last executing test programs: 4m23.463588029s ago: executing program 4 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x602400, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8008743f, &(0x7f0000000180)) 4m21.777432286s ago: executing program 4 (id=789): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sysfs$3(0x3) 4m21.466008115s ago: executing program 4 (id=792): socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4m21.019367225s ago: executing program 4 (id=794): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m20.725035222s ago: executing program 4 (id=796): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 4m18.916806408s ago: executing program 4 (id=807): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="00040000000000000000080000000800028000000100000002800000020023020000000002"], 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4884) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 4m18.333130509s ago: executing program 32 (id=807): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="00040000000000000000080000000800028000000100000002800000020023020000000002"], 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4884) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 8.800708618s ago: executing program 0 (id=3296): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x6, @string={0x6, 0x3, "fb317f14"}}, 0x0, 0x0}, 0x0) 7.612233209s ago: executing program 2 (id=3304): setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x4a, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f7a7e40720c1200962201020301090212"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.675084426s ago: executing program 0 (id=3320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 4.260495484s ago: executing program 0 (id=3328): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 3.509241655s ago: executing program 2 (id=3335): alarm(0x8000000000000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) alarm(0x0) 3.452961798s ago: executing program 0 (id=3337): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x40, 0x80}, &(0x7f0000000340)) lseek(0xffffffffffffffff, 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x3c00, 0x118, 0x780, 0x800, 0x4, 0xfffffffa, 0xf, 0x0, {0x7, 0x9, 0x1}, {0x3, 0x4}, {0x1, 0x3}, {0x6, 0x1ff}, 0x3, 0x1, 0xe, 0x0, 0x1, 0x9, 0x7, 0x0, 0x80, 0x7, 0xaf, 0x8, 0x24, 0x100, 0x2, 0x6}) socket(0x10, 0x3, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_clone3(&(0x7f00000003c0)={0x122127000, &(0x7f0000000000), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x4e) 2.493111642s ago: executing program 2 (id=3348): socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.223690256s ago: executing program 3 (id=3351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.797802305s ago: executing program 3 (id=3353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf22}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000180)=@udp6}, 0x20) 1.734219074s ago: executing program 0 (id=3354): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000100)='\'#{+\x00', &(0x7f0000000300)='./file0\x00', r1) mknodat$loop(r1, &(0x7f0000000240)='./file0\x00', 0x1000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) eventfd2(0x0, 0x801) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x10) 1.433994619s ago: executing program 5 (id=3357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.377322882s ago: executing program 2 (id=3358): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, 0x0) 1.364482265s ago: executing program 1 (id=3359): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) inotify_init1(0x80800) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 1.182988532s ago: executing program 3 (id=3360): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x4) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 1.07336889s ago: executing program 5 (id=3361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000ac0)=""/157, 0x9d}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x2}, 0x8005}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.049936179s ago: executing program 3 (id=3362): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xc0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fadvise64(r2, 0x100000001, 0x1, 0x2) 1.012917291s ago: executing program 1 (id=3363): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xabd, 0x4) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/17, 0x11}, 0x9}], 0x1, 0x40010130, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a", 0x40) 792.778065ms ago: executing program 5 (id=3364): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 792.614488ms ago: executing program 1 (id=3365): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) memfd_create(0x0, 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace(0x10, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000800), 0x4) 749.737762ms ago: executing program 0 (id=3366): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x38, r2, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r4, r5+60000000}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000d35d01"], 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 653.728284ms ago: executing program 1 (id=3367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) fsopen(&(0x7f0000000b80)='ecryptfs\x00', 0x1) 647.272329ms ago: executing program 3 (id=3368): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 567.029749ms ago: executing program 5 (id=3369): r0 = inotify_init() r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x1000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80000006) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) 565.549871ms ago: executing program 2 (id=3370): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 375.353282ms ago: executing program 1 (id=3371): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002000a00", 0x40, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 313.69513ms ago: executing program 5 (id=3372): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = landlock_create_ruleset(&(0x7f0000001080)={0x1, 0x4, 0x5, 0x2002, 0x1, 0x2}, 0x30, 0x3) landlock_restrict_self(r0, 0xd) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 310.000402ms ago: executing program 3 (id=3373): ioperm(0x8, 0x9, 0x5a) mq_open(0x0, 0x8c2, 0x30, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, 0x0, 0xc1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x442, 0x39016f9121fb575c) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 128.948518ms ago: executing program 1 (id=3374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x18) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r3, r4, 0x0, 0x201f00) 43.901486ms ago: executing program 5 (id=3375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x10888) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x8000) socket(0xa, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) 0s ago: executing program 2 (id=3376): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) io_setup(0x43, &(0x7f0000000440)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, 0x7, 0x8) preadv(r3, &(0x7f0000002740)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x20, 0x4, 0xa) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x18, 0x8, 0x647b, r0, 0x0, 0x0, 0x4000000000200, 0x0, 0x2}]) kernel console output (not intermixed with test programs): 5][ T5717] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 208.624127][ T5717] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 208.624146][ T5717] usb 2-1: Product: syz [ 208.624160][ T5717] usb 2-1: Manufacturer: syz [ 208.868785][ T5717] hub 2-1:4.0: USB hub found [ 209.049440][ T5717] hub 2-1:4.0: 2 ports detected [ 209.256155][ T5717] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 209.256184][ T5717] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 209.384281][ T5717] usb 2-1: USB disconnect, device number 11 [ 210.008982][ T7527] openvswitch: netlink: IP tunnel TTL not specified. [ 210.009014][ T7527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.368389][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 211.156675][ T7559] syzkaller1: tun_chr_ioctl cmd 35111 [ 211.202493][ T7563] input: syz1 as /devices/virtual/input/input15 [ 211.202533][ T7563] input: failed to attach handler leds to device input15, error: -6 [ 211.309063][ T7568] netlink: 'syz.0.688': attribute type 8 has an invalid length. [ 211.309086][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 213.410600][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 213.693573][ T7611] input: syz0 as /devices/virtual/input/input16 [ 215.956558][ T7643] netlink: 8772 bytes leftover after parsing attributes in process `syz.3.715'. [ 215.987582][ T7645] program syz.1.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.248998][ T7656] ALSA: mixer_oss: invalid OSS volume '' [ 216.250006][ T7656] ALSA: mixer_oss: invalid OSS volume '' [ 216.309401][ T7657] netlink: 148 bytes leftover after parsing attributes in process `syz.3.717'. [ 217.734753][ T42] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.965786][ T7670] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 218.073006][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 218.076269][ T42] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 218.102539][ T42] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 218.102574][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.102595][ T42] usb 5-1: Product: syz [ 218.102611][ T42] usb 5-1: Manufacturer: syz [ 218.102626][ T42] usb 5-1: SerialNumber: syz [ 220.815864][ T5696] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 220.916160][ T42] r8152-cfgselector 5-1: Unknown version 0x0000 [ 220.916192][ T42] r8152-cfgselector 5-1: config 0 descriptor?? [ 220.918805][ T42] r8152-cfgselector 5-1: can't set config #0, error -71 [ 220.945913][ T42] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 221.004142][ T7282] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.032377][ T5696] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 221.032431][ T5696] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 221.032458][ T5696] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 221.183266][ T5696] usb 1-1: string descriptor 0 read error: -71 [ 221.183524][ T5696] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.183550][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.193104][ T7282] usb 2-1: Using ep0 maxpacket: 32 [ 221.226598][ T7282] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 221.226632][ T7282] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 221.226653][ T7282] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 221.226675][ T7282] usb 2-1: config 1 has no interface number 0 [ 221.226725][ T7282] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.226752][ T7282] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 221.226796][ T7282] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 221.226821][ T7282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.335712][ T5696] usb 1-1: can't set config #1, error -71 [ 221.367004][ T5696] usb 1-1: USB disconnect, device number 8 [ 221.457193][ T7282] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 221.592905][ T5731] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 221.777611][ T7282] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 