last executing test programs: 3m43.584086874s ago: executing program 0 (id=86): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040840) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvfrom$unix(r3, &(0x7f00000000c0)=""/98, 0x62, 0x20, 0x0, 0x0) 3m42.451084219s ago: executing program 0 (id=89): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fffffdf, 0x400000001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b", 0x12, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) sendmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f00000031c0)='U', 0x1}], 0x1, &(0x7f00000032c0)=ANY=[], 0x370}}], 0x2, 0x4044044) 3m42.104181671s ago: executing program 0 (id=91): r0 = creat(0x0, 0x108) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002d00)={r2, &(0x7f0000001cc0), 0x0}, 0x20) prctl$PR_SET_TIMERSLACK(0x1d, 0x3) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) exit(0xffff) listen(r0, 0x7) timer_delete(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1) read$midi(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 3m41.027809224s ago: executing program 0 (id=93): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x8}}]}, 0x1, 0x4c7, &(0x7f0000008740)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 3m39.629691878s ago: executing program 0 (id=100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fffffdf, 0x400000001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b", 0x12, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) sendmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f00000031c0)='U', 0x1}], 0x1, &(0x7f00000032c0)=ANY=[], 0x370}}], 0x2, 0x4044044) 3m37.236781663s ago: executing program 0 (id=109): unshare(0x20000400) r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100), 0x0) 3m36.768633708s ago: executing program 32 (id=109): unshare(0x20000400) r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100), 0x0) 9.773746954s ago: executing program 2 (id=609): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x26f6992404cdf2ab, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000010) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x6, r3, 0x80000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x12, 0x0, &(0x7f0000000240)="f8ad1dcc02cb29dcc8003200810066a286dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 6.539911135s ago: executing program 2 (id=616): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 6.338731051s ago: executing program 2 (id=619): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x310bb}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfbff}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008010) 6.100340449s ago: executing program 2 (id=622): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x108, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r6, 0x0, 0x7fffffff, 0x35}, 0x10) 5.944107924s ago: executing program 4 (id=623): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x0, 0x0, 0x2, 0x4000007}) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000002740)=ANY=[], 0x1, 0x616a, &(0x7f0000009780)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0x21a5, 0x2) 4.198361358s ago: executing program 2 (id=625): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x26f6992404cdf2ab, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000010) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x6, r3, 0x80000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x12, 0x0, &(0x7f0000000240)="f8ad1dcc02cb29dcc8003200810066a286dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 3.169118851s ago: executing program 3 (id=627): prctl$PR_SET_NAME(0xf, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f00000001c0)='R\x10rust\xe3c\x1f\'Zs\xed\xb4\xfe\xda\xb5\b\xae\xb1\x01\xad\b\x00\xe2\xba\xc5\xf8\xca\xf4\v\xb2%d\xc4\xb0}> \xcc*\xc4y\xd8\xd8\x87\xbcL\xaa\xdf\xf1*\">\x00\x88\x1f99\x86en!\xe5\x96 qg,)\xa2T\xdf\xff\xa3\x13i\xac\xba\n\xec>\"\xcbK\x00\x00\x00', 0xfffffffffffffffe) 2.932173068s ago: executing program 4 (id=629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x70, 0x1, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x29}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 2.8765496s ago: executing program 3 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4020045}, 0x0) 2.829127971s ago: executing program 1 (id=631): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x310bb}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfbff}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008010) 2.656923957s ago: executing program 4 (id=632): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$eJzs279rE2Ecx/HPXS7pNdpWrDqIQlGsLjb+mBxE3Tr1H+hU2qjFE6tVsEWwWdRB6OTm4iQIDo4idRMn/wAHwU0pdgg4OfTkzvvR5JLmB5ecpO/X0ueez/Pkee7oJd82iQDsWVc1IUOGCt7BMfvA+riR9ZYA9Ikb/Ny23JgZhgAG282RrHcAIBtb16SXp6Rf1UfzyhXCssCrAL5tStqYfKo1Bbk5JOn1F8mK6oetinTUCnLD1nB9ffFKOh3ON4q14UNbqkjFKN+3IxyWKq7/+GdOhuvv14hGNZb38oMaD9ZfiOYfaVnvWJ2XSAAADBxDU63yXQeYur7olM81zfN+fr5pXvDzCy3yi9HxUNSafTHz4IN7edvLp+bvOAu7bRNAA2YX9//X43E71+L+t5rc//V/JwDov+WV1VtzjuM+lvxG+V7QEzTC/wjEPbnEmFQa4XsObQwO36FMRN5j7OjJJaevTybPPb2zMOONjUnqzYX6jxtqEH2f/ndNoh6zF1e+pnHi558nS8/fvW9n8NsOlzCj37rZjXK1boxMqYfnNZG4C+Ycu73pxprrdrhow6eL+MMBdtrPRAD6rXT/9lJpeWX17GJO0o1yPnzBn/6x6Vf2pZr6Pp/dTgGkLX7Rb5RWEj1u7eHMp8+/q5fePOti5SuSPha7mAgAAAAAAAAAAAAAAOoc0uGstwAAAACgT5Lf/rk7mvZXl7I+RwAAAAAAAAAAAAAAAAAABs3fAAAA///PtQqI") truncate(&(0x7f0000000940)='./file1\x00', 0x8800000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4) getpid() mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000002dc0)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@subj_type={'subj_type', 0x3d, '\x00H\x94\xae=\x1al\xb2\xc4\xce\xa4\x06\x0e\xe3bm$\xbccg@@\xaf>\xad\xf7\x95\xf3\x90!\b\xf8Q\t3!<\xf3Er\xef\x9d\x99M\xde\xac%\xbb\xb4v>a^>\xdf-|\x9f[\xc4\xf3F\xea\x8d\x9f\'}\x98>\x9ds\'N\xbd\x1d\xae\xa7\x93\xa0\x93\x1b\x168\xce\xcb\x04B\x06\x9fG>\x82\b'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfshat={'smackfshat', 0x3d, '!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00'}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'batadv0\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '&(}^:*^'}}]}, 0x1, 0x4e8, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x4842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setrlimit(0xc56926f1999773a5, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0) 2.618883058s ago: executing program 3 (id=633): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) unshare(0x8040480) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) fcntl$setpipe(r4, 0x407, 0x60) capset(0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916180000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8}, 0x94) 2.54776666s ago: executing program 1 (id=634): syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a5, 0x1c0c0, 0xb, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.196278891s ago: executing program 1 (id=635): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, r2, r0}}, 0x18) 1.453066444s ago: executing program 3 (id=636): r0 = memfd_secret(0x0) getdents64(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x40081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a40100001000010028bd700000000000ff0200000000000000000000000000013f10e3ac14140d0000000000000000000000000000ecdf000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x44050) 1.430768075s ago: executing program 4 (id=637): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fffffdf, 0x400000001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="3f031c000302140006001e008900", 0xe, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) sendmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f00000031c0)='U', 0x1}], 0x1, &(0x7f00000032c0)=ANY=[], 0x370}}], 0x2, 0x4044044) 1.430032635s ago: executing program 2 (id=638): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7e78a6f1) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x20, 0xf, 0x65, "bb380bcb953a34857383297859433128e8fd41874fb68493082acd4b906cd3a3c463539f045ac2e7b2178b81bdd1c0ccce3e4830f594174f509836a1ff35d3c9891e80dd714fe294768b71e8d722993a63e797f5abb10df06de2b422316d6a3b6074976f28"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.348772987s ago: executing program 1 (id=639): socket$kcm(0x2, 0xa, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff2cbd7000ffdbd52500000000", @ANYRES32=0x0, @ANYBLOB="096d050025100400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) 400.115477ms ago: executing program 4 (id=640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x70, 0x1, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x29}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 375.310398ms ago: executing program 4 (id=641): syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x8, 0x83, 0x46, 0x40, 0x8086, 0xb5c, 0xbe72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x45, 0x0, 0x1, 0xe, 0x1, 0x0, 0x7, [], [{{0x9, 0x5, 0xa, 0x3, 0x20, 0x4, 0x3, 0x5}}]}}]}}]}}, 0x0) 251.323901ms ago: executing program 1 (id=642): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0xd, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @vbi={0x400043, 0xffff, 0x50424752, 0x3032344d, [0x7, 0x4], [0x1, 0x8], 0x1}}) 220.082693ms ago: executing program 3 (id=643): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x310bb}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfbff}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008010) 61.461678ms ago: executing program 3 (id=644): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) unshare(0x8040480) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 0s ago: executing program 1 (id=645): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) unshare(0x8040480) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) fcntl$setpipe(r4, 0x407, 0x60) capset(0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x8, 0x69, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, 0x0, 0x0, r6}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 76.590290][ T5764] cgroup: Unknown subsys name 'net' [ 