous mode [ 146.123917][ T5376] device syzkaller0 entered promiscuous mode [ 146.214036][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 148.231560][ T5379] device syzkaller0 entered promiscuous mode [ 148.403416][ T5398] tipc: Enabling of bearer rejected, failed to enable media [ 148.418991][ T5409] device syzkaller1 entered promiscuous mode [ 148.823352][ T5421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 148.885740][ T5421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.951937][ T5421] device bond2 entered promiscuous mode [ 149.249973][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 152.292567][ T5463] tipc: Enabling of bearer rejected, failed to enable media [ 152.370724][ T5460] device syzkaller0 entered promiscuous mode [ 152.430699][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 152.500198][ T5487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.516101][ T5489] device bond1 entered promiscuous mode [ 156.392723][ T5539] tipc: Enabling of bearer rejected, failed to enable media [ 156.461097][ T5541] device syzkaller0 entered promiscuous mode [ 159.031050][ T5563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 159.048191][ T5566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.265'. [ 159.167434][ T5593] device syzkaller0 entered promiscuous mode [ 159.369196][ T5609] Zero length message leads to an empty skb [ 160.961408][ T5650] bonding: mM% is being created... [ 162.125352][ T5625] device syzkaller0 entered promiscuous mode [ 162.146599][ T5650] bonding: mM% creation failed [ 162.387342][ T5653] device syzkaller1 entered promiscuous mode [ 164.216543][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.517531][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.536399][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.547766][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.561634][ T22] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.571197][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.596724][ T22] usb 2-1: config 0 descriptor?? [ 165.093758][ T22] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 165.147781][ T22] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 165.206846][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 165.260648][ T5660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 165.328888][ T5692] device syzkaller0 entered promiscuous mode [ 165.413909][ T7] usb 2-1: USB disconnect, device number 2 [ 165.421683][ T5690] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -19 [ 165.467776][ T5690] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -19 [ 165.566664][ T5694] fido_id[5694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 165.805777][ T5707] process 'syz.4.303' launched './file0' with NULL argv: empty string added [ 168.553171][ T5730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 168.576422][ T5730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.585766][ T5735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 168.607870][ T5740] device bond1 entered promiscuous mode [ 168.700148][ T5737] device syzkaller0 entered promiscuous mode [ 168.837700][ T5742] device syzkaller0 entered promiscuous mode [ 172.354183][ T5817] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 173.331360][ T5798] device syzkaller0 entered promiscuous mode [ 173.355364][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 173.422275][ T5821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.437141][ T5822] device bond1 entered promiscuous mode [ 174.084994][ T5844] jffs2: notice: (5844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.377150][ T5859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 176.546264][ T5879] device syzkaller0 entered promiscuous mode [ 177.257558][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 177.355934][ T5901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.547765][ T5906] device bond2 entered promiscuous mode [ 177.647698][ T5908] device syzkaller0 entered promiscuous mode [ 177.919619][ T5928] netlink: 76 bytes leftover after parsing attributes in process `syz.0.356'. [ 180.517229][ T5920] device syzkaller0 entered promiscuous mode [ 182.268125][ T5946] tipc: Enabling of bearer rejected, failed to enable media [ 182.520778][ T5967] netlink: 76 bytes leftover after parsing attributes in process `syz.0.369'. [ 183.007892][ T5978] device syzkaller0 entered promiscuous mode [ 183.531253][ T5992] device syzkaller0 entered promiscuous mode [ 183.901970][ T6002] netlink: 76 bytes leftover after parsing attributes in process `syz.1.383'. [ 189.107743][ T6044] device syzkaller0 entered promiscuous mode [ 189.481370][ T6060] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 189.607606][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 189.688949][ T6062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.697739][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 190.073885][ T6062] device bond2 entered promiscuous mode [ 190.205364][ T6076] device syzkaller0 entered promiscuous mode [ 193.203567][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 193.283347][ T6135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.300714][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.423'. [ 193.693075][ T6142] device bond3 entered promiscuous mode [ 193.819919][ T6155] device syzkaller0 entered promiscuous mode [ 196.602130][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 196.681613][ T6205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.691548][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.444'. [ 197.069419][ T4337] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 197.106454][ T6205] device bond3 entered promiscuous mode [ 197.261559][ T4337] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 197.279113][ T4337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.308478][ T4337] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.318276][ T4337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.356574][ T4337] usb 5-1: config 0 descriptor?? [ 197.377131][ T4337] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 197.738668][ T6238] device syzkaller0 entered promiscuous mode [ 197.755466][ T6236] device syzkaller0 entered promiscuous mode [ 199.845361][ T4335] usb 5-1: USB disconnect, device number 2 [ 199.883467][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.889947][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.091706][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 200.113546][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.463'. [ 200.374604][ T6290] device syzkaller0 entered promiscuous mode [ 201.172813][ T6316] device syzkaller0 entered promiscuous mode [ 201.197249][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 201.254266][ T6322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.335242][ T6332] syz.4.487 sent an empty control message without MSG_MORE. [ 201.809337][ T4349] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 202.024116][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.041739][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.059926][ T4349] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.080339][ T4349] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.101485][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.126295][ T4349] usb 5-1: config 0 descriptor?? [ 202.570238][ T4349] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 202.588867][ T4349] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 202.771499][ T4372] usb 5-1: USB disconnect, device number 3 [ 203.485087][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'. [ 203.506911][ T6329] device bond3 entered promiscuous mode [ 203.908183][ T6356] kvm: pic: single mode not supported [ 203.908587][ T6356] kvm: pic: single mode not supported [ 203.955712][ T6356] kvm: pic: single mode not supported [ 203.975916][ T6356] kvm: pic: single mode not supported [ 203.992190][ T6356] kvm: pic: single mode not supported [ 204.016418][ T6356] kvm: pic: single mode not supported [ 204.022738][ T6356] kvm: pic: level sensitive irq not supported [ 204.062348][ T6356] kvm: pic: single mode not supported [ 204.068824][ T6356] kvm: pic: level sensitive irq not supported [ 204.105502][ T6356] kvm: pic: single mode not supported [ 204.111832][ T6356] kvm: pic: level sensitive irq not supported [ 204.159446][ T6356] kvm: pic: single mode not supported [ 204.165722][ T6356] kvm: pic: level sensitive irq not supported [ 204.200403][ T6356] kvm: pic: single mode not supported [ 204.206708][ T6356] kvm: pic: level sensitive irq not supported [ 204.265200][ T6356] kvm: pic: level sensitive irq not supported [ 204.283863][ T6376] netlink: 64 bytes leftover after parsing attributes in process `syz.1.501'. [ 204.309811][ T6356] kvm: pic: level sensitive irq not supported [ 204.404586][ T6379] device syzkaller0 entered promiscuous mode [ 204.569395][ T4372] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 204.763387][ T4372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.782513][ T4372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.796867][ T4372] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.837746][ T4372] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.848073][ T4372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.867654][ T4372] usb 5-1: config 0 descriptor?? [ 205.295892][ T4372] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 205.359501][ T4372] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 205.496837][ T4372] usb 5-1: USB disconnect, device number 4 [ 205.606285][ T6401] fido_id[6401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 206.963883][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 206.981047][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.503'. [ 207.007443][ T6408] device syzkaller0 entered promiscuous mode [ 207.267021][ T6422] netlink: 76 bytes leftover after parsing attributes in process `syz.1.506'. [ 207.627126][ T6437] netlink: 64 bytes leftover after parsing attributes in process `syz.4.516'. [ 207.756199][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 207.816491][ T6442] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.828071][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.517'. [ 207.886646][ T6445] device syzkaller0 entered promiscuous mode [ 207.903544][ T6442] device bond4 entered promiscuous mode [ 207.949654][ T4372] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 208.141602][ T4372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.167013][ T4372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.204337][ T4372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.247408][ T4372] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.268133][ T4372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.296541][ T4372] usb 4-1: config 0 descriptor?? [ 208.736907][ T4372] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 208.768778][ T4372] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 208.930136][ T4337] usb 4-1: USB disconnect, device number 2 [ 209.093761][ T6475] fido_id[6475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 209.650714][ T6485] netlink: 76 bytes leftover after parsing attributes in process `syz.3.524'. [ 211.644782][ T6526] netlink: 76 bytes leftover after parsing attributes in process `syz.4.535'. [ 213.683827][ T6499] netlink: 64 bytes leftover after parsing attributes in process `syz.3.531'. [ 213.704293][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 213.723328][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 213.834737][ T6545] device syzkaller0 entered promiscuous mode [ 214.314010][ T6579] netlink: 76 bytes leftover after parsing attributes in process `syz.1.546'. [ 214.985096][ T4349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 215.175727][ T4349] usb 2-1: Using ep0 maxpacket: 32 [ 215.183668][ T4349] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.211552][ T4349] usb 2-1: string descriptor 0 read error: -22 [ 215.218035][ T4349] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 215.227690][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.263717][ T4349] dw2102: su3000_identify_state [ 215.268657][ T4349] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 215.278472][ T4349] dw2102: su3000_power_ctrl: 1, initialized 0 [ 215.285697][ T4349] dvb-usb: bulk message failed: -22 (2/0) [ 215.312912][ T4349] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.340171][ T4349] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 215.349094][ T4349] usb 2-1: media controller created [ 215.355609][ T4349] dvb-usb: bulk message failed: -22 (6/0) [ 215.362185][ T4349] dw2102: i2c transfer failed. [ 215.367389][ T4349] dvb-usb: bulk message failed: -22 (6/0) [ 215.373780][ T4349] dw2102: i2c transfer failed. [ 215.378632][ T4349] dvb-usb: bulk message failed: -22 (6/0) [ 215.385580][ T4349] dw2102: i2c transfer failed. [ 215.390790][ T4349] dvb-usb: bulk message failed: -22 (6/0) [ 215.396575][ T4349] dw2102: i2c transfer failed. [ 215.401961][ T4349] dvb-usb: bulk message failed: -22 (6/0) [ 215.407758][ T4349] dw2102: i2c transfer failed. [ 215.413042][ T4349] dvb-usb: bulk message failed: -22 (6/0) [ 215.421079][ T4349] dw2102: i2c transfer failed. [ 215.426680][ T4349] dvb-usb: MAC address: 02:02:02:02:02:02 [ 215.446445][ T4349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.500119][ T4349] dvb-usb: bulk message failed: -22 (3/0) [ 215.505962][ T4349] dw2102: command 0x0e transfer failed. [ 215.512159][ T4349] dvb-usb: bulk message failed: -22 (3/0) [ 215.518977][ T4349] dw2102: command 0x0e transfer failed. [ 215.839434][ T4349] dvb-usb: bulk message failed: -22 (3/0) [ 215.845253][ T4349] dw2102: command 0x0e transfer failed. [ 215.857138][ T4349] dvb-usb: bulk message failed: -22 (3/0) [ 215.863020][ T4349] dw2102: command 0x0e transfer failed. [ 215.868610][ T4349] dvb-usb: bulk message failed: -22 (1/0) [ 215.874641][ T4349] dw2102: command 0x51 transfer failed. [ 215.988244][ T4349] DVB: Unable to find symbol ds3000_attach() [ 215.995364][ T4349] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 216.179659][ T4349] rc_core: IR keymap rc-su3000 not found [ 216.185403][ T4349] Registered IR keymap rc-empty [ 216.197985][ T4349] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 216.211827][ T4349] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 216.234057][ T4349] dvb-usb: schedule remote query interval to 150 msecs. [ 216.242083][ T4349] dw2102: su3000_power_ctrl: 0, initialized 1 [ 216.248624][ T4349] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 216.275417][ T4349] usb 2-1: USB disconnect, device number 3 [ 216.401795][ T4349] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 217.257192][ T6590] netlink: 64 bytes leftover after parsing attributes in process `syz.2.551'. [ 217.276751][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 217.301012][ T6603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 217.325521][ T4294] Bluetooth: hci0: command 0x0406 tx timeout [ 217.330467][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 217.331803][ T4294] Bluetooth: hci2: command 0x0406 tx timeout [ 217.337797][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 217.346073][ T4294] Bluetooth: hci1: command 0x0406 tx timeout [ 217.747631][ T6618] netlink: 76 bytes leftover after parsing attributes in process `syz.3.558'. [ 218.228878][ T6632] device syzkaller0 entered promiscuous mode [ 218.251292][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'. [ 218.279373][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 218.323748][ T6637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.472129][ T7] usb 2-1: config 0 has no interfaces? [ 218.480635][ T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 218.499533][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.507617][ T7] usb 2-1: Product: syz [ 218.512151][ T7] usb 2-1: Manufacturer: syz [ 218.522326][ T7] usb 2-1: SerialNumber: syz [ 218.550213][ T7] usb 2-1: config 0 descriptor?? [ 218.764440][ T4349] usb 2-1: USB disconnect, device number 4 [ 219.257345][ T6662] netlink: 76 bytes leftover after parsing attributes in process `syz.2.573'. [ 221.009595][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.567'. [ 221.028599][ T6637] device bond4 entered promiscuous mode [ 221.266306][ T6687] netlink: 76 bytes leftover after parsing attributes in process `syz.2.584'. [ 221.468424][ T6685] device syzkaller0 entered promiscuous mode [ 221.789342][ T4349] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 221.995189][ T4349] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.012917][ T4349] usb 2-1: config 0 has no interfaces? [ 222.018766][ T4349] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 222.028012][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.045306][ T4349] usb 2-1: config 0 descriptor?? [ 222.264090][ T4287] Bluetooth: Wrong link type (-57) [ 222.266632][ T4349] usb 2-1: USB disconnect, device number 5 [ 223.906516][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'. [ 223.936636][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.595'. [ 224.080334][ T6735] netlink: 76 bytes leftover after parsing attributes in process `syz.0.597'. [ 224.433288][ T6744] device syzkaller0 entered promiscuous mode [ 224.795625][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 224.865322][ T6758] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.896358][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 224.916482][ T6758] device bond5 entered promiscuous mode [ 225.078816][ T6768] netlink: 76 bytes leftover after parsing attributes in process `syz.2.612'. [ 225.119389][ T4349] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 225.324418][ T4349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.364874][ T4349] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 225.389050][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.428056][ T4349] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 225.460078][ T4349] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 225.519412][ T4349] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 225.538742][ T4349] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 225.572398][ T6782] syz.2.619 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 225.579069][ T4349] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 225.632955][ T4349] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 225.664557][ T4349] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 225.689493][ T4349] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 225.717777][ T4349] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 225.738930][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'. [ 225.752435][ T4349] usb 1-1: USB disconnect, device number 2 [ 225.788163][ T4349] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 225.846506][ T4349] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 225.901137][ T6789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.922491][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.922577][ T4349] keyspan 1-1:1.0: device disconnected [ 225.935731][ T6792] bond2: (slave bond0): Enslaving as an active interface with an up link [ 225.945968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 226.258485][ T6804] netlink: 76 bytes leftover after parsing attributes in process `syz.4.626'. [ 226.510215][ T6808] 9pnet_virtio: no channels available for device syz [ 226.897105][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 226.963471][ T6822] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.001453][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.088852][ T6832] bond6: (slave bond0): Enslaving as an active interface with an up link [ 227.109581][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 227.179674][ T6839] netlink: 76 bytes leftover after parsing attributes in process `syz.4.640'. [ 227.362580][ T6843] bonding: m is being created... [ 227.869168][ T6863] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 228.144932][ T6866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.343480][ T6871] device syzkaller0 entered promiscuous mode [ 228.847411][ T6904] fuse: Bad value for 'fd' [ 230.626677][ T6915] __nla_validate_parse: 2 callbacks suppressed [ 230.626698][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'. [ 230.698309][ T6916] bond6: (slave bond0): Releasing backup interface [ 231.201461][ T6932] xt_hashlimit: size too large, truncated to 1048576 [ 231.332293][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 231.349031][ T6936] netlink: 56 bytes leftover after parsing attributes in process `syz.2.676'. [ 231.529320][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 231.537177][ T7] usb 5-1: config 0 has no interfaces? [ 231.563919][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 231.581362][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.600851][ T7] usb 5-1: config 0 descriptor?? [ 231.812252][ T7] usb 5-1: USB disconnect, device number 5 [ 231.988003][ T6946] device syzkaller0 entered promiscuous mode [ 232.234426][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'. [ 232.311950][ T6951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.436105][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.490510][ T6954] bond5: (slave bond0): Enslaving as an active interface with an up link [ 232.529124][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 232.720454][ T6967] netlink: 56 bytes leftover after parsing attributes in process `syz.2.687'. [ 232.837745][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 233.015640][ T6976] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 233.163834][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 233.308227][ T6983] device syzkaller0 entered promiscuous mode [ 233.645462][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 233.728898][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 233.773746][ T6991] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.837755][ T6994] device syzkaller0 entered promiscuous mode [ 233.944279][ T6991] bond5: (slave bond0): Releasing backup interface [ 233.987125][ T7002] netlink: 76 bytes leftover after parsing attributes in process `syz.2.701'. [ 234.003177][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.033759][ T6991] bond6: (slave bond0): Enslaving as an active interface with an up link [ 234.093978][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 235.623647][ T7035] netlink: 76 bytes leftover after parsing attributes in process `syz.1.712'. [ 237.180158][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 237.262152][ T7039] bond2: (slave bond0): Releasing backup interface [ 237.877776][ T7078] netlink: 76 bytes leftover after parsing attributes in process `syz.4.723'. [ 237.989624][ T7080] jffs2: notice: (7080) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 238.408342][ T7100] device syzkaller1 entered promiscuous mode [ 239.104879][ T7125] binder_alloc: 7124: binder_alloc_buf, no vma [ 239.335577][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 239.414750][ T7131] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.425885][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.438440][ T7138] bond3: (slave bond0): Enslaving as an active interface with an up link [ 239.453925][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 239.707634][ T7148] device syzkaller1 entered promiscuous mode [ 240.229401][ T127] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.251981][ T7164] binder_alloc: 7162: binder_alloc_buf, no vma [ 240.266352][ T7166] 9pnet_virtio: no channels available for device syz [ 240.441929][ T127] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 240.472874][ T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.509352][ T127] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 240.553393][ T127] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 240.593575][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.609921][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 240.642450][ T7157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.653014][ T127] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 240.666483][ T7179] jffs2: notice: (7179) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 