221.814514][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 221.818564][ T5731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.818594][ T5731] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 221.818617][ T5731] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.840296][ T5731] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 221.840328][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.840346][ T5731] usb 4-1: Product: syz [ 221.840360][ T5731] usb 4-1: Manufacturer: syz [ 221.840376][ T5731] usb 4-1: SerialNumber: syz [ 221.967218][ T5731] usb 4-1: config 0 descriptor?? [ 222.324440][ T5735] usb 2-1: USB disconnect, device number 12 [ 222.392896][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 222.466941][ T5614] Bluetooth: hci0: command 0x2016 tx timeout [ 222.495090][ T5731] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 222.568322][ T5735] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 222.707034][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 222.728374][ T5731] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 222.728765][ T5731] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 222.938977][ T5584] usb 4-1: USB disconnect, device number 10 [ 223.829000][ T7738] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 223.912864][ T7282] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 224.075999][ T7282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 224.076039][ T7282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 70, setting to 64 [ 224.082555][ T7282] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 224.082592][ T7282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.082614][ T7282] usb 3-1: Product: syz [ 224.082629][ T7282] usb 3-1: Manufacturer: syz [ 224.082644][ T7282] usb 3-1: SerialNumber: syz [ 224.187579][ T7282] usb 3-1: config 0 descriptor?? [ 224.189125][ T7732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.224629][ T7282] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 224.647410][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 225.702171][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 225.735828][ T5584] usb 3-1: USB disconnect, device number 6 [ 226.487225][ T7776] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 226.487316][ T7776] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 226.981548][ T7785] erspan0 speed is unknown, defaulting to 1000 [ 226.997490][ T197] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 227.153016][ T197] usb 2-1: Using ep0 maxpacket: 16 [ 227.155300][ T197] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 227.162422][ T197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.213132][ T197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.215709][ T197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.238856][ T197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.261162][ T197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.264207][ T197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.266248][ T197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.270129][ T197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.294641][ T197] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 227.294672][ T197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 227.294692][ T197] usb 2-1: SerialNumber: syz [ 227.315184][ T197] usb 2-1: config 0 descriptor?? [ 227.527433][ T197] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 229.153715][ T7819] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 229.230303][ T7282] IPVS: starting estimator thread 0... [ 229.392983][ T7828] IPVS: using max 13 ests per chain, 31200 per kthread [ 231.283196][ T7861] bridge: RTM_NEWNEIGH with invalid ether address [ 231.285036][ T7861] bridge: RTM_NEWNEIGH with invalid ether address [ 232.841335][ T4946] bcm5974 2-1:0.0: could not read from device [ 232.915530][ T4910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.995593][ T86] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.025144][ T7881] Invalid argument reading file caps for ./file0 [ 233.028705][ T4910] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.052125][ T4910] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.064682][ T4910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.076748][ T4910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.218324][ T197] bcm5974 2-1:0.0: could not read from device [ 233.288019][ T7883] bridge0: port 2(bridge_slave_1) entered listening state [ 233.383852][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.433294][ T4946] bcm5974 2-1:0.0: could not read from device [ 233.609453][ T197] input: failed to attach handler mousedev to device input18, error: -5 [ 233.710939][ T197] usb 2-1: USB disconnect, device number 13 [ 233.714379][ T4946] bcm5974 2-1:0.0: could not read from device [ 235.602314][ T59] Bluetooth: hci4: command tx timeout [ 235.912528][ T86] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.090771][ T7921] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 237.603231][ T7941] input: syz0 as /devices/virtual/input/input19 [ 237.666141][ T59] Bluetooth: hci4: command tx timeout [ 238.107330][ T86] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.742891][ T59] Bluetooth: hci4: command tx timeout [ 240.005524][ T7974] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20000 [ 241.535474][ T86] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.969221][ T59] Bluetooth: hci4: command tx timeout [ 242.032866][ T5731] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 242.218662][ T5731] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 242.218694][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.218712][ T5731] usb 2-1: Product: syz [ 242.218727][ T5731] usb 2-1: Manufacturer: syz [ 242.218741][ T5731] usb 2-1: SerialNumber: syz [ 242.248203][ T5731] usb 2-1: config 0 descriptor?? [ 242.637897][ T5731] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 242.780401][ T8010] overlayfs: missing 'lowerdir' [ 243.452906][ T7876] erspan0 speed is unknown, defaulting to 1000 [ 243.496149][ T5731] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 243.590041][ T5731] usb 2-1: USB disconnect, device number 14 [ 243.929128][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 244.120567][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 244.123987][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.125462][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 244.125490][ T10] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 244.125511][ T10] usb 3-1: Manufacturer: syz [ 244.228204][ T10] usb 3-1: config 0 descriptor?? [ 244.815711][ T8042] netlink: 656 bytes leftover after parsing attributes in process `syz.3.870'. [ 244.815741][ T8042] netlink: 656 bytes leftover after parsing attributes in process `syz.3.870'. [ 244.815758][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 244.979374][ T10] creative-sb0540 0003:041E:3100.000B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 245.334545][ T7282] kernel read not supported for file 435/task/436/pagemap (pid: 7282 comm: kworker/1:7) [ 245.396146][ T197] usb 3-1: USB disconnect, device number 7 [ 245.598956][ T86] bridge_slave_1: left allmulticast mode [ 245.671895][ T86] bridge_slave_1: left promiscuous mode [ 245.717187][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.089539][ T86] bridge_slave_0: left allmulticast mode [ 246.089578][ T86] bridge_slave_0: left promiscuous mode [ 246.089861][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.159996][ T8057] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 246.160029][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.3.876 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 246.160062][ T8057] Tainted: [L]=SOFTLOCKUP [ 246.160070][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.160084][ T8057] Call Trace: [ 246.160093][ T8057] [ 246.160102][ T8057] dump_stack_lvl+0xe8/0x150 [ 246.160146][ T8057] sysfs_create_dir_ns+0x271/0x2a0 [ 246.160187][ T8057] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 246.160231][ T8057] ? rt_spin_unlock+0x163/0x200 [ 246.160263][ T8057] kobject_add_internal+0x62c/0xce0 [ 246.160298][ T8057] kobject_add+0x163/0x240 [ 246.160321][ T8057] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 246.160362][ T8057] ? __pfx_kobject_add+0x10/0x10 [ 246.160394][ T8057] ? get_device_parent+0x370/0x3a0 [ 246.160421][ T8057] ? __pfx_klist_children_get+0x10/0x10 [ 246.160463][ T8057] device_add+0x3fa/0xb80 [ 246.160492][ T8057] tty_register_device_attr+0x422/0x950 [ 246.160531][ T8057] ? __pfx_tty_register_device_attr+0x10/0x10 [ 246.160568][ T8057] ? tty_port_init+0x140/0x1b0 [ 246.160598][ T8057] ? gsm_dlci_alloc+0x341/0x650 [ 246.160643][ T8057] gsm_activate_mux+0x110/0x2a0 [ 246.160680][ T8057] gsmld_ioctl+0x12d3/0x1930 [ 246.160718][ T8057] ? __pfx_gsmld_ioctl+0x10/0x10 [ 246.160760][ T8057] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 246.160813][ T8057] ? ldsem_down_read+0x12/0x40 [ 246.160850][ T8057] ? __pfx_gsmld_ioctl+0x10/0x10 [ 246.160876][ T8057] tty_ioctl+0x9c3/0xde0 [ 246.160903][ T8057] ? __pfx_tty_ioctl+0x10/0x10 [ 246.160929][ T8057] __se_sys_ioctl+0xff/0x170 [ 246.160959][ T8057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.160983][ T8057] do_syscall_64+0x174/0x580 [ 246.161016][ T8057] ? trace_irq_disable+0x3b/0x140 [ 246.161038][ T8057] ? clear_bhb_loop+0x40/0x90 [ 246.161066][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.161089][ T8057] RIP: 0033:0x7f38b417de59 [ 246.161111][ T8057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.161129][ T8057] RSP: 002b:00007f38b23b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.161155][ T8057] RAX: ffffffffffffffda RBX: 00007f38b4406090 RCX: 00007f38b417de59 [ 246.161171][ T8057] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 246.161186][ T8057] RBP: 00007f38b4213e6f R08: 0000000000000000 R09: 0000000000000000 [ 246.161200][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.161213][ T8057] R13: 00007f38b4406128 R14: 00007f38b4406090 R15: 00007ffe8b646068 [ 246.161249][ T8057] [ 246.201748][ T8057] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 246.674252][ T5731] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.834627][ T5731] usb 3-1: Using ep0 maxpacket: 8 [ 246.841828][ T5731] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.841860][ T5731] usb 3-1: config 179 has no interface number 0 [ 246.841908][ T5731] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 246.841936][ T5731] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 246.841964][ T5731] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.841990][ T5731] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 246.842017][ T5731] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 246.842063][ T5731] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 246.842086][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.876952][ T8063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.264854][ T5735] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input20 [ 250.532889][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 250.695880][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 250.702273][ T42] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 250.702300][ T42] usb 