76.730580][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.384445][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.789480][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.808780][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.808777][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.811079][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.822739][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.826981][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.831812][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.838942][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.859493][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.863639][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.869022][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.875632][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.882061][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.888760][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.901725][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.909018][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.911684][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.916726][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.925743][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.937970][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.939668][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.945591][ T5088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.955653][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.966711][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.386304][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 81.553696][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.587931][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.596287][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.605512][ T5778] bridge_slave_0: entered allmulticast mode [ 81.613611][ T5778] bridge_slave_0: entered promiscuous mode [ 81.652202][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.659371][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.666894][ T5778] bridge_slave_1: entered allmulticast mode [ 81.674417][ T5778] bridge_slave_1: entered promiscuous mode [ 81.682748][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.741356][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.775946][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.788942][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.854540][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.861751][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.870251][ T5775] bridge_slave_0: entered allmulticast mode [ 81.877837][ T5775] bridge_slave_0: entered promiscuous mode [ 81.912849][ T5778] team0: Port device team_slave_0 added [ 81.935882][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.945910][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.953463][ T5775] bridge_slave_1: entered allmulticast mode [ 81.960409][ T5775] bridge_slave_1: entered promiscuous mode [ 81.989607][ T5778] team0: Port device team_slave_1 added [ 82.038956][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.046229][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.053921][ T5776] bridge_slave_0: entered allmulticast mode [ 82.061211][ T5776] bridge_slave_0: entered promiscuous mode [ 82.083079][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.095855][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.115848][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.124179][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.131337][ T5776] bridge_slave_1: entered allmulticast mode [ 82.138524][ T5776] bridge_slave_1: entered promiscuous mode [ 82.176845][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.183908][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.209891][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.237873][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.247282][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.257490][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.264929][ T5777] bridge_slave_0: entered allmulticast mode [ 82.272115][ T5777] bridge_slave_0: entered promiscuous mode [ 82.290784][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.297974][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.324104][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.345091][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.355551][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.364376][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.371571][ T5777] bridge_slave_1: entered allmulticast mode [ 82.379408][ T5777] bridge_slave_1: entered promiscuous mode [ 82.399981][ T5775] team0: Port device team_slave_0 added [ 82.450838][ T5775] team0: Port device team_slave_1 added [ 82.481521][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.515870][ T5776] team0: Port device team_slave_0 added [ 82.527229][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.541650][ T5778] hsr_slave_0: entered promiscuous mode [ 82.548740][ T5778] hsr_slave_1: entered promiscuous mode [ 82.556713][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.571641][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.598136][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.611380][ T5776] team0: Port device team_slave_1 added [ 82.640649][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.647889][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.674639][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.710962][ T5777] team0: Port device team_slave_0 added [ 82.719928][ T5777] team0: Port device team_slave_1 added [ 82.744562][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.751545][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.777781][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.800561][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.807680][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.833731][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.878262][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.885560][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.912167][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.930780][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.938125][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.964743][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.015699][ T5775] hsr_slave_0: entered promiscuous mode [ 83.023733][ T5775] hsr_slave_1: entered promiscuous mode [ 83.029976][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.038303][ T5775] Cannot create hsr debugfs directory [ 83.044684][ T5783] Bluetooth: hci3: command tx timeout [ 83.052028][ T5783] Bluetooth: hci0: command tx timeout [ 83.052299][ T5793] Bluetooth: hci2: command tx timeout [ 83.057688][ T5783] Bluetooth: hci1: command tx timeout [ 83.117325][ T5776] hsr_slave_0: entered promiscuous mode [ 83.124606][ T5776] hsr_slave_1: entered promiscuous mode [ 83.131523][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.139216][ T5776] Cannot create hsr debugfs directory [ 83.208232][ T5777] hsr_slave_0: entered promiscuous mode [ 83.215494][ T5777] hsr_slave_1: entered promiscuous mode [ 83.221717][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.229520][ T5777] Cannot create hsr debugfs directory [ 83.610487][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.626176][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.652325][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.675205][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.733573][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.755622][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.769376][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.794680][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.848603][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.867805][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.879869][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.899174][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.976464][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.994408][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.007044][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.017209][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.163064][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.218532][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.243302][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.261826][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.282031][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.289323][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.327644][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.344657][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.354606][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.368397][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.375621][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.408091][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.415375][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.434411][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.441583][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.456067][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.471009][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.478216][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.504022][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.511227][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.521113][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.528323][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.558566][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.565914][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.124220][ T5783] Bluetooth: hci1: command tx timeout [ 85.129697][ T5783] Bluetooth: hci3: command tx timeout [ 85.130411][ T5793] Bluetooth: hci2: command tx timeout [ 85.140857][ T5088] Bluetooth: hci0: command tx timeout [ 85.169568][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.236999][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.310964][ T5775] veth0_vlan: entered promiscuous mode [ 85.347507][ T5775] veth1_vlan: entered promiscuous mode [ 85.369567][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.384872][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.434500][ T5777] veth0_vlan: entered promiscuous mode [ 85.454903][ T5775] veth0_macvtap: entered promiscuous mode [ 85.479631][ T5777] veth1_vlan: entered promiscuous mode [ 85.497660][ T5775] veth1_macvtap: entered promiscuous mode [ 85.557403][ T5778] veth0_vlan: entered promiscuous mode [ 85.568311][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.584864][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.605847][ T5776] veth0_vlan: entered promiscuous mode [ 85.614132][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.625305][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.634158][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.643619][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.667714][ T5778] veth1_vlan: entered promiscuous mode [ 85.690355][ T5777] veth0_macvtap: entered promiscuous mode [ 85.704868][ T5777] veth1_macvtap: entered promiscuous mode [ 85.724648][ T5776] veth1_vlan: entered promiscuous mode [ 85.789201][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.803680][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.817270][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.868262][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.880539][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.899018][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.956093][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.966453][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.978941][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.988020][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.001532][ T5778] veth0_macvtap: entered promiscuous mode [ 86.017240][ T5778] veth1_macvtap: entered promiscuous mode [ 86.048839][ T5776] veth0_macvtap: entered promiscuous mode [ 86.061313][ T5776] veth1_macvtap: entered promiscuous mode [ 86.072841][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.085812][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.096818][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.107859][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.119649][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.132534][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.143262][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.155827][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.164123][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.164162][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.167470][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.191556][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.226541][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.236100][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.246084][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.255375][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.282814][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.300065][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.310473][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.321596][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.333376][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.344624][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.356024][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.396162][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.415606][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.427107][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.440754][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.450749][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.461393][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.472952][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.503502][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.511388][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.532937][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.541703][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.553511][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.563302][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.585719][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.619508][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.723444][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.731339][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.857951][ T5842] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.875304][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.889765][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.983257][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.991144][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.089379][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.108393][ T5846] syz.0.1[5846]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.117623][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.147272][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.173023][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.203748][ T5793] Bluetooth: hci3: command tx timeout [ 87.209228][ T5793] Bluetooth: hci1: command tx timeout [ 87.215415][ T5088] Bluetooth: hci2: command tx timeout [ 87.220862][ T5088] Bluetooth: hci0: command tx timeout [ 87.304693][ T5846] loop0: detected capacity change from 0 to 2048 [ 87.314234][ T5846] ======================================================= [ 87.314234][ T5846] WARNING: The mand mount option has been deprecated and [ 87.314234][ T5846] and is ignored by this kernel. Remove the mand [ 87.314234][ T5846] option from the mount to silence this warning. [ 87.314234][ T5846] ======================================================= [ 87.386663][ T5846] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 87.399663][ T5846] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 2016: 0x1f != 0x1b [ 87.463607][ T5846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.670067][ T5851] loop1: detected capacity change from 0 to 64 [ 87.699545][ T5852] loop2: detected capacity change from 0 to 24 [ 87.790591][ T5851] syz.1.2: attempt to access beyond end of device [ 87.790591][ T5851] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 87.809449][ T5851] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 88.150806][ T5859] loop1: detected capacity change from 0 to 764 [ 88.185205][ T5856] loop2: detected capacity change from 0 to 8 [ 88.283610][ T5856] SQUASHFS error: zlib decompression failed, data probably corrupt [ 88.322739][ T5856] SQUASHFS error: Failed to read block 0x9b: -5 [ 88.339276][ T5856] SQUASHFS error: Unable to read metadata cache entry [99] [ 88.358055][ T5859] rock: directory entry would overflow storage [ 88.400830][ T5856] SQUASHFS error: Unable to read inode 0x127 [ 88.408736][ T5859] rock: sig=0x4f50, size=4, remaining=3 [ 88.442369][ T5821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.464498][ T5859] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 88.488024][ T5865] capability: warning: `syz.3.11' uses deprecated v2 capabilities in a way that may be insecure [ 88.653898][ T5821] usb 1-1: Using ep0 maxpacket: 8 [ 88.719025][ T5821] usb 1-1: config 5 has an invalid interface number: 114 but max is 0 [ 90.491336][ T5793] Bluetooth: hci1: command tx timeout [ 90.498153][ T5088] Bluetooth: hci0: command tx timeout [ 90.503727][ T5785] Bluetooth: hci2: command tx timeout [ 90.505499][ T5783] Bluetooth: hci3: command tx timeout [ 90.519292][ T5821] usb 1-1: config 5 has no interface number 0 [ 90.537719][ T5821] usb 1-1: config 5 interface 114 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 90.556012][ T5821] usb 1-1: config 5 interface 114 has no altsetting 0 [ 90.567699][ T5821] usb 1-1: New USB device found, idVendor=0411, idProduct=0005, bcdDevice=e0.d1 [ 90.588914][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.607322][ T5821] usb 1-1: Product: syz [ 90.611805][ T5821] usb 1-1: Manufacturer: syz [ 90.660136][ T5821] usb 1-1: SerialNumber: syz [ 90.773641][ T5839] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.111507][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.337795][ T5839] usb 2-1: config 0 has no interfaces? [ 91.386395][ T5839] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.410257][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.410827][ T5821] usb 1-1: can't set config #5, error -71 [ 91.458803][ T5821] usb 1-1: USB disconnect, device number 2 [ 91.511424][ T5839] usb 2-1: config 0 descriptor?? [ 91.761634][ T5839] usb 2-1: USB disconnect, device number 2 [ 92.116913][ T970] cfg80211: failed to load regulatory.db [ 96.421364][ T5914] loop0: detected capacity change from 0 to 32768 [ 96.510147][ T5914] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.549624][ T5924] loop8: detected capacity change from 0 to 8 [ 96.627673][ T5924] Dev loop8: unable to read RDB block 8 [ 96.642165][ T5924] loop8: unable to read partition table [ 96.684413][ T5914] XFS (loop0): Ending clean mount [ 96.691065][ T5924] loop8: partition table beyond EOD, truncated [ 96.707978][ T5924] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 96.739168][ T28] audit: type=1800 audit(1781559979.988:2): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 97.079917][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.701958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.281233][ T5934] loop2: detected capacity change from 0 to 4096 [ 99.317399][ T5934] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 99.372078][ T969] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.571934][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 99.583479][ T969] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.604337][ T969] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 99.634949][ T969] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.665375][ T969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 99.684901][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.702002][ T969] usb 2-1: Product: syz [ 99.711953][ T969] usb 2-1: Manufacturer: syz [ 99.721892][ T969] usb 2-1: SerialNumber: syz [ 99.736658][ T5932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.775953][ T969] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 99.784359][ T969] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 99.790657][ T969] usbtest: probe of 2-1:1.0 failed with error -22 [ 100.005818][ T5932] loop1: detected capacity change from 0 to 164 [ 100.090532][ T5936] loop0: detected capacity change from 0 to 32768 [ 100.200243][ T5936] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.214642][ T10] usb 2-1: USB disconnect, device number 3 [ 100.352455][ T5936] XFS (loop0): Ending clean mount [ 100.418019][ T5950] loop2: detected capacity change from 0 to 4096 [ 100.456882][ T5936] XFS (loop0): Quotacheck needed: Please wait. [ 100.756806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.970293][ T5936] XFS (loop0): Quotacheck: Done. [ 102.002726][ T5954] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.169425][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.301773][ T5950] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 102.310788][ T5950] NILFS (loop2): nilfs_sufile_do_free: segment 3 is already clean [ 102.892011][ T5839] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.121621][ T5839] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 