240.694483][ T127] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 240.843819][ T7176] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.888538][ T7157] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 240.954770][ T4349] usb 5-1: USB disconnect, device number 6 [ 240.963083][ T7181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.002489][ T4349] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 241.007617][ T7181] bond7: (slave bond0): Enslaving as an active interface with an up link [ 241.051510][ T4349] cyberjack 5-1:1.0: device disconnected [ 241.103326][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 241.149157][ T7194] device syzkaller1 entered promiscuous mode [ 242.005198][ T7224] jffs2: notice: (7224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 242.327897][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'. [ 242.368613][ T7233] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.386215][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.395350][ T7235] bond5: (slave bond0): Enslaving as an active interface with an up link [ 242.404690][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 242.624686][ T7240] device syzkaller1 entered promiscuous mode [ 243.035106][ T7246] device syzkaller0 entered promiscuous mode [ 244.812534][ T7293] binder_alloc: 7292: binder_alloc_buf, no vma [ 244.874802][ T7294] binder_alloc: 7292: binder_alloc_buf, no vma [ 245.634601][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 245.687322][ T7271] bond5: (slave bond0): Releasing backup interface [ 245.703966][ T7280] netlink: 64 bytes leftover after parsing attributes in process `syz.0.793'. [ 245.728078][ T7281] device syzkaller1 entered promiscuous mode [ 246.408531][ T7319] binder_alloc: 7318: binder_alloc_buf, no vma [ 246.456388][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 246.478798][ T7326] binder_alloc: 7318: binder_alloc_buf, no vma [ 246.487122][ T7321] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.511153][ T7323] device syzkaller0 entered promiscuous mode [ 246.532222][ T7327] bond6: (slave bond0): Releasing backup interface [ 246.546183][ T7327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.567832][ T7327] bond7: (slave bond0): Enslaving as an active interface with an up link [ 246.636045][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 246.827761][ T7332] netlink: 64 bytes leftover after parsing attributes in process `syz.4.811'. [ 246.854771][ T7332] device syzkaller1 entered promiscuous mode [ 247.654764][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.820'. [ 247.717485][ T7357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.731937][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.752337][ T7361] bond2: (slave bond0): Enslaving as an active interface with an up link [ 247.765101][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 247.827378][ T7363] device syzkaller0 entered promiscuous mode [ 248.108139][ T7370] netlink: 64 bytes leftover after parsing attributes in process `syz.2.825'. [ 248.156583][ T7370] device syzkaller1 entered promiscuous mode [ 248.815579][ T7392] loop5: detected capacity change from 0 to 7 [ 248.864448][ T7392] Dev loop5: unable to read RDB block 7 [ 248.887407][ T7392] loop5: unable to read partition table [ 248.924882][ T7392] loop5: partition table beyond EOD, truncated [ 248.934358][ T7392] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 249.104469][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 249.188203][ T7396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.257462][ T7400] bond2: (slave bond0): Releasing backup interface [ 249.290910][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.309674][ T7400] bond3: (slave bond0): Enslaving as an active interface with an up link [ 249.333508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 249.472599][ T7404] device syzkaller0 entered promiscuous mode [ 249.727216][ T7419] netlink: 88 bytes leftover after parsing attributes in process `syz.3.840'. [ 249.800547][ T7419] device syzkaller1 entered promiscuous mode [ 253.043590][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 253.477751][ T7509] netlink: 88 bytes leftover after parsing attributes in process `syz.2.855'. [ 253.488423][ T7509] device syzkaller1 entered promiscuous mode [ 253.981688][ T7528] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 254.043317][ T7529] device syzkaller0 entered promiscuous mode [ 254.129306][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 254.204776][ T7532] device syzkaller0 entered promiscuous mode [ 254.329543][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 254.361647][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.398671][ T7] usb 5-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 254.446690][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.475688][ T7] usb 5-1: Product: У [ 254.481148][ T7] usb 5-1: SerialNumber: H [ 254.549085][ T7542] device syzkaller0 entered promiscuous mode [ 254.706236][ T7] gspca_main: ov519-2.14.0 probing 041e:4064 [ 254.726661][ T7] ov519 5-1:1.0: reg_w 5a failed -71 [ 254.914564][ T7522] vhci_hcd vhci_hcd.0: remove, state 4 [ 254.946740][ T7522] usb usb34: USB disconnect, device number 1 [ 255.070587][ T4617] vhci_hcd: stop threads [ 255.084557][ T4617] vhci_hcd: release socket [ 255.136109][ T4617] vhci_hcd: disconnect device [ 255.176567][ T4607] vhci_hcd: stop threads [ 255.196722][ T4607] vhci_hcd: release socket [ 255.218509][ T4607] vhci_hcd: disconnect device [ 255.250716][ T4607] vhci_hcd: stop threads [ 255.273238][ T4607] vhci_hcd: release socket [ 255.294187][ T4607] vhci_hcd: disconnect device [ 255.318219][ T4617] vhci_hcd: stop threads [ 255.343119][ T4617] vhci_hcd: release socket [ 255.365572][ T4617] vhci_hcd: disconnect device [ 255.387442][ T4617] vhci_hcd: stop threads [ 255.409814][ T4617] vhci_hcd: release socket [ 255.437912][ T4617] vhci_hcd: disconnect device [ 255.465699][ T4617] vhci_hcd: stop threads [ 255.470995][ T7562] null_blk: disk nullb1 created [ 255.507657][ T4617] vhci_hcd: release socket [ 255.536779][ T4617] vhci_hcd: disconnect device [ 255.574368][ T4617] vhci_hcd: stop threads [ 255.609491][ T4617] vhci_hcd: release socket [ 255.618025][ T7573] device syzkaller0 entered promiscuous mode [ 255.630922][ T4617] vhci_hcd: disconnect device [ 255.655721][ T4617] vhci_hcd: stop threads [ 255.681525][ T4617] vhci_hcd: release socket [ 255.686038][ T4617] vhci_hcd: disconnect device [ 255.711701][ T7522] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 255.756949][ T7522] vhci_hcd vhci_hcd.0: remove, state 4 [ 255.775464][ T7577] device syzkaller0 entered promiscuous mode [ 255.783310][ T7522] usb usb33: USB disconnect, device number 1 [ 255.868262][ T7569] block device autoloading is deprecated and will be removed. [ 255.908600][ T4602] vhci_hcd: stop threads [ 255.925811][ T4602] vhci_hcd: release socket [ 255.938679][ T4602] vhci_hcd: disconnect device [ 255.939463][ T4335] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 255.971092][ T4617] vhci_hcd: stop threads [ 255.988797][ T4617] vhci_hcd: release socket [ 256.005025][ T4617] vhci_hcd: disconnect device [ 256.030944][ T4617] vhci_hcd: stop threads [ 256.044670][ T4617] vhci_hcd: release socket [ 256.055335][ T4617] vhci_hcd: disconnect device [ 256.067126][ T4617] vhci_hcd: stop threads [ 256.083271][ T4617] vhci_hcd: release socket [ 256.096257][ T4617] vhci_hcd: disconnect device [ 256.142919][ T4617] vhci_hcd: stop threads [ 256.155631][ T4617] vhci_hcd: release socket [ 256.167044][ T4617] vhci_hcd: disconnect device [ 256.181420][ T4335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.184226][ T4617] vhci_hcd: stop threads [ 256.225665][ T4335] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 256.243628][ T4617] vhci_hcd: release socket [ 256.257559][ T4617] vhci_hcd: disconnect device [ 256.279252][ T4335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.308540][ T4617] vhci_hcd: stop threads [ 256.333560][ T4617] vhci_hcd: release socket [ 256.345135][ T4335] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 256.358198][ T4617] vhci_hcd: disconnect device [ 256.370675][ T4335] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 256.383324][ T4617] vhci_hcd: stop threads [ 256.399549][ T4335] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 256.403204][ T4617] vhci_hcd: release socket [ 256.434743][ T4335] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 256.438722][ T4617] vhci_hcd: disconnect device [ 256.459674][ T4335] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 256.476434][ T7522] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 256.493447][ T4335] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 256.529572][ T7597] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 256.547932][ T4335] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 256.569702][ T4335] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 256.599575][ T4335] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 256.669675][ T4335] usb 2-1: USB disconnect, device number 6 [ 256.700447][ T4335] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 256.743269][ T4335] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 256.793160][ T4335] keyspan 2-1:1.0: device disconnected [ 256.918360][ T7608] netlink: 88 bytes leftover after parsing attributes in process `syz.0.882'. [ 256.980737][ T7608] device syzkaller1 entered promiscuous mode [ 257.317313][ T7622] jffs2: notice: (7622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.804061][ T7635] device syzkaller0 entered promiscuous mode [ 258.330222][ T7654] netlink: 88 bytes leftover after parsing attributes in process `syz.0.894'. [ 258.361476][ T7654] device syzkaller1 entered promiscuous mode [ 258.456738][ T4349] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 258.659386][ T4349] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.709383][ T4349] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 258.728861][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.772824][ T4349] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 258.801948][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 258.829488][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 258.859996][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 258.867791][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 258.880817][ T4349] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 258.892450][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 258.901548][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 258.925490][ T4349] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 258.986986][ T4349] usb 2-1: USB disconnect, device number 7 [ 259.001342][ T4349] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 259.056036][ T4349] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 259.081893][ T4349] keyspan 2-1:1.0: device disconnected [ 260.016665][ T7698] binder_alloc: 7697: binder_alloc_buf, no vma [ 260.023020][ T7696] device syzkaller0 entered promiscuous mode [ 260.237147][ T7705] netlink: 88 bytes leftover after parsing attributes in process `syz.1.908'. [ 260.252610][ T7705] device syzkaller1 entered promiscuous mode [ 260.879448][ T4335] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 261.097837][ T4335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.110171][ T4335] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 261.126530][ T4335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.145714][ T7732] device syzkaller0 entered promiscuous mode [ 261.158547][ T4335] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 261.170734][ T7733] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.180476][ T4335] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 261.190337][ T4335] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 261.208991][ T4335] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 261.217759][ T4335] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 261.245665][ T4335] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 261.285904][ T4335] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 261.303870][ T4335] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 261.317835][ T4335] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 261.329565][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.335969][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.361835][ T4339] usb 1-1: USB disconnect, device number 3 [ 261.386235][ T4339] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 261.450918][ T4339] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 261.471169][ T4339] keyspan 1-1:1.0: device disconnected [ 262.166811][ T7757] binder_alloc: 7756: binder_alloc_buf, no vma [ 262.292418][ T7763] device syzkaller0 entered promiscuous mode [ 262.527354][ T4349] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 262.723182][ T7767] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.752160][ T4349] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 262.776979][ T4349] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.815468][ T4349] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 262.858940][ T4349] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 262.888813][ T4349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.926889][ T7759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.947049][ T4349] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 262.966982][ T7782] netlink: 76 bytes leftover after parsing attributes in process `syz.4.941'. [ 262.990231][ T4349] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 263.009200][ T7782] device syzkaller1 entered promiscuous mode [ 263.154709][ T4337] usb 4-1: USB disconnect, device number 3 [ 263.201516][ T4337] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 263.242781][ T4337] cyberjack 4-1:1.0: device disconnected [ 263.588102][ T7795] device syzkaller0 entered promiscuous mode [ 263.692485][ T7796] device syzkaller0 entered promiscuous mode [ 263.919538][ T7] ov519 5-1:1.0: Can't determine sensor slave IDs [ 263.928158][ T7] ov519 5-1:1.0: OV519 Config failed [ 263.951872][ T7] ov519: probe of 5-1:1.0 failed with error -22 [ 263.995230][ T7] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 264.114770][ T7] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 264.162170][ T7] usb 5-1: USB disconnect, device number 7 [ 264.658537][ T7830] device syzkaller0 entered promiscuous mode [ 264.796425][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 264.811842][ T7835] device syzkaller0 entered promiscuous mode [ 264.954921][ T7] usb 5-1: device descriptor read/64, error -71 [ 265.255360][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 265.429259][ T7] usb 5-1: device descriptor read/64, error -71 [ 265.549604][ T7] usb usb5-port1: attempt power cycle [ 265.999531][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 266.030427][ T7878] device syzkaller0 entered promiscuous mode [ 266.066804][ T7] usb 5-1: device descriptor read/8, error -71 [ 266.115194][ T7882] device syzkaller0 entered promiscuous mode [ 266.310101][ T4335] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 266.340200][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.400029][ T7] usb 5-1: device descriptor read/8, error -71 [ 266.410149][ T7892] binder: BINDER_SET_CONTEXT_MGR already set [ 266.424432][ T7892] binder: 7891:7892 ioctl 4018620d 200000004a80 returned -16 [ 266.520497][ T7] usb usb5-port1: unable to enumerate USB device [ 266.528700][ T4335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.539933][ T4335] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 266.540428][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.549527][ C0] hrtimer: interrupt took 374196 ns [ 266.571187][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.595423][ T4335] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 266.603311][ T4335] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 266.611687][ T4335] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 266.653630][ T4335] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 266.676725][ T4335] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 266.697344][ T4335] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 266.717096][ T4335] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 266.735839][ T4335] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 266.745689][ T4335] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 266.804309][ T4335] usb 3-1: USB disconnect, device number 2 [ 266.827278][ T4335] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 266.845698][ T4335] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 266.857575][ T4335] keyspan 3-1:1.0: device disconnected [ 267.502312][ T7921] device syzkaller0 entered promiscuous mode [ 267.978529][ T7934] binder: 7933:7934 unknown command 1074553619 [ 268.007563][ T7934] binder: 7933:7934 ioctl c0306201 200000000040 returned -22 [ 268.061987][ T7937] binder: 7933:7937 unknown command 1074291477 [ 268.068659][ T7937] binder: 7933:7937 ioctl c0306201 200000000640 returned -22 [ 268.260321][ T7945] binder: BINDER_SET_CONTEXT_MGR already set [ 268.304398][ T7943] device syzkaller0 entered promiscuous mode [ 268.305283][ T7945] binder: 7944:7945 ioctl 4018620d 200000004a80 returned -16 [ 268.614821][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 268.666597][ T7955] device syzkaller0 entered promiscuous mode [ 268.769301][ T7] usb 2-1: device descriptor read/64, error -71 [ 269.065221][ T7963] device syzkaller0 entered promiscuous mode [ 269.079549][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 269.249333][ T7] usb 2-1: device descriptor read/64, error -71 [ 269.389431][ T7] usb usb2-port1: attempt power cycle [ 269.815739][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 269.865257][ T7] usb 2-1: device descriptor read/8, error -71 [ 270.085574][ T7999] device syzkaller0 entered promiscuous mode [ 270.150961][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 270.200931][ T7] usb 2-1: device descriptor read/8, error -71 [ 270.326448][ T7] usb usb2-port1: unable to enumerate USB device [ 270.719410][ T8009] device syzkaller0 entered promiscuous mode [ 271.612569][ T8036] binder: BINDER_SET_CONTEXT_MGR already set [ 271.618652][ T8036] binder: 8035:8036 ioctl 4018620d 200000004a80 returned -16 [ 271.846796][ T8044] device syzkaller0 entered promiscuous mode [ 274.858576][ T8052] device syzkaller0 entered promiscuous mode [ 275.059906][ T8060] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.897547][ T8091] device syzkaller0 entered promiscuous mode [ 276.602899][ T8107] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.799401][ T8136] device syzkaller0 entered promiscuous mode [ 278.881732][ T8170] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1079'. [ 278.946126][ T8170] device syzkaller1 entered promiscuous mode [ 279.618175][ T8194] device syzkaller0 entered promiscuous mode [ 281.899583][ T4339] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 282.059416][ T4339] usb 1-1: device descriptor read/64, error -71 [ 282.329502][ T4339] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 282.500628][ T4339] usb 1-1: device descriptor read/64, error -71 [ 282.632655][ T4339] usb usb1-port1: attempt power cycle [ 282.904291][ T8224] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1095'. [ 283.060456][ T4339] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 283.116099][ T4339] usb 1-1: device descriptor read/8, error -71 [ 283.207766][ T8254] device syzkaller0 entered promiscuous mode [ 283.400073][ T4339] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 283.440068][ T4339] usb 1-1: device descriptor read/8, error -71 [ 283.571340][ T4339] usb usb1-port1: unable to enumerate USB device [ 283.841369][ T8277] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 283.868846][ T8277] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.894742][ T8277] bond6: (slave gretap1): making interface the new active one [ 283.905496][ T8277] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 283.914997][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 283.953487][ T8277] syz.3.1108 (8277) used greatest stack depth: 20432 bytes left [ 284.049866][ T8282] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1110'. [ 284.100132][ T8281] device syzkaller1 entered promiscuous mode [ 284.899533][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 284.969502][ T8303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.069542][ T8311] bond3: (slave bond0): Releasing backup interface [ 285.118326][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.162932][ T8311] bond4: (slave bond0): Enslaving as an active interface with an up link [ 285.197088][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 285.295034][ T8317] device syzkaller0 entered promiscuous mode [ 287.144738][ T4349] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 287.354519][ T4349] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 287.370301][ T4349] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.380762][ T4349] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 287.396805][ T4349] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 287.410214][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.437205][ T8367] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.449521][ T4349] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 287.465165][ T4349] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 287.666322][ T4349] usb 5-1: USB disconnect, device number 12 [ 287.687116][ T4349] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 287.699564][ T4349] cyberjack 5-1:1.0: device disconnected [ 288.540080][ T127] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 288.702890][ T127] usb 5-1: device descriptor read/64, error -71 [ 288.979341][ T127] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 289.012971][ T8373] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 289.088897][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 289.122206][ T8376] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.146706][ T8376] bond4: (slave bond0): Releasing backup interface [ 289.153325][ T127] usb 5-1: device descriptor read/64, error -71 [ 289.176526][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.189617][ T8376] bond5: (slave bond0): Enslaving as an active interface with an up link [ 289.202321][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 289.269535][ T127] usb usb5-port1: attempt power cycle [ 289.478705][ T8394] device syzkaller1 entered promiscuous mode [ 289.679257][ T127] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 289.710666][ T8400] jffs2: notice: (8400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 289.723388][ T127] usb 5-1: device descriptor read/8, error -71 [ 289.953442][ T8407] device syzkaller0 entered promiscuous mode [ 290.019400][ T127] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 290.080414][ T127] usb 5-1: device descriptor read/8, error -71 [ 290.199992][ T127] usb usb5-port1: unable to enumerate USB device [ 290.905126][ T8434] device syzkaller1 entered promiscuous mode [ 291.296703][ T8442] device syzkaller0 entered promiscuous mode [ 291.730392][ T8456] fuse: Bad value for 'fd' [ 292.038116][ T8466] device syzkaller1 entered promiscuous mode [ 292.760138][ T4337] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 292.762515][ T8495] device syzkaller0 entered promiscuous mode [ 292.959466][ T4337] usb 1-1: Using ep0 maxpacket: 16 [ 292.974765][ T4337] usb 1-1: unable to get BOS descriptor or descriptor too short [ 293.009470][ T4337] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 293.084161][ T4337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.119378][ T4337] usb 1-1: Product: У [ 293.123654][ T4337] usb 1-1: SerialNumber: H [ 293.234976][ T8505] fuse: Bad value for 'fd' [ 293.355792][ T4337] gspca_main: ov519-2.14.0 probing 041e:4064 [ 293.385677][ T4337] ov519 1-1:1.0: reg_w 5a failed -71 [ 293.695904][ T8515] device syzkaller1 entered promiscuous mode [ 294.380934][ T8544] fuse: Bad value for 'fd' [ 294.405914][ T8540] device syzkaller0 entered promiscuous mode [ 