4-1: config 0 has no interface number 0 [ 250.702423][ T42] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 250.702449][ T42] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 250.715473][ T42] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 250.715508][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.715530][ T42] usb 4-1: Product: syz [ 250.715545][ T42] usb 4-1: Manufacturer: syz [ 250.715561][ T42] usb 4-1: SerialNumber: syz [ 250.726658][ T42] usb 4-1: config 0 descriptor?? [ 250.728937][ T8075] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 250.732071][ T8075] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 250.980367][ T8075] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 250.980741][ T8075] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 251.201598][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.302093][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.371763][ T86] bond0 (unregistering): Released all slaves [ 251.595785][ T42] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 251.829835][ T42] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 251.829870][ T42] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 251.830179][ T42] asix 4-1:0.188: probe with driver asix failed with error -71 [ 251.930290][ T42] usb 4-1: USB disconnect, device number 11 [ 251.984231][ T8067] batadv_slave_1: entered promiscuous mode [ 252.140638][ T8069] batadv_slave_1: left promiscuous mode [ 252.869577][ T59] Bluetooth: hci3: command 0x0405 tx timeout [ 253.233352][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 253.233418][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 253.254300][ T42] usb 3-1: USB disconnect, device number 8 [ 255.125844][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 255.916887][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.916967][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.112849][ T5696] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 256.296091][ T5696] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 256.296126][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.338028][ T5696] usb 3-1: config 0 descriptor?? [ 256.361502][ T5696] cp210x 3-1:0.0: cp210x converter detected [ 256.789991][ T5696] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 256.801047][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.907'. [ 256.830680][ T36] audit: type=1326 audit(1783855852.402:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c0dfbde59 code=0x0 [ 256.926859][ T36] audit: type=1326 audit(1783855852.492:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0dfbde59 code=0x7ffc0000 [ 256.926947][ T36] audit: type=1326 audit(1783855852.492:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c0df7e68e code=0x7ffc0000 [ 256.926996][ T36] audit: type=1326 audit(1783855852.492:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c0df7e68e code=0x7ffc0000 [ 256.927043][ T36] audit: type=1326 audit(1783855852.492:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0dfbde59 code=0x7ffc0000 [ 256.963494][ T36] audit: type=1326 audit(1783855852.542:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c0df7e68e code=0x7ffc0000 [ 256.965756][ T36] audit: type=1326 audit(1783855852.542:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c0df7e68e code=0x7ffc0000 [ 256.970777][ T36] audit: type=1326 audit(1783855852.542:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c0df7e68e code=0x7ffc0000 [ 256.984128][ T36] audit: type=1326 audit(1783855852.562:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c0df7e68e code=0x7ffc0000 [ 256.990079][ T36] audit: type=1326 audit(1783855852.562:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.1.911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c0df7e68e code=0x7ffc0000 [ 257.154090][ T8178] sg_write: data in/out 397276/136 bytes for SCSI command 0x0-- guessing data in; [ 257.154090][ T8178] program syz.0.913 not setting count and/or reply_len properly [ 257.205360][ T5696] usb 3-1: cp210x converter now attached to ttyUSB0 [ 257.209434][ T5696] usb 3-1: USB disconnect, device number 9 [ 257.429094][ T8180] macsec1: entered allmulticast mode [ 257.429125][ T8180] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 257.429583][ T8180] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 257.431508][ T8180] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 257.465985][ T8180] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 257.490341][ T5696] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 257.769958][ T5696] cp210x 3-1:0.0: device disconnected [ 258.134451][ T7282] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 259.117463][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.117607][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.117844][ T7876] bridge_slave_0: entered allmulticast mode [ 259.140813][ T8213] overlayfs: upper fs does not support tmpfile. [ 259.173966][ T7876] bridge_slave_0: entered promiscuous mode [ 259.247925][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.248168][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.248488][ T7876] bridge_slave_1: entered allmulticast mode [ 259.252063][ T7876] bridge_slave_1: entered promiscuous mode [ 260.148302][ T8235] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 260.233632][ T5696] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 260.395903][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.395934][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 260.395956][ T5696] usb 1-1: config 1 has no interface number 0 [ 260.396005][ T5696] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.396034][ T5696] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 260.396062][ T5696] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 260.396094][ T5696] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.396115][ T5696] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.483691][ T5696] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.483721][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.483740][ T5696] usb 1-1: Product: syz [ 260.483755][ T5696] usb 1-1: Manufacturer: syz [ 260.483768][ T5696] usb 1-1: SerialNumber: syz [ 260.531240][ T8231] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.766628][ T86] hsr_slave_0: left promiscuous mode [ 260.804651][ T86] hsr_slave_1: left promiscuous mode [ 260.806049][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.852498][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.911418][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.911441][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.959796][ T8231] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 261.383670][ T5696] cdc_ncm 1-1:1.1: bind() failure [ 261.479836][ T86] veth1_macvtap: left promiscuous mode [ 261.480044][ T86] veth0_macvtap: left promiscuous mode [ 261.480403][ T86] veth1_vlan: left promiscuous mode [ 261.482528][ T86] veth0_vlan: left promiscuous mode [ 261.590761][ T5731] usb 1-1: USB disconnect, device number 9 [ 262.724907][ T86] team0 (unregistering): Port device team_slave_1 removed [ 262.834954][ T86] team0 (unregistering): Port device team_slave_0 removed [ 263.158494][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 263.158769][ T8252] batadv_slave_1: entered promiscuous mode [ 263.162588][ T8257] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 263.222592][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.232441][ T8254] batadv_slave_1: left promiscuous mode [ 263.471247][ T7876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.564285][ T7876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.237303][ T7876] team0: Port device team_slave_0 added [ 264.801004][ T7876] team0: Port device team_slave_1 added [ 265.234162][ T8282] erspan0 speed is unknown, defaulting to 1000 [ 265.298153][ T197] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 265.454332][ T8285] dvmrp8: entered allmulticast mode [ 265.467016][ T197] usb 3-1: Using ep0 maxpacket: 32 [ 265.469110][ T197] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.469139][ T197] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.469161][ T197] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.471538][ T197] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 265.471583][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.471605][ T197] usb 3-1: Product: syz [ 265.471619][ T197] usb 3-1: Manufacturer: syz [ 265.471633][ T197] usb 3-1: SerialNumber: syz [ 265.486132][ T197] usb 3-1: config 0 descriptor?? [ 265.547241][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.547258][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.547282][ T7876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.868880][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.868960][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.868990][ T7876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.896230][ T197] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 266.306618][ T197] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 266.434406][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 266.467434][ T197] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 266.528684][ T197] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 266.645534][ T197] usb 3-1: USB disconnect, device number 10 [ 267.175046][ T7876] hsr_slave_0: entered promiscuous mode [ 267.178495][ T7876] hsr_slave_1: entered promiscuous mode [ 267.179647][ T7876] debugfs: 'hsr0' already exists in 'hsr' [ 267.179673][ T7876] Cannot create hsr debugfs directory [ 269.158429][ T8381] kvm: apic: phys broadcast and lowest prio [ 270.284574][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 270.676693][ T7876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.866020][ T8412] syz.2.989 uses obsolete (PF_INET,SOCK_PACKET) [ 270.890168][ T7876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.921883][ T7876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 270.999294][ T7876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.002094][ T7876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.181657][ T10] IPVS: starting estimator thread 0... [ 271.222344][ T7876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.262531][ T7876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.285559][ T8420] IPVS: using max 7 ests per chain, 16800 per kthread [ 271.514974][ T7876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.067358][ T8408] syz.1.988 (8408): drop_caches: 2 [ 272.951944][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.999'. [ 273.532529][ T7876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.669087][ T7876] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.736632][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.736961][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.890550][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.890688][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.007436][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1021'. [ 275.128260][ T8508] bond0: (slave bond_slave_0): Releasing backup interface [ 275.367565][ T8508] bond_slave_0: entered promiscuous mode [ 275.367594][ T8508] bond_slave_0: entered allmulticast mode [ 276.522935][ T197] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 276.842809][ T197] usb 