103.143749][ T5839] usb 2-1: config 0 has no interface number 0 [ 103.400986][ T5839] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 103.414804][ T5839] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 103.429806][ T5839] usb 2-1: config 0 interface 255 has no altsetting 0 [ 103.441963][ T5839] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 103.452132][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.484334][ T5839] usb 2-1: config 0 descriptor?? [ 103.512437][ T5839] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 103.763536][ T970] usb 2-1: USB disconnect, device number 4 [ 104.311959][ T5976] Zero length message leads to an empty skb [ 106.691871][ C0] sched: RT throttling activated [ 107.457443][ T5839] kernel write not supported for file /17/clear_refs (pid: 5839 comm: kworker/0:5) [ 108.760330][ T5839] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.973425][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.036058][ T5839] usb 3-1: config 0 has no interfaces? [ 109.041639][ T5839] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 109.053869][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.334253][ T6007] nfs: Unknown parameter '/dev/autofs' [ 109.355069][ T5839] usb 3-1: config 0 descriptor?? [ 110.104765][ T969] usb 3-1: USB disconnect, device number 2 [ 110.353465][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'. [ 110.369831][ T6015] netlink: 'syz.0.49': attribute type 7 has an invalid length. [ 110.383222][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 111.967400][ T6021] loop0: detected capacity change from 0 to 4096 [ 113.288802][ T6021] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 114.540268][ T6040] syz.3.58 uses obsolete (PF_INET,SOCK_PACKET) [ 114.548808][ T6041] netlink: 332 bytes leftover after parsing attributes in process `syz.1.51'. [ 114.571346][ T6040] veth0: entered promiscuous mode [ 117.125370][ T6039] veth0: left promiscuous mode [ 118.121582][ T6054] loop3: detected capacity change from 0 to 131072 [ 118.363881][ T6054] F2FS-fs (loop3): Test dummy encryption mode enabled [ 118.392159][ T6054] F2FS-fs (loop3): invalid crc value [ 119.181982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.437421][ T6054] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.497315][ T6054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.686691][ T6054] fscrypt (loop3, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 123.792707][ T6100] JFS: discard option not supported on device [ 123.802027][ T6100] Mount JFS Failure: -22 [ 123.806337][ T6100] jfs_mount failed w/return code = -22 [ 129.805021][ T6136] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 129.813240][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 133.347637][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.354767][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.668134][ T969] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.791633][ T6187] loop0: detected capacity change from 0 to 512 [ 133.950498][ T6187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.977845][ T6187] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.031916][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 134.040009][ T969] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 134.058263][ T969] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.773301][ T969] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.792979][ T969] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.807594][ T969] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.816938][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.062560][ T969] usb 4-1: GET_CAPABILITIES returned 0 [ 135.068180][ T969] usbtmc 4-1:16.0: can't read capabilities [ 135.100322][ T5777] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 135.177567][ T5777] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 135.239908][ T5777] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 16 [ 135.264763][ T5777] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 16 [ 135.399855][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 135.589448][ T5821] usb 4-1: USB disconnect, device number 2 [ 136.196672][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 137.113788][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.164369][ T995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.625314][ T995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.657804][ T6233] veth0: entered promiscuous mode [ 137.756734][ T995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.795676][ T6232] veth0: left promiscuous mode [ 137.865230][ T995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.072239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 141.683444][ T5793] Bluetooth: hci1: command tx timeout [ 142.220020][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.230107][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.238174][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.255730][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.275528][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.285667][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.541958][ T5821] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.411584][ T5783] Bluetooth: hci0: command tx timeout [ 144.451902][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 144.533244][ T5821] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 144.552247][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.609818][ T5821] pvrusb2: Hardware description: Terratec Grabster AV400 [ 144.637958][ T5821] pvrusb2: ********** [ 144.658067][ T5821] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 144.823054][ T5821] pvrusb2: Important functionality might not be entirely working. [ 144.831413][ T5821] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 144.843645][ T5821] pvrusb2: ********** [ 144.969810][ T2324] pvrusb2: Invalid write control endpoint [ 146.050798][ T2324] pvrusb2: Invalid write control endpoint [ 146.057005][ T2324] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 146.066621][ T2324] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 146.074234][ T2324] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 146.084356][ T2324] pvrusb2: Device being rendered inoperable [ 146.092833][ T6313] pvrusb2: Attempted to execute control transfer when device not ok [ 146.306675][ T2324] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 146.377466][ T2324] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 146.428870][ T2324] pvrusb2: Attached sub-driver cx25840 [ 146.434715][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 146.449255][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 146.473859][ T6271] chnl_net:caif_netlink_parms(): no params data found [ 146.483227][ T5783] Bluetooth: hci0: command tx timeout [ 147.594351][ T995] hsr_slave_0: left promiscuous mode [ 147.669833][ T786] usb 2-1: USB disconnect, device number 5 [ 147.725596][ T995] hsr_slave_1: left promiscuous mode [ 147.798247][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.835032][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.871569][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.886817][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.897137][ T6326] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.909557][ T995] bridge_slave_1: left allmulticast mode [ 147.921527][ T995] bridge_slave_1: left promiscuous mode [ 147.943682][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.967878][ T995] bridge_slave_0: left allmulticast mode [ 147.981929][ T995] bridge_slave_0: left promiscuous mode [ 147.988790][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.561912][ T5793] Bluetooth: hci0: command tx timeout [ 150.311933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 150.642005][ T5793] Bluetooth: hci0: command tx timeout [ 150.825285][ T995] veth1_macvtap: left promiscuous mode [ 150.831763][ T995] veth0_macvtap: left promiscuous mode [ 150.848160][ T995] veth1_vlan: left promiscuous mode [ 151.622485][ T995] veth0_vlan: left promiscuous mode [ 152.362151][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.652280][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 152.672800][ T786] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 152.680969][ T786] usb 3-1: config 0 has no interface number 0 [ 153.251940][ T786] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 153.313424][ T786] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 153.341905][ T786] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.379233][ T786] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.461920][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.535998][ T786] usb 3-1: config 0 descriptor?? [ 153.567859][ T786] ldusb 3-1:0.55: Interrupt in endpoint not found [ 153.896248][ T5820] usb 3-1: USB disconnect, device number 3 [ 154.607732][ T995] team0 (unregistering): Port device team_slave_1 removed [ 154.789137][ T995] team0 (unregistering): Port device team_slave_0 removed [ 155.031232][ T6357] loop2: detected capacity change from 0 to 4096 [ 155.199178][ T6358] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.344435][ T6356] syz.2.140: attempt to access beyond end of device [ 155.344435][ T6356] loop2: rw=0, sector=6054, nr_sectors = 2 limit=4096 [ 155.395072][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.439587][ T6356] NILFS (loop2): I/O error reading data block for GC (ino=15, vblocknr=3) [ 155.485498][ T6356] NILFS (loop2): error -5 preparing GC: cannot read source blocks [ 155.554010][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.186062][ T995] bond0 (unregistering): Released all slaves [ 158.967720][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.016756][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.040749][ T6271] bridge_slave_0: entered allmulticast mode [ 159.074589][ T6271] bridge_slave_0: entered promiscuous mode [ 159.124787][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.158109][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.176197][ T6271] bridge_slave_1: entered allmulticast mode [ 159.195605][ T6271] bridge_slave_1: entered promiscuous mode [ 159.399256][ T6382] loop2: detected capacity change from 0 to 2048 [ 159.476397][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.505309][ T6383] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.533151][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.689362][ T6271] team0: Port device team_slave_0 added [ 159.744316][ T6271] team0: Port device team_slave_1 added [ 160.726948][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.749921][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.812604][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.827503][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.834634][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.861664][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.000340][ T6271] hsr_slave_0: entered promiscuous mode [ 161.017487][ T6271] hsr_slave_1: entered promiscuous mode [ 161.027312][ T6271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.037615][ T6271] Cannot create hsr debugfs directory [ 162.409113][ T6415] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 164.710242][ T6271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.737550][ T6271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.820738][ T6271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.856126][ T6271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.817357][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.943358][ T6271] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.050678][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.057932][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.113988][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.121202][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.377264][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.812688][ T6271] veth0_vlan: entered promiscuous mode [ 171.884925][ T6271] veth1_vlan: entered promiscuous mode [ 171.980132][ T6271] veth0_macvtap: entered promiscuous mode [ 172.012087][ T6271] veth1_macvtap: entered promiscuous mode [ 172.070359][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.109985][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.140617][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.167989][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.205156][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.234561][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.270123][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.309473][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.350949][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.391650][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.425732][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.460654][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.494144][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.535628][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.559845][ T6271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.607786][ T6271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.638264][ T6271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.675825][ T6271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.911179][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.962029][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.082099][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.104461][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.425020][ T6524] program syz.2.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.624309][ T6549] loop4: detected capacity change from 0 to 4096 [ 176.710106][ T6559] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.773961][ T6549] syz.4.183: attempt to access beyond end of device [ 176.773961][ T6549] loop4: rw=0, sector=6054, nr_sectors = 2 limit=4096 [ 176.882363][ T6549] NILFS (loop4): I/O error reading data block for GC (ino=15, vblocknr=3) [ 176.890944][ T6549] NILFS (loop4): error -5 preparing GC: cannot read source blocks [ 177.580296][ T6575] program syz.1.189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.366655][ T6613] loop2: detected capacity change from 0 to 128 [ 180.859288][ T6623] netlink: 'syz.2.196': attribute type 5 has an invalid length. [ 180.920178][ T6609] loop1: detected capacity change from 0 to 4096 [ 180.951620][ T6624] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.007662][ T6609] syz.1.197: attempt to access beyond end of device [ 181.007662][ T6609] loop1: rw=0, sector=6054, nr_sectors = 2 limit=4096 [ 181.044515][ T6609] NILFS (loop1): I/O error reading data block for GC (ino=15, vblocknr=3) [ 181.057462][ T6609] NILFS (loop1): error -5 preparing GC: cannot read source blocks [ 181.249077][ T6627] program syz.3.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.131341][ T6653] loop1: detected capacity change from 0 to 2048 [ 184.204964][ T6653] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.378740][ T6669] program syz.2.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.301917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 191.574426][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 192.681444][ T6721] program syz.4.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.487685][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.512198][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.981963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 201.495617][ T6778] autofs4:pid:6778:autofs_fill_super: called with bogus options [ 202.484899][ T6790] program syz.1.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.661953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 204.354903][ T6804] loop1: detected capacity change from 0 to 1024 [ 204.379515][ T6804] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 204.389637][ T5821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 204.416307][ T6804] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 204.446988][ T6804] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 204.477988][ T6804] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.240: unexpected bad inode w/o EXT4_IGET_BAD [ 204.549063][ T6804] EXT4-fs (loop1): no journal found [ 204.633118][ T5821] usb 5-1: config 0 has no interfaces? [ 204.651761][ T5821] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 204.661037][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.750220][ T5821] usb 5-1: config 0 descriptor?? [ 205.232077][ T5821] usb 5-1: USB disconnect, device number 2 [ 206.078080][ T6833] loop1: detected capacity change from 0 to 2048 [ 206.094240][ T6836] program syz.3.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.265591][ T6838] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.632219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 206.985056][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 206.991290][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.997422][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 207.843945][ T6847] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 207.907545][ T6847] Remounting filesystem read-only [ 208.053815][ T5778] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 208.095018][ T5778] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 208.121963][ T5778] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 208.129328][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.159849][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.181841][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.191227][ T5778] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 208.221904][ T5778] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 208.229185][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.282465][ T5778] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 208.289873][ T5778] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 208.322201][ T5778] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 208.341952][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.350884][ T5778] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 208.388371][ T5778] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 208.420686][ T5778] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 208.465041][ T5778] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 208.518196][ T5778] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 208.551358][ T5778] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 208.577208][ T5778] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 208.610681][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.665907][ T5778] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 208.680262][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.702546][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.711522][ T5778] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 208.733206][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.389569][ T6879] program syz.3.260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.810841][ T6916] program syz.3.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.892641][ T6918] veth0: entered promiscuous mode [ 214.454329][ T6924] overlayfs: failed to resolve './file0': -2 [ 214.732381][ T6917] veth0: left promiscuous mode [ 216.461912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 216.746684][ T6950] overlayfs: failed to resolve './file0': -2 [ 217.109865][ T6959] veth0: entered promiscuous mode [ 217.265894][ T6958] veth0: left promiscuous mode [ 217.331903][ T5840] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 217.551914][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 217.567585][ T5840] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 217.592952][ T5840] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 217.632002][ T5840] usb 4-1: config 8 has no interface number 0 [ 217.638217][ T5840] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 218.622724][ T5840] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 218.676199][ T5840] usb 4-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 218.702234][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.710427][ T5840] usb 4-1: Product: syz [ 218.715302][ T5840] usb 4-1: Manufacturer: syz [ 218.720110][ T5840] usb 4-1: SerialNumber: syz [ 221.340798][ T5840] usb 4-1: USB disconnect, device number 3 [ 222.914049][ T6989] overlayfs: failed to resolve './file0': -2 [ 225.545178][ T7020] loop3: detected capacity change from 0 to 1024 [ 228.816698][ T7040] loop3: detected capacity change from 0 to 4096 [ 229.073506][ T7047] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.137628][ T7040] syz.3.303: attempt to access beyond end of device [ 229.137628][ T7040] loop3: rw=0, sector=6054, nr_sectors = 2 limit=4096 [ 229.253043][ T7040] NILFS (loop3): I/O error reading data block for GC (ino=15, vblocknr=3) [ 230.487437][ T7053] loop4: detected capacity change from 0 to 131072 [ 230.544171][ T7053] F2FS-fs (loop4): invalid crc value [ 230.584021][ T7040] NILFS (loop3): error -5 preparing GC: cannot read source blocks [ 230.666346][ T7053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 230.732066][ T7053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 233.923410][ T7083] overlayfs: failed to resolve './file0': -2 [ 236.027215][ T7113] loop2: detected capacity change from 0 to 4096 [ 236.334586][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 236.366233][ T7115] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.513509][ T7113] syz.2.318: attempt to access beyond end of device [ 236.513509][ T7113] loop2: rw=0, sector=6054, nr_sectors = 2 limit=4096 [ 236.527064][ T7113] NILFS (loop2): I/O error reading data block for GC (ino=15, vblocknr=3) [ 236.536884][ T7113] NILFS (loop2): error -5 preparing GC: cannot read source blocks [ 243.340447][ T7154] loop2: detected capacity change from 0 to 8 [ 243.373398][ T7154] Major/Minor mismatch, older Squashfs 1.0 filesystems are unsupported [ 246.179505][ T7179] overlayfs: failed to resolve './file0': -2 [ 249.911487][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 251.012081][ T7207] loop2: detected capacity change from 0 to 2048 [ 251.019348][ T7207] UDF-fs: bad mount option "uid=00000000000000000000adinicb" or missing value [ 251.557383][ T7205] bond1: entered promiscuous mode [ 251.562729][ T7205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.694156][ T7202] loop2: detected capacity change from 0 to 4096 [ 251.713683][ T7202] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 251.770817][ T7204] loop4: detected capacity change from 0 to 1024 [ 251.790643][ T7202] ntfs3: loop2: Failed to load $Extend (-2). [ 251.796739][ T7202] ntfs3: loop2: Failed to initialize $Extend. [ 251.810808][ T7204] hfsplus: unable to parse mount options [ 252.157938][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 252.224228][ T5820] IPVS: starting estimator thread 0... [ 252.537586][ T7215] IPVS: using max 17 ests per chain, 40800 per kthread [ 254.832446][ T7238] veth0: entered promiscuous mode [ 254.849257][ T7237] veth0: left promiscuous mode [ 255.928876][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.935675][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.064054][ T7271] veth0: entered promiscuous mode [ 258.084262][ T7270] veth0: left promiscuous mode [ 259.398026][ T7278] loop1: detected capacity change from 0 to 1024 [ 259.835729][ T28] audit: type=1800 audit(1781560143.098:3): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.367" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 260.532750][ T7278] syz.1.367: attempt to access beyond end of device [ 260.532750][ T7278] loop1: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 260.597909][ T7283] warning: `syz.3.368' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 261.470250][ T7300] veth0: entered promiscuous mode [ 261.532134][ T7299] veth0: left promiscuous mode [ 264.789507][ T34] wlan1: Trigger new scan to find an IBSS to join [ 266.475249][ T7334] veth0: entered promiscuous mode [ 266.503491][ T7333] veth0: left promiscuous mode [ 266.552351][ T7329] loop2: detected capacity change from 0 to 4096 [ 266.560399][ T7329] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 266.612012][ T7329] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 267.482435][ T5872] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 268.371146][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 268.381630][ T43] wlan1: Trigger new scan to find an IBSS to join [ 268.402056][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 268.417665][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.434683][ T5872] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 268.482068][ T5872] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 268.490421][ T5872] usb 5-1: config 14 has no interface number 0 [ 268.501871][ T5872] usb 5-1: config 14 has no interface number 1 [ 268.508164][ T5872] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 268.522990][ T5872] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 268.533888][ T5872] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 268.546116][ T5872] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.629203][ T5872] usb 5-1: config 14 interface 57 has no altsetting 0 [ 268.645843][ T5872] usb 5-1: config 14 interface 228 has no altsetting 0 [ 268.665064][ T5872] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 268.681998][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.691438][ T5872] usb 5-1: Product: syz [ 268.707065][ T5872] usb 5-1: Manufacturer: syz [ 268.712540][ T5872] usb 5-1: SerialNumber: syz [ 269.475037][ T5872] legousbtower 5-1:14.57: interrupt endpoints not found [ 269.676807][ T13] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 269.685097][ T5872] legousbtower 5-1:14.228: interrupt endpoints not found [ 270.459951][ T7369] veth0: entered promiscuous mode [ 270.482815][ T7368] veth0: left promiscuous mode [ 270.689364][ T7376] loop3: detected capacity change from 0 to 512 [ 270.730372][ T7376] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 270.873249][ T7376] EXT4-fs (loop3): 1 orphan inode deleted [ 270.886143][ T3543] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 270.994594][ T7376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.078714][ T3543] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 271.442433][ T7376] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.901310][ T5840] usb 5-1: USB disconnect, device number 3 [ 272.253819][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.873785][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.406'. [ 275.905943][ T7414] veth0: entered promiscuous mode [ 275.916980][ T7413] veth0: left promiscuous mode [ 278.155240][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.420'. [ 278.357742][ T7439] veth0: entered promiscuous mode [ 278.374382][ T7438] veth0: left promiscuous mode [ 278.420124][ T7444] netlink: 44 bytes leftover after parsing attributes in process `syz.2.423'. [ 279.186734][ T7453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 282.528544][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'. [ 282.690854][ T7476] veth0: entered promiscuous mode [ 282.696746][ T7475] veth0: left promiscuous mode [ 282.827756][ T7478] loop4: detected capacity change from 0 to 1024 [ 282.869150][ T7478] EXT4-fs: Ignoring removed oldalloc option [ 282.898299][ T7478] EXT4-fs: Ignoring removed orlov option [ 282.921689][ T7478] EXT4-fs: Ignoring removed oldalloc option [ 282.939701][ T7478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.973707][ T7478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.659156][ T6271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.348432][ T7503] veth0: entered promiscuous mode [ 286.370491][ T7502] veth0: left promiscuous mode [ 286.389731][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.444'. [ 286.557523][ T7507] loop2: detected capacity change from 0 to 4096 [ 286.615377][ T7511] loop4: detected capacity change from 0 to 164 [ 286.621880][ T7513] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.665757][ T7317] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 288.978334][ T7507] NILFS (loop2): error -22 preparing GC: cannot mark copying blocks dirty [ 289.033957][ T7516] loop3: detected capacity change from 0 to 32768 [ 289.111901][ T5822] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 289.445044][ T7516] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 289.667880][ T7516] XFS (loop3): AIL initialisation failed: error -12 [ 289.829815][ T7516] XFS (loop3): log mount failed [ 289.891836][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.603446][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 290.614058][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 290.630819][ T5822] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 290.642266][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 290.651863][ T5822] usb 5-1: Product: syz [ 290.656096][ T5822] usb 5-1: Manufacturer: syz [ 290.660737][ T5822] usb 5-1: SerialNumber: syz [ 290.690951][ T5822] usb 5-1: config 0 descriptor?? [ 290.735066][ T5822] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 290.751983][ T5822] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 290.759161][ T5822] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 290.913855][ T5822] usb 5-1: USB disconnect, device number 4 [ 290.979411][ T7549] veth0: entered promiscuous mode [ 290.986697][ T7548] veth0: left promiscuous mode [ 291.279134][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.459'. [ 295.253779][ T7578] vivid-004: disconnect [ 295.574868][ T7572] vivid-004: reconnect [ 295.628417][ T7580] veth0: entered promiscuous mode [ 295.634422][ T7579] veth0: left promiscuous mode [ 295.863873][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.469'. [ 295.889483][ T7587] loop2: detected capacity change from 0 to 1764 [ 296.080822][ T7594] loop1: detected capacity change from 0 to 2048 [ 296.122046][ T5822] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 296.224205][ T7594] NILFS (loop1): invalid segment: Magic number mismatch [ 296.309710][ T7594] NILFS (loop1): trying rollback from an earlier position [ 296.472798][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.629068][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 296.713175][ T7594] NILFS (loop1): recovery complete [ 296.742199][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.835632][ T7600] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.979419][ T5822] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 297.020903][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 298.209635][ T5822] usb 5-1: Product: syz [ 298.214238][ T5822] usb 5-1: Manufacturer: syz [ 298.218883][ T5822] usb 5-1: SerialNumber: syz [ 298.232983][ T5822] usb 5-1: config 0 descriptor?? [ 298.254426][ T5822] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 298.271949][ T5822] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 298.282976][ T5822] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 298.387704][ T7609] veth0: entered promiscuous mode [ 298.409776][ T7608] veth0: left promiscuous mode [ 298.599233][ T5822] usb 5-1: USB disconnect, device number 5 [ 299.713496][ T995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 300.162155][ T7632] binder: 7631:7632 ioctl 4018620d 0 returned -22 [ 302.496447][ T7644] loop1: detected capacity change from 0 to 1024 [ 304.081402][ T7649] loop4: detected capacity change from 0 to 128 [ 304.120113][ T7649] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 304.168117][ T7649] hpfs: filesystem error: improperly stopped [ 304.198153][ T7649] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 304.220311][ T7649] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 304.261200][ T7649] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 304.521928][ T786] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 304.646229][ T7666] binder: 7665:7666 ioctl 4018620d 0 returned -22 [ 304.716522][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.760228][ T786] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 304.778666][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 304.875617][ T786] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 304.947622][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 305.035460][ T786] usb 4-1: Product: syz [ 305.093416][ T786] usb 4-1: Manufacturer: syz [ 305.147511][ T786] usb 4-1: SerialNumber: syz [ 305.278250][ T786] usb 4-1: config 0 descriptor?? [ 305.387642][ T786] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 305.415277][ T786] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 305.434372][ T786] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 305.571954][ T5779] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 305.639173][ T5822] usb 4-1: USB disconnect, device number 4 [ 305.793967][ T5779] usb 5-1: Using ep0 maxpacket: 16 [ 305.811568][ T5779] usb 5-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 305.832563][ T5779] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.865368][ T5779] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.889537][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.909655][ T5779] usb 5-1: Product: syz [ 305.919765][ T7669] loop1: detected capacity change from 0 to 32768 [ 305.926583][ T5779] usb 5-1: Manufacturer: syz [ 305.934025][ T5779] usb 5-1: SerialNumber: syz [ 306.021304][ T7669] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 306.245110][ T5779] usb 5-1: 0:2 : does not exist [ 306.618162][ T5779] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 306.668999][ T7669] XFS (loop1): Ending clean mount [ 306.748517][ T7669] XFS (loop1): Quotacheck needed: Please wait. [ 307.267204][ T5779] usb 5-1: USB disconnect, device number 6 [ 307.583846][ T7669] XFS (loop1): Quotacheck: Done. [ 307.727992][ T7317] udevd[7317]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 307.774399][ T7317] udevd[7317]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 307.863371][ T7691] overlayfs: missing 'lowerdir' [ 307.975951][ T5778] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 308.170218][ T7699] binder: 7696:7699 ioctl 4018620d 0 returned -22 [ 308.187371][ T7698] loop4: detected capacity change from 0 to 2048 [ 308.265183][ T7703] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.282630][ T7698] NILFS (loop4): error -116 getting root inode [ 309.973508][ T5779] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 310.224264][ T5779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.256640][ T5779] usb 3-1: config 0 has no interfaces? [ 310.272166][ T5779] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.281278][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.313148][ T5779] usb 3-1: config 0 descriptor?? [ 310.332384][ T7713] overlayfs: missing 'lowerdir' [ 310.711604][ T7724] binder: BINDER_SET_CONTEXT_MGR already set [ 310.721641][ T7724] binder: 7723:7724 ioctl 4018620d 200000000040 returned -16 [ 312.049008][ T5779] usb 3-1: USB disconnect, device number 4 [ 313.598396][ T7744] veth0: entered promiscuous mode [ 313.654829][ T7742] veth0: left promiscuous mode [ 313.805320][ T7749] overlayfs: missing 'lowerdir' [ 314.114023][ T7756] binder: BINDER_SET_CONTEXT_MGR already set [ 314.120111][ T7756] binder: 7755:7756 ioctl 4018620d 200000000040 returned -16 [ 314.331640][ T7759] comedi comedi3: fl512: I/O port conflict (0x3,16) [ 314.360708][ T7743] loop3: detected capacity change from 0 to 32768 [ 314.442264][ T7743] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 314.726680][ T7743] XFS (loop3): Ending clean mount [ 315.760867][ T5775] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 315.917487][ T7785] overlayfs: missing 'lowerdir' [ 315.952291][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.523'. [ 316.002807][ T7784] block nbd0: Unsupported socket: should be TCP or UNIX. [ 317.377049][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.383655][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.457059][ T7798] veth0: entered promiscuous mode [ 317.477313][ T7797] veth0: left promiscuous mode [ 319.771846][ T7809] loop3: detected capacity change from 0 to 131072 [ 319.861511][ T7809] F2FS-fs (loop3): Test dummy encryption mode enabled [ 319.875296][ T7809] F2FS-fs (loop3): invalid crc value [ 319.904426][ T7809] F2FS-fs (loop3): Found nat_bits in checkpoint [ 319.971262][ T7809] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [4294967295, 3] run fsck to fix. [ 319.983915][ T7809] F2FS-fs (loop3): Failed to read root inode [ 320.543219][ T7819] overlayfs: missing 'lowerdir' [ 321.126802][ T7827] binder: BINDER_SET_CONTEXT_MGR already set [ 321.156157][ T7827] binder: 7826:7827 ioctl 4018620d 200000000040 returned -16 [ 321.328913][ T7817] loop2: detected capacity change from 0 to 32768 [ 322.651912][ T28] audit: type=1800 audit(1781560205.898:4): pid=7816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.542" name="file1" dev="loop2" ino=8 res=0 errno=0 [ 323.660603][ T7841] overlayfs: missing 'lowerdir' [ 324.031359][ T7847] loop2: detected capacity change from 0 to 1024 [ 324.069165][ T7847] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 324.167269][ T7847] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.552: lblock 2 mapped to illegal pblock 2 (length 1) [ 324.266391][ T7847] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 324.301889][ T7847] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.552: lblock 0 mapped to illegal pblock 48 (length 1) [ 324.352033][ T7847] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 324.361350][ T7847] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.552: Failed to acquire dquot type 0 [ 324.405333][ T7847] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 324.419695][ T7847] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.552: mark_inode_dirty error [ 324.433034][ T7847] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 324.447158][ T7847] EXT4-fs (loop2): 1 orphan inode deleted [ 324.455781][ T7847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.470129][ T34] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.549587][ T7855] trusted_key: syz.4.554 sent an empty control message without MSG_MORE. [ 324.812647][ T34] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 324.847549][ T34] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 325.486958][ T7858] binder: 7857:7858 ioctl c0306201 0 returned -14 [ 325.898852][ T7863] loop3: detected capacity change from 0 to 32768 [ 325.968359][ T7863] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 325.984159][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.009856][ T7863] JBD2: Ignoring recovery information on journal [ 326.087190][ T5776] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 326.131603][ T7863] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 326.491939][ T28] audit: type=1800 audit(1781560209.748:5): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.558" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 326.578287][ T5776] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 326.925846][ T5776] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 327.241398][ T7863] syz.3.558 (7863) used greatest stack depth: 19280 bytes left [ 327.597203][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 329.622187][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 332.600736][ T7916] veth0: entered promiscuous mode [ 332.611302][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 332.655119][ T7915] veth0: left promiscuous mode [ 332.792821][ T3543] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 332.886637][ T7922] loop4: detected capacity change from 0 to 1024 [ 332.937346][ T7922] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 333.151601][ T7922] syz.4.577: attempt to access beyond end of device [ 333.151601][ T7922] loop4: rw=0, sector=1024, nr_sectors = 4 limit=1024 [ 333.347905][ T7922] Buffer I/O error on dev loop4, logical block 256, async page read [ 333.490051][ T7922] hfsplus: failed to load extents file [ 335.243964][ T7936] loop2: detected capacity change from 0 to 131072 [ 335.362517][ T7936] F2FS-fs (loop2): Test dummy encryption mode enabled [ 335.372773][ T7936] F2FS-fs (loop2): invalid crc value [ 335.405389][ T7936] F2FS-fs (loop2): Found nat_bits in checkpoint [ 335.473231][ T7936] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 335.482554][ T7936] F2FS-fs (loop2): Failed to read root inode [ 336.928227][ T7936] process 'syz.2.583' launched './file0' with NULL argv: empty string added [ 343.430169][ T8006] veth0: entered promiscuous mode [ 343.573198][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 343.864288][ T8002] veth0: left promiscuous mode [ 343.933703][ T7993] loop2: detected capacity change from 0 to 512 [ 344.023980][ T7993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.372352][ T7993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.410514][ T7993] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.820028][ T8023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.608'. [ 344.943781][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.942515][ T8030] loop1: detected capacity change from 0 to 512 [ 347.057622][ T8030] EXT4-fs (loop1): invalid journal inode [ 347.187277][ T8030] EXT4-fs (loop1): can't get journal size [ 347.264296][ T8030] EXT4-fs (loop1): 1 truncate cleaned up [ 347.271405][ T8030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.582939][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.471640][ T8071] netlink: 32 bytes leftover after parsing attributes in process `syz.2.619'. [ 351.386303][ T8084] loop4: detected capacity change from 0 to 32768 [ 351.473010][ T8094] loop1: detected capacity change from 0 to 1024 [ 352.008835][ T8104] netlink: 32 bytes leftover after parsing attributes in process `syz.1.631'. [ 352.264467][ T8108] loop4: detected capacity change from 0 to 64 [ 353.051966][ T28] audit: type=1800 