294.898190][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1187'. [ 294.943271][ T8555] device syzkaller0 entered promiscuous mode [ 295.232332][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 295.319490][ T8572] jffs2: notice: (8572) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 295.406521][ T8576] fuse: Invalid rootmode [ 295.419661][ T7] usb 2-1: device descriptor read/64, error -71 [ 295.588668][ T8580] device syzkaller0 entered promiscuous mode [ 295.705000][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 295.796064][ T8587] binder: BINDER_SET_CONTEXT_MGR already set [ 295.808384][ T8587] binder: 8586:8587 ioctl 4018620d 200000004a80 returned -16 [ 295.869491][ T7] usb 2-1: device descriptor read/64, error -71 [ 295.940880][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 296.009562][ T7] usb usb2-port1: attempt power cycle [ 296.097397][ T8596] device syzkaller0 entered promiscuous mode [ 296.445673][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 296.466571][ T8603] jffs2: notice: (8603) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 296.486048][ T7] usb 2-1: device descriptor read/8, error -71 [ 296.566969][ T8606] fuse: Invalid rootmode [ 296.716997][ T8611] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 296.785076][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 296.826522][ T8615] device syzkaller0 entered promiscuous mode [ 296.833790][ T7] usb 2-1: device descriptor read/8, error -71 [ 296.959622][ T7] usb usb2-port1: unable to enumerate USB device [ 296.998798][ T8617] device syzkaller1 entered promiscuous mode [ 297.486488][ T8633] fuse: Invalid rootmode [ 297.616731][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1219'. [ 297.674591][ T8635] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.712539][ T8637] bond3: (slave bond0): Releasing backup interface [ 297.733395][ T8637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.758006][ T8637] bond4: (slave bond0): Enslaving as an active interface with an up link [ 297.768249][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 298.322291][ T8654] device syzkaller1 entered promiscuous mode [ 298.721862][ T8662] fuse: Bad value for 'rootmode' [ 299.039476][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 299.192884][ T8670] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.229956][ T8673] bond7: (slave bond0): Releasing backup interface [ 299.254553][ T8673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.274891][ T8673] bond8: (slave bond0): Enslaving as an active interface with an up link [ 299.295476][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 299.305688][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 299.449302][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 299.459756][ T22] usb 3-1: device descriptor read/64, error -71 [ 299.516507][ T8684] device syzkaller1 entered promiscuous mode [ 299.659490][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 299.668647][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 299.717360][ T7] usb 2-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 299.727979][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.736260][ T7] usb 2-1: Product: У [ 299.740384][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 299.749737][ T7] usb 2-1: SerialNumber: H [ 299.899483][ T22] usb 3-1: device descriptor read/64, error -71 [ 299.995276][ T7] gspca_main: ov519-2.14.0 probing 041e:4064 [ 300.020752][ T22] usb usb3-port1: attempt power cycle [ 300.031436][ T7] ov519 2-1:1.0: reg_w 5a failed -71 [ 300.234628][ T8701] fuse: Bad value for 'rootmode' [ 300.429300][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 300.470558][ T22] usb 3-1: device descriptor read/8, error -71 [ 300.582685][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 300.627423][ T8713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.681054][ T8718] bond4: (slave bond0): Releasing backup interface [ 300.739392][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 300.765904][ T8718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.784841][ T8718] bond5: (slave bond0): Enslaving as an active interface with an up link [ 300.794821][ T22] usb 3-1: device descriptor read/8, error -71 [ 300.820819][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 300.919985][ T22] usb usb3-port1: unable to enumerate USB device [ 301.119903][ T8730] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1249'. [ 301.150947][ T8730] device syzkaller1 entered promiscuous mode [ 301.620518][ T8744] fuse: Bad value for 'rootmode' [ 302.084902][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1259'. [ 302.126223][ T8756] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.176515][ T8759] bond7: (slave bond0): Releasing backup interface [ 302.189416][ T4337] ov519 1-1:1.0: Can't determine sensor slave IDs [ 302.195929][ T4337] ov519 1-1:1.0: OV519 Config failed [ 302.232862][ T4337] ov519: probe of 1-1:1.0 failed with error -22 [ 302.335980][ T4337] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 302.356729][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.391610][ T8759] bond8: (slave bond0): Enslaving as an active interface with an up link [ 302.418164][ T4337] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 302.454242][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 302.516767][ T4337] usb 1-1: USB disconnect, device number 8 [ 302.590535][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.740370][ T8775] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1262'. [ 302.781980][ T8775] device syzkaller1 entered promiscuous mode [ 303.068036][ T8785] fuse: Unknown parameter 'use00000000000000000000' [ 304.124440][ T8822] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1277'. [ 304.145023][ T8822] device syzkaller1 entered promiscuous mode [ 304.390122][ T8829] fuse: Unknown parameter 'use00000000000000000000' [ 305.263448][ T8861] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1290'. [ 305.294136][ T8861] device syzkaller1 entered promiscuous mode [ 305.967518][ T8882] fuse: Unknown parameter 'use00000000000000000000' [ 306.218955][ T8887] MTD: Couldn't look up './dev/mtdblock0': -2 [ 306.463223][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.784686][ T8902] binder: 8901:8902 ioctl c0306201 0 returned -14 [ 307.304098][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.360905][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.947332][ T8813] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.956516][ T8813] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.965937][ T8813] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.975658][ T8813] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.266545][ T8919] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1302'. [ 308.297640][ T8920] device syzkaller1 entered promiscuous mode [ 308.515400][ T8927] fuse: Unknown parameter 'user_i00000000000000000000' [ 308.969864][ T7] ov519 2-1:1.0: Can't determine sensor slave IDs [ 308.976461][ T7] ov519 2-1:1.0: OV519 Config failed [ 308.986067][ T7] ov519: probe of 2-1:1.0 failed with error -22 [ 308.994407][ T7] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 309.025638][ T7] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 309.066019][ T7] usb 2-1: USB disconnect, device number 16 [ 309.078391][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.429577][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 309.629399][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 309.638653][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 309.671147][ T7] usb 2-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 309.693094][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.703515][ T7] usb 2-1: Product: У [ 309.707750][ T7] usb 2-1: SerialNumber: H [ 309.904728][ T8961] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1316'. [ 309.927048][ T8961] device syzkaller1 entered promiscuous mode [ 309.954074][ T7] gspca_main: ov519-2.14.0 probing 041e:4064 [ 309.973747][ T7] ov519 2-1:1.0: reg_w 5a failed -71 [ 309.979993][ T8963] fuse: Unknown parameter 'user_i00000000000000000000' [ 309.999315][ T127] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 310.077154][ T8965] binder: 8964:8965 ioctl 4018620d 0 returned -22 [ 310.201076][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.217033][ T127] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 310.236602][ T127] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.247746][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.266714][ T127] usb 4-1: config 0 descriptor?? [ 310.276307][ T127] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 310.724487][ T8980] binder: 8979:8980 ioctl 4018620d 0 returned -22 [ 311.371076][ T8993] fuse: Unknown parameter 'user_i00000000000000000000' [ 311.455925][ T8995] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1329'. [ 311.467183][ T8995] device syzkaller1 entered promiscuous mode [ 311.780585][ T9007] binder: 9006:9007 ioctl 4018620d 0 returned -22 [ 311.909549][ T4336] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 311.989343][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 312.097674][ T4336] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 312.116032][ T4336] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.127842][ T4336] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 312.138657][ T4336] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 312.148000][ T4336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.169548][ T9001] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 312.179446][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 312.186046][ T4336] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 312.198515][ T4336] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 312.212405][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 312.248926][ T22] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 312.274182][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.290422][ T22] usb 1-1: Product: У [ 312.295627][ T22] usb 1-1: SerialNumber: H [ 312.386905][ T4336] usb 5-1: USB disconnect, device number 17 [ 312.420225][ T4336] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 312.439847][ T4336] cyberjack 5-1:1.0: device disconnected [ 312.515564][ T22] gspca_main: ov519-2.14.0 probing 041e:4064 [ 312.541187][ T22] ov519 1-1:1.0: reg_w 5a failed -71 [ 312.684855][ T9020] nvmet: adding nsid 1 to subsystem testsubsys [ 312.696753][ T127] usb 4-1: USB disconnect, device number 4 [ 312.845828][ T4336] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:16622fd2-98a6-4f2a-9d95-163286cd5c27. [ 312.878095][ T9020] nvme nvme0: creating 2 I/O queues. [ 312.892563][ T9020] nvme nvme0: new ctrl: "testsubsys" [ 313.006579][ T9029] binder: 9028:9029 ioctl 4018620d 0 returned -22 [ 313.097304][ T9031] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1343'. [ 313.108618][ T9031] device syzkaller1 entered promiscuous mode [ 313.706407][ T9049] binder: 9048:9049 ioctl 4018620d 0 returned -22 [ 313.722061][ T9050] MTD: Couldn't look up './dev/mtdblock0': -2 [ 313.936970][ T9060] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1354'. [ 313.947731][ T9060] device syzkaller1 entered promiscuous mode [ 314.104686][ T4336] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 314.291753][ T4336] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 314.302093][ T4336] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 314.312116][ T4336] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 314.322075][ T4336] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 314.332978][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.345463][ T9055] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.355400][ T4336] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 314.364714][ T4335] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 314.375625][ T4336] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 314.559353][ T4335] usb 3-1: Using ep0 maxpacket: 16 [ 314.577571][ T127] usb 4-1: USB disconnect, device number 5 [ 314.585864][ T4335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 