4-1: Using ep0 maxpacket: 32 [ 276.846587][ T197] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 276.846617][ T197] usb 4-1: config 0 has no interface number 0 [ 276.846667][ T197] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.846695][ T197] usb 4-1: config 0 interface 85 has no altsetting 0 [ 276.865005][ T197] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 276.865037][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.865055][ T197] usb 4-1: Product: syz [ 276.865068][ T197] usb 4-1: Manufacturer: syz [ 276.865082][ T197] usb 4-1: SerialNumber: syz [ 276.902938][ T197] usb 4-1: config 0 descriptor?? [ 277.181959][ T7876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.597608][ T197] appletouch 4-1:0.85: Geyser mode initialized. [ 277.695738][ T197] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input21 [ 277.903237][ T5696] usb 4-1: USB disconnect, device number 12 [ 278.375279][ T5696] appletouch 4-1:0.85: input: appletouch disconnected [ 278.777076][ T8601] netlink: 'syz.0.1047': attribute type 39 has an invalid length. [ 278.830689][ T8604] GUP no longer grows the stack in syz.1.1049 (8604): 200000004000-20000000a000 (200000002000) [ 278.830729][ T8604] CPU: 1 UID: 0 PID: 8604 Comm: syz.1.1049 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 278.830759][ T8604] Tainted: [L]=SOFTLOCKUP [ 278.830767][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.830779][ T8604] Call Trace: [ 278.830787][ T8604] [ 278.830796][ T8604] dump_stack_lvl+0xe8/0x150 [ 278.830837][ T8604] __get_user_pages+0x21e9/0x2590 [ 278.830873][ T8604] ? mtree_load+0x12a/0x780 [ 278.830932][ T8604] get_user_pages_remote+0x307/0xb10 [ 278.830966][ T8604] ? __pfx_mtree_load+0x10/0x10 [ 278.831003][ T8604] ? __pfx_get_user_pages_remote+0x10/0x10 [ 278.831039][ T8604] ? __access_remote_vm+0x42c/0x6f0 [ 278.831066][ T8604] __access_remote_vm+0x222/0x6f0 [ 278.831097][ T8604] ? __pfx___access_remote_vm+0x10/0x10 [ 278.831116][ T8604] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 278.831138][ T8604] ? proc_pid_cmdline_read+0x41f/0x900 [ 278.831167][ T8604] ? proc_pid_cmdline_read+0x41f/0x900 [ 278.831209][ T8604] proc_pid_cmdline_read+0x46e/0x900 [ 278.831240][ T8604] ? __asan_memset+0x22/0x50 [ 278.831279][ T8604] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 278.831326][ T8604] ? rw_verify_area+0x250/0x4d0 [ 278.831357][ T8604] vfs_readv+0x588/0x850 [ 278.831388][ T8604] ? __pfx_futex_wake+0x10/0x10 [ 278.831419][ T8604] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 278.831458][ T8604] ? __pfx_vfs_readv+0x10/0x10 [ 278.831507][ T8604] ? __fget_files+0x2a/0x420 [ 278.831535][ T8604] ? __fget_files+0x3a8/0x420 [ 278.831555][ T8604] ? __fget_files+0x2a/0x420 [ 278.831589][ T8604] __x64_sys_preadv+0x19f/0x2c0 [ 278.831620][ T8604] ? __pfx___x64_sys_preadv+0x10/0x10 [ 278.831661][ T8604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.831685][ T8604] do_syscall_64+0x174/0x580 [ 278.831718][ T8604] ? trace_irq_disable+0x3b/0x140 [ 278.831738][ T8604] ? clear_bhb_loop+0x40/0x90 [ 278.831766][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.831788][ T8604] RIP: 0033:0x7f3c0dfbde59 [ 278.831819][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.831837][ T8604] RSP: 002b:00007f3c0c216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 278.831862][ T8604] RAX: ffffffffffffffda RBX: 00007f3c0e245fa0 RCX: 00007f3c0dfbde59 [ 278.831879][ T8604] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 278.831893][ T8604] RBP: 00007f3c0e053e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 278.831907][ T8604] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 278.831920][ T8604] R13: 00007f3c0e246038 R14: 00007f3c0e245fa0 R15: 00007ffd48bf5b18 [ 278.831957][ T8604] [ 280.460867][ T8611] input: syz1 as /devices/virtual/input/input22 [ 280.460902][ T8611] input: failed to attach handler leds to device input22, error: -6 [ 281.119582][ T7876] veth0_vlan: entered promiscuous mode [ 281.176889][ T7876] veth1_vlan: entered promiscuous mode [ 281.395287][ T7876] veth0_macvtap: entered promiscuous mode [ 281.435261][ T7876] veth1_macvtap: entered promiscuous mode [ 281.536084][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.666921][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.771616][ T3645] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.785902][ T3645] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.787533][ T3645] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.800137][ T3645] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.610202][ T8659] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 283.586380][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.586403][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.706674][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.706696][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.182953][ T5717] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 284.318477][ T8686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1077'. [ 284.352092][ T5717] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 284.352125][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.352145][ T5717] usb 4-1: Product: syz [ 284.352159][ T5717] usb 4-1: Manufacturer: syz [ 284.352174][ T5717] usb 4-1: SerialNumber: syz [ 284.397362][ T5717] usb 4-1: config 0 descriptor?? [ 284.626112][ T5717] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 285.037357][ T5717] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 285.071921][ T5717] usb 4-1: USB disconnect, device number 13 [ 285.682896][ T5735] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 285.833446][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 285.838030][ T5735] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.838065][ T5735] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.838089][ T5735] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.838114][ T5735] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.838160][ T5735] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.838193][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.872465][ T8722] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1090'. [ 286.150628][ T5735] usb 2-1: GET_CAPABILITIES returned 0 [ 286.150684][ T5735] usbtmc 2-1:16.0: can't read capabilities [ 287.049450][ T5696] kernel write not supported for file /sg0 (pid: 5696 comm: kworker/1:3) [ 287.521341][ T1424] tipc: Subscription rejected, illegal request [ 287.729550][ T5730] usb 2-1: USB disconnect, device number 15 [ 290.163035][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 290.163075][ T8821] netlink: 'syz.2.1121': attribute type 29 has an invalid length. [ 290.163092][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 291.505712][ T8775] Set syz1 is full, maxelem 6117 reached [ 293.402837][ T5717] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 293.565531][ T5717] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.565561][ T5717] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.567208][ T5717] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 293.567235][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 293.567254][ T5717] usb 4-1: SerialNumber: syz [ 293.897655][ T5717] usb 4-1: 0:2 : does not exist [ 295.355280][ T5717] usb 4-1: USB disconnect, device number 14 [ 296.120217][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.159009][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.398104][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.401563][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.406818][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.412337][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.777501][ T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.843333][ T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.543808][ T59] Bluetooth: hci4: command tx timeout [ 298.933898][ T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.354925][ T5696] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 299.372814][ T8954] erspan0 speed is unknown, defaulting to 1000 [ 299.533008][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 299.541822][ T5696] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 299.541852][ T5696] usb 3-1: config 0 has no interface number 0 [ 299.541903][ T5696] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.541929][ T5696] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.589870][ T5696] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 299.589903][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 299.589926][ T5696] usb 3-1: Product: syz [ 299.589941][ T5696] usb 3-1: SerialNumber: syz [ 299.633728][ T5696] usb 3-1: config 0 descriptor?? [ 299.640325][ T5696] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 299.687193][ T5696] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input23 [ 299.841777][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 300.381799][ T5730] usb 3-1: USB disconnect, device number 11 [ 300.387077][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 300.387107][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 300.443856][ T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.627477][ T59] Bluetooth: hci4: command tx timeout [ 300.661383][ T9045] syz.0.1194 (9045) used greatest stack depth: 18024 bytes left [ 300.714983][ T5730] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 300.834769][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1196'. [ 301.799453][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 301.799497][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 302.702834][ T59] Bluetooth: hci4: command tx timeout [ 303.083625][ T5696] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 303.244723][ T5696] usb 3-1: Using ep0 maxpacket: 8 [ 303.248116][ T5696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.248148][ T5696] usb 3-1: config 0 has no interfaces? [ 303.248182][ T5696] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 303.248205][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.360496][ T5696] usb 3-1: config 0 descriptor?? [ 303.684317][ T9113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1213'. [ 303.863257][ T43] bridge_slave_1: left allmulticast mode [ 303.863300][ T43] bridge_slave_1: left promiscuous mode [ 303.863775][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.935895][ T9119] misc userio: No port type given on /dev/userio [ 304.057641][ T43] bridge_slave_0: left allmulticast mode [ 304.057690][ T43] bridge_slave_0: left promiscuous mode [ 304.057968][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.782905][ T59] Bluetooth: hci4: command tx timeout [ 305.470610][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.524978][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.546840][ T43] bond0 (unregistering): Released all slaves [ 305.824385][ T7282] usb 3-1: USB disconnect, device number 12 [ 307.911324][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.911468][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.911741][ T8954] bridge_slave_0: entered allmulticast mode [ 307.928020][ T8954] bridge_slave_0: entered promiscuous mode [ 307.947918][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.948122][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.948363][ T8954] bridge_slave_1: entered