audit(1781560236.308:6): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.632" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 353.601925][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 354.318999][ T8130] veth0: entered promiscuous mode [ 354.368731][ T8129] veth0: left promiscuous mode [ 354.460308][ T5872] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 354.494457][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.528687][ T5872] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 354.547129][ T5872] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 354.556905][ T8136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.643'. [ 354.567178][ T5872] usb 3-1: Manufacturer: syz [ 354.576736][ T5872] usb 3-1: config 0 descriptor?? [ 354.653190][ T5839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 354.682201][ T5872] rc_core: IR keymap rc-hauppauge not found [ 354.688320][ T5872] Registered IR keymap rc-empty [ 354.714537][ T5872] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 354.737647][ T5872] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 354.763244][ T5872] ------------[ cut here ]------------ [ 354.768789][ T5872] usb 3-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType 0 [ 354.778728][ T5872] WARNING: CPU: 0 PID: 5872 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 354.788798][ T5872] Modules linked in: [ 354.792838][ T5872] CPU: 0 PID: 5872 Comm: kworker/0:6 Not tainted syzkaller #0 [ 354.800344][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.812234][ T5872] Workqueue: usb_hub_wq hub_event [ 354.817667][ T5872] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 354.823627][ T5872] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 354.843467][ T5872] RSP: 0018:ffffc900049fee00 EFLAGS: 00010246 [ 354.849591][ T5872] RAX: d676abf069f0cd00 RBX: ffff88802e953000 RCX: 0000000000100000 [ 354.857668][ T5872] RDX: ffffc9001748a000 RSI: 000000000006497f RDI: 0000000000064980 [ 354.865750][ T5872] RBP: 1ffff1100f2805c8 R08: ffffc900049fea07 R09: 1ffff9200093fd40 [ 354.874181][ T5872] R10: dffffc0000000000 R11: fffff5200093fd41 R12: dffffc0000000000 [ 354.882300][ T5872] R13: ffff888079402e40 R14: 0000000080000580 R15: ffff8880766808e8 [ 354.890327][ T5872] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 354.899354][ T5872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.906099][ T5872] CR2: 0000001b2de23ffc CR3: 000000002e87b000 CR4: 00000000003506f0 [ 354.915805][ T5872] Call Trace: [ 354.919240][ T5872] [ 354.922452][ T5872] igorplugusb_probe+0x812/0xc60 [ 354.927467][ T5872] usb_probe_interface+0x5c9/0xb20 [ 354.932756][ T5872] ? usb_register_driver+0x3d0/0x3d0 [ 354.938102][ T5872] really_probe+0x25b/0xb20 [ 354.942720][ T5872] ? pm_runtime_barrier+0x14b/0x1c0 [ 354.948005][ T5872] __driver_probe_device+0x1ef/0x390 [ 354.953390][ T5872] driver_probe_device+0x4f/0x420 [ 354.958496][ T5872] __device_attach_driver+0x2ca/0x510 [ 354.964007][ T5872] bus_for_each_drv+0x252/0x2e0 [ 354.968907][ T5872] ? coredump_store+0x90/0x90 [ 354.973667][ T5872] ? bus_find_device+0x300/0x300 [ 354.979036][ T5872] __device_attach+0x2c2/0x420 [ 354.983928][ T5872] ? device_attach+0x20/0x20 [ 354.988576][ T5872] ? __kmem_cache_free+0xba/0x1e0 [ 354.993718][ T5872] ? do_raw_spin_unlock+0x121/0x230 [ 354.998988][ T5872] bus_probe_device+0x180/0x260 [ 355.003948][ T5872] device_add+0x88e/0xc50 [ 355.008353][ T5872] usb_set_configuration+0x1a79/0x20c0 [ 355.015470][ T5872] usb_generic_driver_probe+0x8d/0x150 [ 355.021011][ T5872] usb_probe_device+0x13d/0x270 [ 355.026175][ T5872] ? usb_register_device_driver+0x230/0x230 [ 355.032162][ T5872] really_probe+0x25b/0xb20 [ 355.036729][ T5872] ? pm_runtime_barrier+0x14b/0x1c0 [ 355.042049][ T5872] __driver_probe_device+0x1ef/0x390 [ 355.047400][ T5872] driver_probe_device+0x4f/0x420 [ 355.052516][ T5872] __device_attach_driver+0x2ca/0x510 [ 355.057947][ T5872] bus_for_each_drv+0x252/0x2e0 [ 355.062903][ T5872] ? coredump_store+0x90/0x90 [ 355.067630][ T5872] ? bus_find_device+0x300/0x300 [ 355.072677][ T5872] __device_attach+0x2c2/0x420 [ 355.077509][ T5872] ? device_attach+0x20/0x20 [ 355.082209][ T5872] ? __kmem_cache_free+0xba/0x1e0 [ 355.087301][ T5872] ? do_raw_spin_unlock+0x121/0x230 [ 355.092634][ T5872] bus_probe_device+0x180/0x260 [ 355.097556][ T5872] device_add+0x88e/0xc50 [ 355.102015][ T5872] usb_new_device+0xa3c/0x1660 [ 355.106850][ T5872] ? usb_disconnect+0x8a0/0x8a0 [ 355.113232][ T5872] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.118510][ T5872] ? lockdep_hardirqs_on+0x98/0x150 [ 355.124122][ T5872] hub_event+0x29bf/0x49f0 [ 355.128657][ T5872] ? hub_post_resume+0x120/0x120 [ 355.133687][ T5872] ? read_lock_is_recursive+0x20/0x20 [ 355.139124][ T5872] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.144444][ T5872] ? process_scheduled_works+0x96f/0x15d0 [ 355.150221][ T5872] ? process_scheduled_works+0x96f/0x15d0 [ 355.156030][ T5872] process_scheduled_works+0xa5d/0x15d0 [ 355.161667][ T5872] ? worker_attach_to_pool+0x380/0x380 [ 355.167262][ T5872] ? assign_work+0x3d2/0x5d0 [ 355.171956][ T5872] worker_thread+0xa55/0xfc0 [ 355.176630][ T5872] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 355.182630][ T5872] ? _raw_spin_unlock+0x40/0x40 [ 355.187536][ T5872] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 355.193581][ T5872] kthread+0x2fa/0x390 [ 355.197703][ T5872] ? pr_cont_work+0x560/0x560 [ 355.202490][ T5872] ? kthread_blkcg+0xd0/0xd0 [ 355.207126][ T5872] ret_from_fork+0x48/0x80 [ 355.211601][ T5872] ? kthread_blkcg+0xd0/0xd0 [ 355.217715][ T5872] ret_from_fork_asm+0x11/0x20 [ 355.222808][ T5872] [ 355.225894][ T5872] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.233219][ T5872] CPU: 0 PID: 5872 Comm: kworker/0:6 Not tainted syzkaller #0 [ 355.240713][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.250804][ T5872] Workqueue: usb_hub_wq hub_event [ 355.255888][ T5872] Call Trace: [ 355.259220][ T5872] [ 355.262192][ T5872] dump_stack_lvl+0x18c/0x250 [ 355.266916][ T5872] ? show_regs_print_info+0x20/0x20 [ 355.272172][ T5872] ? load_image+0x420/0x420 [ 355.276733][ T5872] panic+0x2dc/0x730 [ 355.280764][ T5872] ? bpf_jit_dump+0xd0/0xd0 [ 355.285332][ T5872] ? ret_from_fork_asm+0x11/0x20 [ 355.290352][ T5872] __warn+0x2e0/0x470 [ 355.294389][ T5872] ? usb_submit_urb+0x10ac/0x17d0 [ 355.299471][ T5872] ? usb_submit_urb+0x10ac/0x17d0 [ 355.304547][ T5872] report_bug+0x2be/0x4f0 [ 355.308912][ T5872] ? usb_submit_urb+0x10ac/0x17d0 [ 355.313979][ T5872] ? usb_submit_urb+0x10ac/0x17d0 [ 355.319040][ T5872] ? usb_submit_urb+0x10ae/0x17d0 [ 355.324099][ T5872] handle_bug+0xcf/0x120 [ 355.328400][ T5872] exc_invalid_op+0x1a/0x50 [ 355.332956][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 355.337858][ T5872] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 355.343553][ T5872] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 355.363207][ T5872] RSP: 0018:ffffc900049fee00 EFLAGS: 00010246 [ 355.369329][ T5872] RAX: d676abf069f0cd00 RBX: ffff88802e953000 RCX: 0000000000100000 [ 355.377354][ T5872] RDX: ffffc9001748a000 RSI: 000000000006497f RDI: 0000000000064980 [ 355.385364][ T5872] RBP: 1ffff1100f2805c8 R08: ffffc900049fea07 R09: 1ffff9200093fd40 [ 355.393356][ T5872] R10: dffffc0000000000 R11: fffff5200093fd41 R12: dffffc0000000000 [ 355.401353][ T5872] R13: ffff888079402e40 R14: 0000000080000580 R15: ffff8880766808e8 [ 355.409374][ T5872] igorplugusb_probe+0x812/0xc60 [ 355.414352][ T5872] usb_probe_interface+0x5c9/0xb20 [ 355.419495][ T5872] ? usb_register_driver+0x3d0/0x3d0 [ 355.424803][ T5872] really_probe+0x25b/0xb20 [ 355.429345][ T5872] ? pm_runtime_barrier+0x14b/0x1c0 [ 355.434570][ T5872] __driver_probe_device+0x1ef/0x390 [ 355.439894][ T5872] driver_probe_device+0x4f/0x420 [ 355.444951][ T5872] __device_attach_driver+0x2ca/0x510 [ 355.450351][ T5872] bus_for_each_drv+0x252/0x2e0 [ 355.455224][ T5872] ? coredump_store+0x90/0x90 [ 355.459921][ T5872] ? bus_find_device+0x300/0x300 [ 355.464886][ T5872] __device_attach+0x2c2/0x420 [ 355.469672][ T5872] ? device_attach+0x20/0x20 [ 355.474321][ T5872] ? __kmem_cache_free+0xba/0x1e0 [ 355.479383][ T5872] ? do_raw_spin_unlock+0x121/0x230 [ 355.484620][ T5872] bus_probe_device+0x180/0x260 [ 355.489529][ T5872] device_add+0x88e/0xc50 [ 355.493911][ T5872] usb_set_configuration+0x1a79/0x20c0 [ 355.499456][ T5872] usb_generic_driver_probe+0x8d/0x150 [ 355.504981][ T5872] usb_probe_device+0x13d/0x270 [ 355.509891][ T5872] ? usb_register_device_driver+0x230/0x230 [ 355.515842][ T5872] really_probe+0x25b/0xb20 [ 355.520388][ T5872] ? pm_runtime_barrier+0x14b/0x1c0 [ 355.525640][ T5872] __driver_probe_device+0x1ef/0x390 [ 355.531234][ T5872] driver_probe_device+0x4f/0x420 [ 355.536299][ T5872] __device_attach_driver+0x2ca/0x510 [ 355.541714][ T5872] bus_for_each_drv+0x252/0x2e0 [ 355.546596][ T5872] ? coredump_store+0x90/0x90 [ 355.551297][ T5872] ? bus_find_device+0x300/0x300 [ 355.556271][ T5872] __device_attach+0x2c2/0x420 [ 355.561066][ T5872] ? device_attach+0x20/0x20 [ 355.565678][ T5872] ? __kmem_cache_free+0xba/0x1e0 [ 355.570740][ T5872] ? do_raw_spin_unlock+0x121/0x230 [ 355.575971][ T5872] bus_probe_device+0x180/0x260 [ 355.580844][ T5872] device_add+0x88e/0xc50 [ 355.585300][ T5872] usb_new_device+0xa3c/0x1660 [ 355.590105][ T5872] ? usb_disconnect+0x8a0/0x8a0 [ 355.594986][ T5872] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.600213][ T5872] ? lockdep_hardirqs_on+0x98/0x150 [ 355.605455][ T5872] hub_event+0x29bf/0x49f0 [ 355.610039][ T5872] ? hub_post_resume+0x120/0x120 [ 355.615037][ T5872] ? read_lock_is_recursive+0x20/0x20 [ 355.620450][ T5872] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.625702][ T5872] ? process_scheduled_works+0x96f/0x15d0 [ 355.631452][ T5872] ? process_scheduled_works+0x96f/0x15d0 [ 355.637204][ T5872] process_scheduled_works+0xa5d/0x15d0 [ 355.642803][ T5872] ? worker_attach_to_pool+0x380/0x380 [ 355.648292][ T5872] ? assign_work+0x3d2/0x5d0 [ 355.652922][ T5872] worker_thread+0xa55/0xfc0 [ 355.657565][ T5872] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 355.663490][ T5872] ? _raw_spin_unlock+0x40/0x40 [ 355.668388][ T5872] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 355.674364][ T5872] kthread+0x2fa/0x390 [ 355.678459][ T5872] ? pr_cont_work+0x560/0x560 [ 355.683165][ T5872] ? kthread_blkcg+0xd0/0xd0 [ 355.687780][ T5872] ret_from_fork+0x48/0x80 [ 355.692225][ T5872] ? kthread_blkcg+0xd0/0xd0 [ 355.696836][ T5872] ret_from_fork_asm+0x11/0x20 [ 355.701641][ T5872] [ 355.705264][ T5872] Kernel Offset: disabled [ 355.709671][ T5872] Rebooting in 86400 seconds..