314.601815][ T127] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 314.627255][ T127] cyberjack 4-1:1.0: device disconnected [ 314.636919][ T4335] usb 3-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 314.655069][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.669296][ T4335] usb 3-1: Product: У [ 314.674548][ T4335] usb 3-1: SerialNumber: H [ 314.828477][ T9073] device syzkaller0 entered promiscuous mode [ 314.897228][ T4335] gspca_main: ov519-2.14.0 probing 041e:4064 [ 314.905380][ T4335] ov519 3-1:1.0: reg_w 5a failed -71 [ 315.284678][ T9087] MTD: Couldn't look up './dev/mtdblock0': -2 [ 315.312233][ T9089] binder: 9088:9089 ioctl 4018620d 0 returned -22 [ 315.594716][ T9097] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1366'. [ 315.623474][ T9097] device syzkaller1 entered promiscuous mode [ 315.914119][ T9106] device syzkaller0 entered promiscuous mode [ 316.629264][ T4338] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 316.646061][ T9122] fuse: Bad value for 'fd' [ 316.841274][ T4338] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 316.857031][ T4338] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 316.876902][ T4338] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 316.887066][ T4338] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 316.898111][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.917352][ T9116] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.930027][ T4338] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 316.967515][ T4338] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 317.029435][ T4349] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 317.149429][ T127] usb 5-1: USB disconnect, device number 18 [ 317.173966][ T127] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 317.223251][ T127] cyberjack 5-1:1.0: device disconnected [ 317.229377][ T4349] usb 4-1: Using ep0 maxpacket: 16 [ 317.236818][ T4349] usb 4-1: unable to get BOS descriptor or descriptor too short [ 317.292760][ T4349] usb 4-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 317.328742][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.359576][ T4349] usb 4-1: Product: У [ 317.363743][ T4349] usb 4-1: SerialNumber: H [ 317.403738][ T9135] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1380'. [ 317.421518][ T9135] device syzkaller1 entered promiscuous mode [ 317.621590][ T4349] gspca_main: ov519-2.14.0 probing 041e:4064 [ 317.633509][ T4349] ov519 4-1:1.0: reg_w 5a failed -71 [ 317.768103][ T9140] binder: BINDER_SET_CONTEXT_MGR already set [ 317.796976][ T9140] binder: 9139:9140 ioctl 4018620d 200000004a80 returned -16 [ 318.502206][ T9154] fuse: Bad value for 'fd' [ 318.711775][ T9158] device syzkaller0 entered promiscuous mode [ 318.849301][ T4372] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 319.040408][ T4372] usb 5-1: no configurations [ 319.045753][ T4372] usb 5-1: can't read configurations, error -22 [ 319.171827][ T7] ov519 2-1:1.0: Can't determine sensor slave IDs [ 319.178436][ T7] ov519 2-1:1.0: OV519 Config failed [ 319.190336][ T7] ov519: probe of 2-1:1.0 failed with error -22 [ 319.199105][ T7] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 319.209368][ T4372] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 319.286311][ T7] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 319.347658][ T7] usb 2-1: USB disconnect, device number 17 [ 319.391447][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.406547][ T4372] usb 5-1: no configurations [ 319.412708][ T4372] usb 5-1: can't read configurations, error -22 [ 319.431153][ T4372] usb usb5-port1: attempt power cycle [ 319.849460][ T4372] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 319.900649][ T4372] usb 5-1: no configurations [ 319.905340][ T4372] usb 5-1: can't read configurations, error -22 [ 319.967693][ T9142] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.975610][ T9142] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.072821][ T4372] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 320.095734][ T9103] Set syz1 is full, maxelem 65536 reached [ 320.134640][ T4372] usb 5-1: no configurations [ 320.146134][ T4372] usb 5-1: can't read configurations, error -22 [ 320.154996][ T4372] usb usb5-port1: unable to enumerate USB device [ 320.679656][ T9142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.737629][ T9142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.325193][ T9142] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.335265][ T9142] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.344712][ T9142] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.353783][ T9142] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.439569][ T22] ov519 1-1:1.0: Can't determine sensor slave IDs [ 321.448925][ T22] ov519 1-1:1.0: OV519 Config failed [ 321.460572][ T22] ov519: probe of 1-1:1.0 failed with error -22 [ 321.475788][ T22] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 321.507950][ T22] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 321.537796][ T22] usb 1-1: USB disconnect, device number 9 [ 321.652759][ T9178] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1394'. [ 321.676791][ T9179] device syzkaller1 entered promiscuous mode [ 321.790605][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.074486][ T9203] MTD: Couldn't look up './dev/mtdblock0': -2 [ 322.219647][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 322.432355][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 322.439978][ T9212] device syzkaller0 entered promiscuous mode [ 322.458039][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.492812][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 322.514228][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.530391][ T7] usb 1-1: Product: У [ 322.534590][ T7] usb 1-1: SerialNumber: H [ 322.739033][ T9222] device syzkaller0 entered promiscuous mode [ 322.761672][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.768156][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.785243][ T7] gspca_main: ov519-2.14.0 probing 041e:4064 [ 322.799826][ T7] ov519 1-1:1.0: reg_w 5a failed -71 [ 322.979363][ T4337] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 323.023471][ T9228] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1411'. [ 323.066023][ T9228] device syzkaller1 entered promiscuous mode [ 323.107903][ T9230] MTD: Couldn't look up './dev/mtdblock0': -2 [ 323.160566][ T4337] usb 2-1: no configurations [ 323.168806][ T4337] usb 2-1: can't read configurations, error -22 [ 323.277906][ T9234] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.319479][ T4337] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 323.516355][ T4337] usb 2-1: no configurations [ 323.521171][ T4337] usb 2-1: can't read configurations, error -22 [ 323.563992][ T4337] usb usb2-port1: attempt power cycle [ 323.669906][ T9243] device syzkaller0 entered promiscuous mode [ 323.999673][ T4337] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 324.060341][ T4337] usb 2-1: no configurations [ 324.067779][ T4337] usb 2-1: can't read configurations, error -22 [ 324.109554][ T4335] ov519 3-1:1.0: Can't determine sensor slave IDs [ 324.125564][ T4335] ov519 3-1:1.0: OV519 Config failed [ 324.289511][ T4337] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 324.344141][ T4337] usb 2-1: no configurations [ 324.348929][ T4337] usb 2-1: can't read configurations, error -22 [ 324.356709][ T4337] usb usb2-port1: unable to enumerate USB device [ 324.435981][ T4335] ov519: probe of 3-1:1.0 failed with error -22 [ 324.629605][ T4335] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 324.664727][ T4335] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 324.685560][ T4335] usb 3-1: USB disconnect, device number 7 [ 324.773371][ T9251] device syzkaller0 entered promiscuous mode [ 324.940262][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.100505][ T9258] MTD: Couldn't look up './dev/mtdblock0': -2 [ 325.312808][ T9261] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1425'. [ 325.370530][ T9261] device syzkaller1 entered promiscuous mode [ 325.971836][ T4336] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 326.016967][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.024676][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.191343][ T4336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.219362][ T4336] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 326.259728][ T4336] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 326.268877][ T4336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.536927][ T4372] usb 3-1: USB disconnect, device number 8 [ 326.829445][ T4349] ov519 4-1:1.0: Can't determine sensor slave IDs [ 326.835956][ T4349] ov519 4-1:1.0: OV519 Config failed [ 326.844595][ T4349] ov519: probe of 4-1:1.0 failed with error -22 [ 326.870051][ T4349] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 326.896529][ T4349] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 326.927005][ T4349] usb 4-1: USB disconnect, device number 6 [ 326.956764][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.067541][ T9249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.626751][ T9249] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.635808][ T9249] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.645102][ T9249] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.654700][ T9249] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.291856][ T9318] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1439'. [ 328.353238][ T9320] device syzkaller1 entered promiscuous mode [ 328.639611][ T14] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 328.722710][ T9335] device syzkaller0 entered promiscuous mode [ 328.809481][ T4349] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 328.852083][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.878396][ T14] usb 5-1: config 0 has no interfaces? [ 328.892130][ T14] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 328.902581][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.917413][ T14] usb 5-1: config 0 descriptor?? [ 328.934457][ T9337] binder: 9336:9337 ioctl 4018620d 0 returned -22 [ 328.968973][ T9339] device syzkaller0 entered promiscuous mode [ 329.010864][ T4349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.025491][ T4349] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 329.034951][ T4349] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 329.050550][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.135775][ T4349] usb 5-1: USB disconnect, device number 23 [ 329.283948][ T955] usb 3-1: USB disconnect, device number 9 [ 329.574827][ T9354] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1455'. [ 329.808542][ T9358] device-mapper: table: 248:0: zero-length target [ 329.823163][ T9358] device-mapper: ioctl: error adding target to table [ 329.975446][ T955] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 329.985615][ T9363] device syzkaller0 entered promiscuous mode [ 330.179342][ T955] usb 4-1: Using ep0 maxpacket: 16 [ 330.187073][ T955] usb 4-1: unable to get BOS descriptor or descriptor too short [ 330.224681][ T955] usb 4-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 330.246764][ T955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.264562][ T955] usb 4-1: Product: У [ 330.274528][ T955] usb 4-1: SerialNumber: H [ 330.456318][ T9380] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1466'. [ 330.500804][ T955] gspca_main: ov519-2.14.0 probing 041e:4064 [ 330.510643][ T955] ov519 4-1:1.0: reg_w 5a failed -71 [ 330.566527][ T9384] binder: 9383:9384 ioctl 4018620d 0 returned -22 [ 330.749329][ T4349] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 330.941170][ T4349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.956474][ T4349] usb 3-1: config 0 has no interfaces? [ 330.963714][ T4349] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 330.977016][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.987039][ T4349] usb 3-1: config 0 descriptor?? [ 331.210576][ T4336] usb 3-1: USB disconnect, device number 10 [ 331.582820][ T9401] device syzkaller0 entered promiscuous