allmulticast mode [ 307.966353][ T8954] bridge_slave_1: entered promiscuous mode [ 308.085201][ T9159] input: syz0 as /devices/virtual/input/input24 [ 308.707082][ T8954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.711758][ T8954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.084395][ T8954] team0: Port device team_slave_0 added [ 309.216217][ T9193] trusted_key: syz.1.1239 sent an empty control message without MSG_MORE. [ 309.512513][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 310.058408][ T5584] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 310.121358][ T8954] team0: Port device team_slave_1 added [ 310.168709][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 310.236425][ T5584] usb 3-1: Using ep0 maxpacket: 8 [ 310.254969][ T5584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.255026][ T5584] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 310.255051][ T5584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.302000][ T5584] usb 3-1: config 0 descriptor?? [ 310.551440][ T5584] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 310.724130][ T9236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.767416][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.767435][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.767464][ T8954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.040137][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.040156][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.040182][ T8954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.318156][ T5584] usb 3-1: USB disconnect, device number 13 [ 311.406955][ T9245] input: syz0 as /devices/virtual/input/input25 [ 311.465177][ T43] hsr_slave_0: left promiscuous mode [ 311.522992][ T43] hsr_slave_1: left promiscuous mode [ 311.527336][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.527366][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.617381][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.617413][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.861337][ T43] veth1_macvtap: left promiscuous mode [ 311.861462][ T43] veth0_macvtap: left promiscuous mode [ 311.861870][ T43] veth1_vlan: left promiscuous mode [ 311.862081][ T43] veth0_vlan: left promiscuous mode [ 311.862181][ T9251] 9p: Bad value for 'rfdno' [ 312.183597][ T9256] loop6: detected capacity change from 0 to 7 [ 312.338044][ T9256] Dev loop6: unable to read RDB block 7 [ 312.338103][ T9256] loop6: unable to read partition table [ 312.338343][ T9256] loop6: partition table beyond EOD, truncated [ 312.338381][ T9256] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 314.848373][ T43] team0 (unregistering): Port device team_slave_1 removed [ 314.963851][ T43] team0 (unregistering): Port device team_slave_0 removed [ 316.024000][ T8954] hsr_slave_0: entered promiscuous mode [ 316.039712][ T8954] hsr_slave_1: entered promiscuous mode [ 316.044345][ T8954] debugfs: 'hsr0' already exists in 'hsr' [ 316.044371][ T8954] Cannot create hsr debugfs directory [ 316.415530][ T5717] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 316.651044][ T5717] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 316.651076][ T5717] usb 2-1: config 0 has no interface number 0 [ 316.651127][ T5717] usb 2-1: config 0 interface 41 has no altsetting 0 [ 316.706772][ T5717] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 316.706808][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.706830][ T5717] usb 2-1: Product: syz [ 316.706846][ T5717] usb 2-1: Manufacturer: syz [ 316.706861][ T5717] usb 2-1: SerialNumber: syz [ 316.755258][ T5717] usb 2-1: config 0 descriptor?? [ 317.361337][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.361420][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.827218][ T5717] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 317.937877][ T5717] usb 2-1: USB disconnect, device number 16 [ 318.839960][ T9303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.929246][ T9303] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 320.196082][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 320.473671][ T9348] loop8: detected capacity change from 0 to 8 [ 320.699107][ T9303] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 320.708196][ T59] Bluetooth: hci0: command 0x2016 tx timeout [ 320.874093][ T9348] Dev loop8: unable to read RDB block 8 [ 320.874150][ T9348] loop8: unable to read partition table [ 320.874405][ T9348] loop8: partition table beyond EOD, truncated [ 320.898193][ T9348] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 320.947303][ T9303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.955376][ T9303] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 321.444317][ T9303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.444481][ T9303] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 321.691674][ T9303] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.691776][ T9303] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 321.842010][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 321.913045][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 322.316339][ T9303] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 322.791898][ T59] Bluetooth: hci0: command 0x2016 tx timeout [ 322.992837][ T5717] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 323.032892][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 323.224839][ T5717] usb 2-1: device descriptor read/all, error -71 [ 323.502817][ T59] Bluetooth: hci3: command 0x0405 tx timeout [ 323.742918][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 324.269505][ T9401] ALSA: seq fatal error: cannot create timer (-16) [ 324.867269][ T59] Bluetooth: hci0: command 0x2016 tx timeout [ 325.103893][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 325.582900][ T59] Bluetooth: hci3: command 0x0405 tx timeout [ 325.822816][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 327.843539][ T9456] netlink: 'syz.1.1312': attribute type 18 has an invalid length. [ 327.843566][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 327.902925][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.156139][ T9456] netlink: 'syz.1.1312': attribute type 18 has an invalid length. [ 328.156165][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 328.204410][ T201] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.310781][ T201] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.354778][ T201] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.414445][ T201] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.015262][ T8954] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 330.169815][ T8954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 330.172349][ T9507] ªªªªªª: renamed from vlan0 (while UP) [ 330.351315][ T8954] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 330.401592][ T8954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.420714][ T8954] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 330.459277][ T8954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.470516][ T8954] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 330.529124][ T8954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.046031][ T8954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.236015][ T8954] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.389175][ T9205] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.390034][ T9205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.428960][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.429124][ T9214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.464084][ T5717] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 331.636339][ T5717] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 331.636373][ T5717] usb 4-1: config 0 has no interface number 0 [ 331.636413][ T5717] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 331.636439][ T5717] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64 [ 331.636484][ T5717] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 331.636508][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.709677][ T5717] usb 4-1: config 0 descriptor?? [ 331.711052][ T9541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.771871][ T5717] iowarrior 4-1:0.64: IOWarrior product=0x1512, serial= interface=64 now attached to iowarrior0 [ 331.926905][ T7282] usb 4-1: USB disconnect, device number 15 [ 332.798098][ T9571] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1345'. [ 332.919715][ T9571] gretap0: entered promiscuous mode [ 332.964585][ T9574] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1345'. [ 333.228231][ T9574] 0ªî{X¹¦: renamed from gretap0 [ 333.295601][ T9574] 0ªî{X¹¦: left promiscuous mode [ 333.295631][ T9574] 0ªî{X¹¦: entered allmulticast mode [ 333.329600][ T9574] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 334.531210][ T8954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.647392][ T8954] veth0_vlan: entered promiscuous mode [ 335.906063][ T8954] veth1_vlan: entered promiscuous mode [ 336.128182][ T8954] veth0_macvtap: entered promiscuous mode [ 336.195515][ T8954] veth1_macvtap: entered promiscuous mode [ 336.335206][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.471660][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.534035][ T86] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.580485][ T86] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.581200][ T86] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.581247][ T86] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.895904][ T5730] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 337.234207][ T5730] usb 4-1: Using ep0 maxpacket: 32 [ 337.244296][ T5730] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 337.244325][ T5730] usb 4-1: config 0 has no interface number 0 [ 337.244379][ T5730] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.244407][ T5730] usb 4-1: config 0 interface 85 has no altsetting 0 [ 337.257053][ T5730] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 337.257083][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.257103][ T5730] usb 4-1: Product: syz [ 337.257117][ T5730] usb 4-1: Manufacturer: syz [ 337.257130][ T5730] usb 4-1: SerialNumber: syz [ 337.298119][ T5730] usb 4-1: config 0 descriptor?? [ 338.058091][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 338.071055][ T5730] appletouch 4-1:0.85: Geyser mode initialized. [ 338.159017][ T5730] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input29 [ 338.649909][ T5730] usb 4-1: USB disconnect, device number 16 [ 338.910168][ T9656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.649758][ T5730] appletouch 4-1:0.85: input: appletouch disconnected [ 339.796285][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.796310][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.833248][ T9668] erspan0 speed is unknown, defaulting to 1000 [ 340.297159][ T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.297183][ T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.713594][ T9694] loop8: detected capacity change from 0 to 8 [ 340.762408][ T9692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.801513][ T9694] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 340.801927][ T9694] loop8: p1 start 808266089 is beyond EOD, truncated [ 340.801952][ T9694] loop8: p2 start 3695907497 is beyond EOD, truncated [ 340.801970][ T9694] loop8: p3 start 2222 is beyond EOD, truncated [ 340.801988][ T9694] loop8: p4 start 1684284275 is beyond EOD, truncated [ 340.802005][ T9694] loop8: p5 start 1506613315 is beyond EOD, truncated [ 340.802022][ T9694] loop8: p6 start 1401545024 is beyond EOD, truncated [ 340.802039][ T9694] loop8: p7 start 1879513920 is beyond EOD, truncated [ 340.802056][ T9694] loop8: p8 start 2737222337 is beyond EOD, truncated [ 340.802073][ T9694] loop8: p9 start 1399688579 is beyond EOD, truncated [ 340.802090][ T9694] loop8: p10 start 1878206438 is beyond EOD, truncated [ 340.802107][ T9694] loop8: p11 start 3948687153 is beyond EOD, truncated [ 340.802125][ T9694] loop8: p12 start 1740591330 is beyond EOD, truncated [ 341.934796][ T5731] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 342.257177][ T5731] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 342.257212][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.257233][ T5731] usb 2-1: Product: syz [ 342.257249][ T5731] usb 2-1: Manufacturer: syz [ 342.257264][ T5731] usb 2-1: SerialNumber: syz [ 342.280932][ T5731] usb 2-1: config 0 descriptor?? [ 342.362887][ T42] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 342.555957][ T42] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 342.555993][ T42] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 342.556016][ T42] usb 3-1: Product: syz [ 342.556031][ T42] usb 3-1: SerialNumber: syz [ 342.616829][ T42] usb 3-1: config 0 descriptor?? [ 342.732571][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 342.732610][ T9730] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 342.733889][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 342.816185][ T5731] usb 2-1: Firmware: major: 141, minor: 82, hardware type: UNKNOWN (66) [ 342.848399][ T42] hso 3-1:0.0: Can't find BULK endpoints [ 343.020049][ T5731] usb 2-1: no permanent extended address found, random address set [ 343.020096][ T5731] usb 2-1: atusb_probe: initialization failed, error = -524 [ 343.020966][ T5731] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 343.059526][ T9730] geneve2: entered promiscuous mode [ 343.059702][ T9730] geneve2: entered allmulticast mode [ 343.092264][ T5731] usb 3-1: USB disconnect, device number 14 [ 343.245042][ T197] usb 2-1: USB disconnect, device number 19 [ 343.542447][ T9739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.542468][ T9739] IPv6: NLM_F_CREATE should be set when creating new route [ 343.588381][ T9739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.230724][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 344.230752][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'. [ 344.235414][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 344.235434][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'. [ 344.398813][ T9745] Process accounting resumed [ 344.762918][ T42] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 344.923028][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 344.929000][ T42] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 344.929030][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.929050][ T42] usb 3-1: config 0 has no interface number 0 [ 344.932614][ T42] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 344.932645][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 344.981790][ T42] usb 3-1: Product: syz [ 344.981813][ T42] usb 3-1: Manufacturer: syz [ 344.981829][ T42] usb 3-1: SerialNumber: syz [ 345.013958][ T42] usb 3-1: config 0 descriptor?? [ 345.063398][ T42] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 345.063599][ T42] uvcvideo 3-1:0.105: No valid video chain found. [ 347.066923][ T5717] usb 3-1: USB disconnect, device number 15 [ 347.565321][ T9836] netlink: 'syz.5.1437': attribute type 6 has an invalid length. [ 348.383653][ T5696] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 348.534094][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 348.541381][ T5696] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 348.541414][ T5696] usb 1-1: config 0 has no interface number 0 [ 348.566413][ T5696] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 348.566448][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.566468][ T5696] usb 1-1: Product: syz [ 348.566484][ T5696] usb 1-1: Manufacturer: syz [ 348.566499][ T5696] usb 1-1: SerialNumber: syz [ 348.626129][ T5696] usb 1-1: config 0 descriptor?? [ 349.142087][ T9872] binder: 9871:9872 ioctl c018620c 200000000240 returned -22 [ 349.649850][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1459'. [ 349.659213][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 349.659242][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 349.687452][ T5696] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 349.687608][ T5696] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 349.690876][ T5696] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 349.691258][ T5696] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 349.757146][ T5696] usb 1-1: USB disconnect, device number 10 [ 350.362811][ T5696] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 350.546001][ T5696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.546064][ T5696] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 350.546094][ T5696] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.549186][ T5696] usb 2-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 350.549219][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.549241][ T5696] usb 2-1: Product: syz [ 350.549257][ T5696] usb 2-1: Manufacturer: syz [ 350.549272][ T5696] usb 2-1: SerialNumber: syz [ 350.639956][ T9897] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.950367][ T5696] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.950486][ T5696] usb 2-1: MIDIStreaming interface descriptor not found [ 351.381511][ T5696] usb 2-1: USB disconnect, device number 20 [ 352.404172][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 352.677579][ T9932] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 353.455837][ T5696] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 353.638778][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 353.640884][ T5696] usb 1-1: config 3 has an invalid interface number: 219 but max is 0 [ 353.640915][ T5696] usb 1-1: config 3 has no interface number 0 [ 353.640951][ T5696] usb 1-1: config 3 interface 219 has no altsetting 0 [ 353.679167][ T5696] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.15 [ 353.679204][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.679228][ T5696] usb 1-1: Product: syz [ 353.679246][ T5696] usb 1-1: Manufacturer: syz [ 353.679263][ T5696] usb 1-1: SerialNumber: syz [ 354.098950][ T5696] ftdi_sio 1-1:3.219: FTDI USB Serial Device converter detected [ 354.157567][ T5696] ftdi_sio ttyUSB0: unknown device type: 0x9015 [ 354.185686][ T5696] usb 1-1: USB disconnect, device number 11 [ 354.189725][ T5696] ftdi_sio 1-1:3.219: device disconnected [ 354.356767][ T9932] bond1 (unregistering): Released all slaves [ 354.801104][ T9946] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.864587][ T9946] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.061164][ T9968] Process accounting resumed [ 358.648766][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 360.263030][ T5717] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 360.432799][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 360.434144][ T5717] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 360.436995][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.441318][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.444664][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.446352][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.448531][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.459468][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.461795][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.533588][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.535360][ T5717] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 360.535451][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 360.535472][ T5717] usb 4-1: SerialNumber: syz [ 360.564364][ T5717] usb 4-1: config 0 descriptor?? [ 360.688109][ T5717] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 360.806394][ T4946] bcm5974 4-1:0.0: could not read from device [ 360.888622][ T4946] bcm5974 4-1:0.0: could not read from device [ 360.889109][ T5717] usb 4-1: USB disconnect, device number 17 [ 361.042885][ T5584] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 361.196685][ T5584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.196722][ T5584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.196762][ T5584] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 361.196786][ T5584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.249467][ T5584] usb 2-1: config 0 descriptor?? [ 361.760196][ T5584] hid_parser_main: 32 callbacks suppressed [ 361.760246][ T5584] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 361.761662][ T5584] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 361.761702][ T5584] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 361.761728][ T5584] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 361.761753][ T5584] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 361.761776][ T5584] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 361.761800][ T5584] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 361.873954][ T5584] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 362.507609][ T5584] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 362.507676][ T5584] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 362.563514][ T5584] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 362.594184][ T5584] usb 2-1: USB disconnect, device number 21 [ 363.444783][ T5731] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 363.632417][ T5731] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 363.632557][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.632582][ T5731] usb 3-1: Product: syz [ 363.632597][ T5731] usb 3-1: Manufacturer: syz [ 363.632612][ T5731] usb 3-1: SerialNumber: syz [ 363.679402][ T5731] usb 3-1: config 0 descriptor?? [ 363.985185][ T5731] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.645179][ T5731] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 364.672043][ T5731] usb 3-1: USB disconnect, device number 16 [ 364.772949][ T5584] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 364.969975][ T5584] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.970006][ T5584] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.986196][ T5584] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 364.986231][ T5584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.986253][ T5584] usb 4-1: SerialNumber: syz [ 365.292994][ T5584] usb 4-1: 0:2 : does not exist [ 365.456920][ T5584] usb 4-1: USB disconnect, device number 18 [ 365.613980][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.262805][ T5584] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 366.412830][ T5584] usb 1-1: Using ep0 maxpacket: 16 [ 366.416192][ T5584] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 366.416229][ T5584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 366.421820][ T5584] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 366.421857][ T5584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.421888][ T5584] usb 1-1: Product: syz [ 366.421906][ T5584] usb 1-1: Manufacturer: syz [ 366.421921][ T5584] usb 1-1: SerialNumber: syz [ 366.491754][ T5584] usb 1-1: config 0 descriptor?? [ 366.523352][ T5584] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 366.523389][ T5584] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 366.962442][ T36] kauditd_printk_skb: 135 callbacks suppressed [ 366.962463][ T36] audit: type=1326 audit(1783856218.534:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 366.985435][ T36] audit: type=1326 audit(1783856218.534:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 366.985501][ T36] audit: type=1326 audit(1783856218.564:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 366.985544][ T36] audit: type=1326 audit(1783856218.564:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 366.985586][ T36] audit: type=1326 audit(1783856218.564:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 366.985629][ T36] audit: type=1326 audit(1783856218.564:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 366.985672][ T36] audit: type=1326 audit(1783856218.564:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 366.985713][ T36] audit: type=1326 audit(1783856218.564:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 366.998152][ T36] audit: type=1326 audit(1783856218.564:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 367.033612][ T36] audit: type=1326 audit(1783856218.614:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 367.241191][ T5584] em28xx 1-1:0.0: unknown em28xx chip ID (102) [ 367.321855][T10257] netlink: 'syz.3.1624': attribute type 83 has an invalid length. [ 367.330820][ T5584] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 367.332172][ T5584] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 367.332249][ T5584] em28xx 1-1:0.0: No AC97 audio processor [ 367.415921][ T5584] usb 1-1: USB disconnect, device number 12 [ 367.436354][ T5584] em28xx 1-1:0.0: Disconnecting em28xx [ 367.490295][ T5584] em28xx 1-1:0.0: Freeing device [ 368.627357][T10318] input: syz1 as /devices/virtual/input/input31 [ 369.007646][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 371.845369][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060c13000: rx timeout, send abort [ 372.342876][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804ea72800: rx timeout, send abort [ 372.347426][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060c13000: abort rx timeout. Force session deactivation [ 372.842959][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804ea72800: abort rx timeout. Force session deactivation [ 373.741465][T10526] netlink: 'syz.2.1745': attribute type 4 has an invalid length. [ 373.792110][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 374.092812][ T5584] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 374.285906][ T5584] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 374.285941][ T5584] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 374.285963][ T5584] usb 1-1: config 220 has no interface number 2 [ 374.286049][ T5584] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 374.286079][ T5584] usb 1-1: config 220 interface 0 has no altsetting 0 [ 374.286099][ T5584] usb 1-1: config 220 interface 76 has no altsetting 0 [ 374.286118][ T5584] usb 1-1: config 220 interface 1 has no altsetting 0 [ 374.290010][ T5584] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 374.290042][ T5584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.290062][ T5584] usb 1-1: Product: syz [ 374.290075][ T5584] usb 1-1: Manufacturer: syz [ 374.290089][ T5584] usb 1-1: SerialNumber: syz [ 374.734362][ T5584] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 374.734408][ T5584] uvcvideo 1-1:220.0: No valid video chain found. [ 374.734475][ T5584] usb 1-1: selecting invalid altsetting 0 [ 374.785367][ T5584] usb 1-1: selecting invalid altsetting 0 [ 374.785411][ T5584] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 374.843556][ T5584] usb 1-1: USB disconnect, device number 13 [ 375.836768][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 375.860416][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 377.994409][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060133000: rx timeout, send abort [ 378.464633][T10696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.464654][T10696] IPv6: NLM_F_CREATE should be set when creating new route [ 378.494497][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060133000: abort rx timeout. Force session deactivation [ 378.500946][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060133800: rx timeout, send abort [ 378.803237][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.803317][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.001019][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060133800: abort rx timeout. Force session deactivation [ 381.452851][ T5731] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 381.612904][ T5731] usb 3-1: Using ep0 maxpacket: 8 [ 381.630758][ T5731] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 381.630796][ T5731] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 381.630823][ T5731] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2560, setting to 1024 [ 381.630850][ T5731] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 381.630874][ T5731] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.630919][ T5731] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.630942][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.981750][ T5731] usb 3-1: GET_CAPABILITIES returned 0 [ 381.981808][ T5731] usbtmc 3-1:16.0: can't read capabilities [ 382.208343][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 382.322512][ T5717] usb 3-1: USB disconnect, device number 17 [ 383.752794][ T5730] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 383.926375][ T5730] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.926423][ T5730] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 383.929476][ T5730] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.929510][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.929531][ T5730] usb 4-1: Product: syz [ 383.929546][ T5730] usb 4-1: Manufacturer: syz [ 383.929561][ T5730] usb 4-1: SerialNumber: syz [ 383.999676][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 383.999698][ T36] audit: type=1326 audit(1783856235.574:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.114135][ T36] audit: type=1326 audit(1783856235.604:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.114183][ T36] audit: type=1326 audit(1783856235.604:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.114232][ T36] audit: type=1326 audit(1783856235.604:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.114295][ T36] audit: type=1326 audit(1783856235.604:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.114329][ T36] audit: type=1326 audit(1783856235.604:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.114356][ T36] audit: type=1326 audit(1783856235.604:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.114402][ T36] audit: type=1326 audit(1783856235.614:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.114450][ T36] audit: type=1326 audit(1783856235.614:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.114495][ T36] audit: type=1326 audit(1783856235.614:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10873 comm="syz.2.1909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fbd0263de59 code=0x7ffc0000 [ 384.374329][T10858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.377169][T10858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.445519][ T5730] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 384.488954][ T5730] usb 4-1: USB disconnect, device number 19 [ 384.513150][T10887] netlink: 64595 bytes leftover after parsing attributes in process `syz.2.1913'. [ 385.025364][ T5730] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 385.172800][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 385.177092][ T5730] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 385.177134][ T5730] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 385.177189][ T5730] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.177214][ T5730] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.177241][ T5730] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 385.177268][ T5730] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.177297][ T5730] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.177344][ T5730] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.177368][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.501288][ T5730] usb 4-1: usb_control_msg returned -32 [ 385.501345][ T5730] usbtmc 4-1:16.0: can't read capabilities [ 385.501744][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.502003][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.502255][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.502492][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.506524][ C0] usbtmc 4-1:16.0: invalid notification: 11 [ 385.506774][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.507233][ C0] usbtmc 4-1:16.0: invalid notification: 2 [ 385.507451][ C0] usbtmc 4-1:16.0: invalid notification: 5 [ 385.507669][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.507907][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.508141][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.508386][ C0] usbtmc 4-1:16.0: invalid notification: 40 [ 385.508957][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.509197][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.509435][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.509692][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.509931][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.510167][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.510403][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.510642][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.510872][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.511121][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.511355][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.511595][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.511833][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.512068][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.512303][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.512537][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.512838][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.513101][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.513342][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.513575][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.513814][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.514060][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.514314][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.514546][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.514785][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.515031][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.515264][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.515497][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