mode [ 331.788889][ T9405] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 332.049707][ T7] ov519 1-1:1.0: Can't determine sensor slave IDs [ 332.056315][ T7] ov519 1-1:1.0: OV519 Config failed [ 332.069024][ T7] ov519: probe of 1-1:1.0 failed with error -22 [ 332.073269][ T9421] binder: 9420:9421 ioctl 4018620d 0 returned -22 [ 332.108981][ T7] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 332.137829][ T7] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 332.169584][ T7] usb 1-1: USB disconnect, device number 10 [ 332.269866][ T9427] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1484'. [ 332.290449][ T9427] device syzkaller1 entered promiscuous mode [ 332.561778][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 332.691788][ T9436] device-mapper: table: 248:0: zero-length target [ 332.698576][ T9436] device-mapper: ioctl: error adding target to table [ 332.762775][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 332.786497][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.811831][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 332.831568][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.845524][ T7] usb 1-1: Product: У [ 332.850239][ T7] usb 1-1: SerialNumber: H [ 332.922132][ T9442] device syzkaller0 entered promiscuous mode [ 333.086165][ T7] gspca_main: ov519-2.14.0 probing 041e:4064 [ 333.106524][ T7] ov519 1-1:1.0: reg_w 5a failed -71 [ 333.346909][ T9453] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1495'. [ 333.391288][ T9452] device syzkaller1 entered promiscuous mode [ 333.745005][ T9468] device-mapper: table: 248:0: zero-length target [ 333.752380][ T9468] device-mapper: ioctl: error adding target to table [ 333.809443][ T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 333.883858][ T9473] binder: 9472:9473 ioctl c0306201 0 returned -14 [ 333.959689][ T9476] device syzkaller0 entered promiscuous mode [ 334.006170][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.022709][ T22] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 334.035214][ T22] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 334.045389][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.266194][ T4372] usb 3-1: USB disconnect, device number 11 [ 334.496152][ T9488] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1509'. [ 334.536763][ T9488] device syzkaller1 entered promiscuous mode [ 334.994641][ T9501] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 335.076805][ T9507] device syzkaller0 entered promiscuous mode [ 335.249560][ T4372] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 335.459339][ T4372] usb 5-1: Using ep0 maxpacket: 16 [ 335.467083][ T4372] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.487500][ T4372] usb 5-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 335.501497][ T4372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.515383][ T4372] usb 5-1: Product: У [ 335.523146][ T4372] usb 5-1: SerialNumber: H [ 335.554637][ T9522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1522'. [ 335.575703][ T9522] device syzkaller1 entered promiscuous mode [ 335.751665][ T4372] gspca_main: ov519-2.14.0 probing 041e:4064 [ 335.765978][ T4372] ov519 5-1:1.0: reg_w 5a failed -71 [ 336.646851][ T9545] device syzkaller0 entered promiscuous mode [ 337.589434][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 337.789633][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 337.801774][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.824762][ T22] usb 3-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 337.838974][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.847433][ T22] usb 3-1: Product: У [ 337.852174][ T22] usb 3-1: SerialNumber: H [ 337.915405][ T9574] No source specified [ 338.003445][ T9576] device syzkaller0 entered promiscuous mode [ 338.080274][ T22] gspca_main: ov519-2.14.0 probing 041e:4064 [ 338.097719][ T22] ov519 3-1:1.0: reg_w 5a failed -71 [ 338.237944][ T9580] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 338.458689][ T127] nvmet: creating nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:16622fd2-98a6-4f2a-9d95-163286cd5c27. [ 338.490801][ T9580] nvme nvme1: creating 2 I/O queues. [ 338.505782][ T9580] nvme nvme1: new ctrl: "testsubsys" [ 339.197694][ T9602] No source specified [ 339.349525][ T955] ov519 4-1:1.0: Can't determine sensor slave IDs [ 339.356265][ T955] ov519 4-1:1.0: OV519 Config failed [ 339.371903][ T955] ov519: probe of 4-1:1.0 failed with error -22 [ 339.395979][ T955] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 339.441708][ T955] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 339.451390][ T9608] device syzkaller0 entered promiscuous mode [ 339.468146][ T955] usb 4-1: USB disconnect, device number 7 [ 340.080149][ T9620] netlink: 'syz.4.1563': attribute type 13 has an invalid length. [ 340.314976][ T9629] No source specified [ 340.369627][ T955] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 340.579260][ T955] usb 4-1: Using ep0 maxpacket: 16 [ 340.587097][ T955] usb 4-1: unable to get BOS descriptor or descriptor too short [ 340.615874][ T955] usb 4-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 340.628331][ T955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.638006][ T955] usb 4-1: Product: У [ 340.646944][ T955] usb 4-1: SerialNumber: H [ 340.862791][ T955] gspca_main: ov519-2.14.0 probing 041e:4064 [ 340.870091][ T955] ov519 4-1:1.0: reg_w 5a failed -71 [ 341.684814][ T9658] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1576'. [ 341.700110][ T9658] device syzkaller1 entered promiscuous mode [ 341.909324][ T7] ov519 1-1:1.0: Can't determine sensor slave IDs [ 341.916263][ T7] ov519 1-1:1.0: OV519 Config failed [ 341.943583][ T7] ov519: probe of 1-1:1.0 failed with error -22 [ 341.970644][ T7] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 342.005605][ T7] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 342.040395][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.064452][ T7] usb 1-1: USB disconnect, device number 11 [ 342.429491][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 342.632369][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.663622][ T7] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 342.683495][ T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 342.707709][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.948707][ T7] usb 1-1: USB disconnect, device number 12 [ 343.036384][ T9692] binder: 9691:9692 ioctl 4018620d 0 returned -22 [ 343.119715][ T127] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 343.309305][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 343.320534][ T127] usb 2-1: unable to get BOS descriptor or descriptor too short [ 343.344057][ T127] usb 2-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 343.357860][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.367345][ T127] usb 2-1: Product: У [ 343.374984][ T127] usb 2-1: SerialNumber: H [ 343.593269][ T127] gspca_main: ov519-2.14.0 probing 041e:4064 [ 343.617689][ T127] ov519 2-1:1.0: reg_w 5a failed -71 [ 343.635993][ T9706] device syzkaller0 entered promiscuous mode [ 343.918903][ T9714] netlink: 'syz.3.1598': attribute type 1 has an invalid length. [ 343.952779][ T9714] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.137365][ T9723] misc userio: The device must be registered before sending interrupts [ 344.556079][ T9736] device syzkaller0 entered promiscuous mode [ 344.815629][ T4372] ov519 5-1:1.0: Can't determine sensor slave IDs [ 344.831530][ T4372] ov519 5-1:1.0: OV519 Config failed [ 344.864488][ T4372] ov519: probe of 5-1:1.0 failed with error -22 [ 344.931250][ T4372] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 345.003896][ T9742] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 345.023015][ T9743] binder: 9741:9743 ioctl 4018620d 0 returned -22 [ 345.033398][ T4372] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 345.069637][ T4372] usb 5-1: USB disconnect, device number 24 [ 345.215156][ T7] nvmet: creating nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:16622fd2-98a6-4f2a-9d95-163286cd5c27. [ 345.252818][ T9742] nvme nvme2: creating 2 I/O queues. [ 345.272955][ T9742] nvme nvme2: new ctrl: "testsubsys" [ 345.321362][ T9751] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 345.349624][ T9751] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.770322][ T9769] device syzkaller0 entered promiscuous mode [ 346.086993][ T9779] loop5: detected capacity change from 0 to 7 [ 346.104454][ T4274] loop5: p1 p3 p4 [ 346.108585][ T4274] loop5: partition table partially beyond EOD, truncated [ 346.146501][ T4274] loop5: p1 size 128 extends beyond EOD, truncated [ 346.194156][ T4274] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 346.259544][ T9779] loop5: p1 p3 p4 [ 346.277347][ T9779] loop5: partition table partially beyond EOD, truncated [ 346.314461][ T9779] loop5: p1 size 128 extends beyond EOD, truncated [ 346.360808][ T9779] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 346.468161][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 346.468409][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 346.488396][ T9782] device-mapper: table: 248:0: : unknown target type [ 346.505744][ T9782] device-mapper: ioctl: error adding target to table [ 346.505762][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 346.644819][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 346.654134][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 346.665237][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 346.887664][ T9804] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 347.090388][ T9814] binder: 9813:9814 ioctl 4018620d 0 returned -22 [ 347.151716][ T9815] device syzkaller0 entered promiscuous mode [ 347.171496][ T22] ov519 3-1:1.0: Can't determine sensor slave IDs [ 347.176187][ T7] nvmet: creating nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:16622fd2-98a6-4f2a-9d95-163286cd5c27. [ 347.187969][ T22] ov519 3-1:1.0: OV519 Config failed [ 347.215313][ T9804] nvme nvme3: creating 2 I/O queues. [ 347.226332][ T22] ov519: probe of 3-1:1.0 failed with error -22 [ 347.261069][ T9804] nvme nvme3: new ctrl: "testsubsys" [ 347.264018][ T22] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 347.322320][ T22] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 347.376590][ T22] usb 3-1: USB disconnect, device number 12 [ 347.737460][ T9831] 9pnet_virtio: no channels available for device syz [ 348.617931][ T9856] device syzkaller0 entered promiscuous mode [ 349.250638][ T9870] binder: 9869:9870 ioctl 4018620d 0 returned -22 [ 349.705616][ T9876] binder: 9875:9876 ioctl c0306201 0 returned -14 [ 349.709783][ T955] ov519 4-1:1.0: Can't determine sensor slave IDs [ 349.718767][ T955] ov519 4-1:1.0: OV519 Config failed [ 349.749523][ T955] ov519: probe of 4-1:1.0 failed with error -22 [ 349.785395][ T955] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 349.836367][ T955] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 349.871408][ T9138] udevd[9138]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.894903][ T955] usb 4-1: USB disconnect, device number 8 [ 349.924902][ T9138] udevd[9138]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.983439][ T6602] udevd[6602]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.067005][ T9138] udevd[9138]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.132196][ T4276] udevd[4276]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.714988][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 350.952583][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.987314][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 351.004906][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.032152][ T24] usb 3-1: Product: syz [ 351.047687][ T24] usb 3-1: Manufacturer: syz [ 351.065056][ T24] usb 3-1: SerialNumber: syz [ 351.111344][ T24] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 351.137822][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 87 [ 351.163494][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 351.198738][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 351.216341][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 351.233703][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 351.249396][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 351.274529][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 85 [ 351.294514][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 351.339383][ T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 351.349043][ T9901] device syzkaller0 entered promiscuous mode [ 351.354230][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 351.363850][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 351.386116][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 351.411169][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 351.437332][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 86 [ 351.483760][ T24] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 351.512168][ T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 351.553999][ T24] usb 3-1: USB disconnect, device number 13 [ 351.604160][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 351.674618][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 351.730847][ T24] keyspan 3-1:1.0: device disconnected [ 352.075741][ T9818] Set syz1 is full, maxelem 65536 reached [ 352.213119][ T9926] binder: 9925:9926 ioctl c0306201 0 returned -14 [ 352.756940][ T9944] device syzkaller0 entered promiscuous mode [ 352.799314][ T127] ov519 2-1:1.0: Can't determine sensor slave IDs [ 352.807265][ T127] ov519 2-1:1.0: OV519 Config failed [ 352.816616][ T127] ov519: probe of 2-1:1.0 failed with error -22 [ 352.826783][ T127] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 352.857858][ T127] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 352.865159][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 352.910530][ T127] usb 2-1: USB disconnect, device number 22 [ 353.092983][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.118487][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 353.171739][ T24] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 353.190168][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.201961][ T9958] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 353.237636][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.316057][ T9962] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 353.446922][ T9968] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 353.472049][ T955] usb 4-1: USB disconnect, device number 9 [ 353.575676][ T9968] netlink: 'syz.4.1675': attribute type 1 has an invalid length. [ 353.605589][ T9968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1675'. [ 353.615307][ T9968] ------------[ cut here ]------------ [ 353.622230][ T9968] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 353.642049][ T9968] WARNING: CPU: 0 PID: 9968 at net/sched/cls_u32.c:853 u32_change+0x1da2/0x2740 [ 353.651636][ T9968] Modules linked in: [ 353.656049][ T9968] CPU: 0 PID: 9968 Comm: syz.4.1675 Not tainted syzkaller #0 [ 353.664328][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.674917][ T9968] RIP: 0010:u32_change+0x1da2/0x2740 [ 353.680329][ T9968] Code: f9 eb 59 e8 50 25 1a f9 c6 05 be a7 a4 05 01 b9 10 00 00 00 48 c7 c7 00 f2 8e 8b 4c 89 fe 48 c7 c2 80 f2 8e 8b e8 8e ae e5 f8 <0f> 0b e9 ee ee ff ff e8 22 25 1a f9 eb 24 e8 1b 25 1a f9 c6 05 25 [ 353.700073][ T9968] RSP: 0018:ffffc9000d546e60 EFLAGS: 00010246 [ 353.706299][ T9968] RAX: 39d9721a54867f00 RBX: ffff88807627ea00 RCX: 0000000000080000 [ 353.714575][ T9968] RDX: ffffc9000df01000 RSI: 0000000000006966 RDI: 0000000000006967 [ 353.722847][ T9968] RBP: ffffc9000d546ff8 R08: ffffc9000d546ae7 R09: 1ffff92001aa8d5c [ 353.731492][ T9968] R10: dffffc0000000000 R11: fffff52001aa8d5d R12: ffff88802258c6e0 [ 353.739944][ T9968] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 353.747981][ T9968] FS: 00007fc74e25b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 353.757676][ T9968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.764973][ T9968] CR2: 000000110c37cbe3 CR3: 0000000027126000 CR4: 00000000003506f0 [ 353.773285][ T9968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.781433][ T9968] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.789606][ T9968] Call Trace: [ 353.792940][ T9968] [ 353.795940][ T9968] ? u32_get+0x370/0x370 [ 353.800331][ T9968] ? u32_get+0x370/0x370 [ 353.804642][ T9968] tc_new_tfilter+0x1165/0x1920 [ 353.809829][ T9968] ? tcf_proto_signal_destroying+0x240/0x240 [ 353.816062][ T9968] ? rcu_read_unlock+0x8c/0xa0 [ 353.821290][ T9968] ? tcf_proto_signal_destroying+0x240/0x240 [ 353.827426][ T9968] ? tcf_proto_signal_destroying+0x240/0x240 [ 353.833594][ T9968] rtnetlink_rcv_msg+0x8b2/0xfb0 [ 353.838707][ T9968] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 353.843974][ T9968] ? rtnetlink_bind+0x80/0x80 [ 353.848824][ T9968] ? mark_lock+0x94/0x320 [ 353.853429][ T9968] ? __lock_acquire+0x138a/0x7c40 [ 353.858534][ T9968] ? __lock_acquire+0x138a/0x7c40 [ 353.863870][ T9968] ? verify_lock_unused+0x140/0x140 [ 353.869205][ T9968] ? verify_lock_unused+0x140/0x140 [ 353.874486][ T9968] ? verify_lock_unused+0x140/0x140 [ 353.880123][ T9968] netlink_rcv_skb+0x1ef/0x440 [ 353.885331][ T9968] ? rtnetlink_bind+0x80/0x80 [ 353.890168][ T9968] ? netlink_ack+0x1160/0x1160 [ 353.895041][ T9968] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.900475][ T9968] netlink_unicast+0x7ad/0x920 [ 353.905435][ T9968] netlink_sendmsg+0x8ad/0xbd0 [ 353.910377][ T9968] ? netlink_getsockopt+0x550/0x550 [ 353.915659][ T9968] ? apparmor_socket_sendmsg+0x8a/0x330 [ 353.921561][ T9968] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 353.927090][ T9968] ? security_socket_sendmsg+0x7c/0xa0 [ 353.932814][ T9968] ? netlink_getsockopt+0x550/0x550 [ 353.938079][ T9968] ____sys_sendmsg+0x5ed/0x9a0 [ 353.943087][ T9968] ? __sys_sendmsg_sock+0x30/0x30 [ 353.948195][ T9968] ? __import_iovec+0x306/0x510 [ 353.953275][ T9968] ? import_iovec+0x6f/0xa0 [ 353.957858][ T9968] ___sys_sendmsg+0x2a2/0x360 [ 353.962655][ T9968] ? __sched_text_start+0x8/0x8 [ 353.967889][ T9968] ? __sys_sendmsg+0x2a0/0x2a0 [ 353.972808][ T9968] ? futex_setup_timer+0xc0/0xc0 [ 353.977968][ T9968] __sys_sendmmsg+0x2c3/0x510 [ 353.982802][ T9968] ? __ia32_sys_sendmsg+0x80/0x80 [ 353.988001][ T9968] ? __ia32_sys_get_robust_list+0x100/0x100 [ 353.994084][ T9968] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 354.000204][ T9968] ? lock_chain_count+0x20/0x20 [ 354.005315][ T9968] __x64_sys_sendmmsg+0x9c/0xb0 [ 354.010303][ T9968] do_syscall_64+0x4c/0xa0 [ 354.014844][ T9968] ? clear_bhb_loop+0x60/0xb0 [ 354.019707][ T9968] ? clear_bhb_loop+0x60/0xb0 [ 354.024488][ T9968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.030534][ T9968] RIP: 0033:0x7fc74d39e0d9 [ 354.035026][ T9968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.054748][ T9968] RSP: 002b:00007fc74e25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 354.063314][ T9968] RAX: ffffffffffffffda RBX: 00007fc74d625fa0 RCX: 00007fc74d39e0d9 [ 354.071409][ T9968] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 354.079490][ T9968] RBP: 00007fc74d435024 R08: 0000000000000000 R09: 0000000000000000 [ 354.087525][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.095711][ T9968] R13: 00007fc74d626038 R14: 00007fc74d625fa0 R15: 00007ffd82b52d38 [ 354.103818][ T9968] [ 354.106924][ T9968] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.114335][ T9968] CPU: 0 PID: 9968 Comm: syz.4.1675 Not tainted syzkaller #0 [ 354.121759][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.131975][ T9968] Call Trace: [ 354.135303][ T9968] [ 354.138281][ T9968] dump_stack_lvl+0x188/0x24e [ 354.143025][ T9968] ? memcpy+0x3c/0x60 [ 354.147185][ T9968] ? show_regs_print_info+0x12/0x12 [ 354.152450][ T9968] ? load_image+0x410/0x410 [ 354.157601][ T9968] panic+0x2d3/0x710 [ 354.161567][ T9968] ? bpf_jit_dump+0xd0/0xd0 [ 354.166151][ T9968] __warn+0x2f8/0x4f0 [ 354.170195][ T9968] ? u32_change+0x1da2/0x2740 [ 354.175197][ T9968] ? u32_change+0x1da2/0x2740 [ 354.180019][ T9968] report_bug+0x2ba/0x4f0 [ 354.184600][ T9968] ? u32_change+0x1da2/0x2740 [ 354.189350][ T9968] handle_bug+0x3a/0x70 [ 354.193579][ T9968] exc_invalid_op+0x16/0x40 [ 354.198197][ T9968] asm_exc_invalid_op+0x16/0x20 [ 354.203113][ T9968] RIP: 0010:u32_change+0x1da2/0x2740 [ 354.208464][ T9968] Code: f9 eb 59 e8 50 25 1a f9 c6 05 be a7 a4 05 01 b9 10 00 00 00 48 c7 c7 00 f2 8e 8b 4c 89 fe 48 c7 c2 80 f2 8e 8b e8 8e ae e5 f8 <0f> 0b e9 ee ee ff ff e8 22 25 1a f9 eb 24 e8 1b 25 1a f9 c6 05 25 [ 354.228213][ T9968] RSP: 0018:ffffc9000d546e60 EFLAGS: 00010246 [ 354.234340][ T9968] RAX: 39d9721a54867f00 RBX: ffff88807627ea00 RCX: 0000000000080000 [ 354.242372][ T9968] RDX: ffffc9000df01000 RSI: 0000000000006966 RDI: 0000000000006967 [ 354.250398][ T9968] RBP: ffffc9000d546ff8 R08: ffffc9000d546ae7 R09: 1ffff92001aa8d5c [ 354.258433][ T9968] R10: dffffc0000000000 R11: fffff52001aa8d5d R12: ffff88802258c6e0 [ 354.266461][ T9968] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 354.274696][ T9968] ? u32_get+0x370/0x370 [ 354.279566][ T9968] ? u32_get+0x370/0x370 [ 354.284078][ T9968] tc_new_tfilter+0x1165/0x1920 [ 354.289200][ T9968] ? tcf_proto_signal_destroying+0x240/0x240 [ 354.295258][ T9968] ? rcu_read_unlock+0x8c/0xa0 [ 354.300281][ T9968] ? tcf_proto_signal_destroying+0x240/0x240 [ 354.306381][ T9968] ? tcf_proto_signal_destroying+0x240/0x240 [ 354.312469][ T9968] rtnetlink_rcv_msg+0x8b2/0xfb0 [ 354.317573][ T9968] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 354.322784][ T9968] ? rtnetlink_bind+0x80/0x80 [ 354.327729][ T9968] ? mark_lock+0x94/0x320 [ 354.332133][ T9968] ? __lock_acquire+0x138a/0x7c40 [ 354.337240][ T9968] ? __lock_acquire+0x138a/0x7c40 [ 354.342339][ T9968] ? verify_lock_unused+0x140/0x140 [ 354.347613][ T9968] ? verify_lock_unused+0x140/0x140 [ 354.352907][ T9968] ? verify_lock_unused+0x140/0x140 [ 354.358215][ T9968] netlink_rcv_skb+0x1ef/0x440 [ 354.363058][ T9968] ? rtnetlink_bind+0x80/0x80 [ 354.367833][ T9968] ? netlink_ack+0x1160/0x1160 [ 354.372681][ T9968] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.377956][ T9968] netlink_unicast+0x7ad/0x920 [ 354.382811][ T9968] netlink_sendmsg+0x8ad/0xbd0 [ 354.387651][ T9968] ? netlink_getsockopt+0x550/0x550 [ 354.392911][ T9968] ? apparmor_socket_sendmsg+0x8a/0x330 [ 354.398537][ T9968] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 354.403883][ T9968] ? security_socket_sendmsg+0x7c/0xa0 [ 354.409431][ T9968] ? netlink_getsockopt+0x550/0x550 [ 354.414690][ T9968] ____sys_sendmsg+0x5ed/0x9a0 [ 354.419628][ T9968] ? __sys_sendmsg_sock+0x30/0x30 [ 354.424715][ T9968] ? __import_iovec+0x306/0x510 [ 354.429646][ T9968] ? import_iovec+0x6f/0xa0 [ 354.434224][ T9968] ___sys_sendmsg+0x2a2/0x360 [ 354.438967][ T9968] ? __sched_text_start+0x8/0x8 [ 354.443897][ T9968] ? __sys_sendmsg+0x2a0/0x2a0 [ 354.448776][ T9968] ? futex_setup_timer+0xc0/0xc0 [ 354.453820][ T9968] __sys_sendmmsg+0x2c3/0x510 [ 354.458618][ T9968] ? __ia32_sys_sendmsg+0x80/0x80 [ 354.463729][ T9968] ? __ia32_sys_get_robust_list+0x100/0x100 [ 354.469794][ T9968] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 354.475854][ T9968] ? lock_chain_count+0x20/0x20 [ 354.480775][ T9968] __x64_sys_sendmmsg+0x9c/0xb0 [ 354.485697][ T9968] do_syscall_64+0x4c/0xa0 [ 354.490176][ T9968] ? clear_bhb_loop+0x60/0xb0 [ 354.494998][ T9968] ? clear_bhb_loop+0x60/0xb0 [ 354.499767][ T9968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.505732][ T9968] RIP: 0033:0x7fc74d39e0d9 [ 354.510202][ T9968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.529864][ T9968] RSP: 002b:00007fc74e25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 354.538428][ T9968] RAX: ffffffffffffffda RBX: 00007fc74d625fa0 RCX: 00007fc74d39e0d9 [ 354.546483][ T9968] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 354.556089][ T9968] RBP: 00007fc74d435024 R08: 0000000000000000 R09: 0000000000000000 [ 354.564130][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.572158][ T9968] R13: 00007fc74d626038 R14: 00007fc74d625fa0 R15: 00007ffd82b52d38 [ 354.580198][ T9968] [ 354.583431][ T9968] Kernel Offset: disabled [ 354.587780][ T9968] Rebooting in 86400 seconds..