.515729][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.515958][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.516205][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.516442][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.516679][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.516916][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.517138][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.517356][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.517570][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.517794][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.518012][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.518221][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.518432][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.518637][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.518860][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.519082][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.519298][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.519510][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.519731][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.519967][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.520217][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.520456][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.520687][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.520923][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.521158][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.521387][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.521615][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.521844][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.522074][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.522303][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.522534][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.522776][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.523018][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.523283][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.523513][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.523751][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.523995][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.524250][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.524483][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.524713][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.524962][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.525212][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.525444][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.525690][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.525924][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.526151][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.526382][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.526615][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.526855][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.527092][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.527333][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.527567][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.527803][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.528044][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.528291][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.528521][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.528757][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.529020][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.529258][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.529494][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.529729][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.529960][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.530202][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.530432][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.530667][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.530917][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.531164][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.531416][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.531656][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.531900][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.532136][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.532365][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.532600][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.532841][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.533072][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.533304][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.533535][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.533771][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.534010][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.534242][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.534474][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.534706][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.534940][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.535176][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.535413][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.535662][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.535899][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.536135][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.536372][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.536605][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.536839][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.537067][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.537298][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.537547][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.537786][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.538038][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.538272][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.538507][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.538737][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.538998][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.539229][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.539461][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.539692][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.539921][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.540152][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.540388][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.540626][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.540864][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.541117][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.541350][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.543571][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.543828][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.544069][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.544302][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.545731][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.546360][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.546609][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.546845][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.547100][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.547330][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.547579][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.547824][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.548061][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.548298][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.548534][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.548783][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.549034][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.549268][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.549503][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.549723][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.549937][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.550165][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.550374][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.550583][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.550795][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.551021][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.551235][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.551443][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.551654][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.551863][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.552072][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.552283][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.552503][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.552759][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.552976][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.553209][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.553417][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.553628][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.553847][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.554088][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.554302][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.554520][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.554738][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 385.554993][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 386.804717][ T5730] usb 4-1: USB disconnect, device number 20 [ 388.172857][ T5696] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 388.325353][ T5696] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 388.325386][ T5696] usb 4-1: config 1 has no interface number 0 [ 388.325446][ T5696] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.325475][ T5696] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 388.325504][ T5696] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 388.325541][ T5696] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 388.325570][ T5696] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 388.328583][ T5696] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.328615][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.328637][ T5696] usb 4-1: Product: syz [ 388.328652][ T5696] usb 4-1: Manufacturer: syz [ 388.328666][ T5696] usb 4-1: SerialNumber: syz [ 388.419617][T10973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 388.630715][T10973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 388.839890][T10973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 389.243467][T10973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 389.249333][ T5696] cdc_ncm 4-1:1.1: bind() failure [ 389.486247][ T5731] usb 4-1: USB disconnect, device number 21 [ 394.532939][ T5730] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 394.694917][ T5730] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 394.694951][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.694973][ T5730] usb 3-1: Product: syz [ 394.694988][ T5730] usb 3-1: Manufacturer: syz [ 394.695003][ T5730] usb 3-1: SerialNumber: syz [ 394.740707][ T5730] usb 3-1: config 0 descriptor?? [ 394.767124][ T5730] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 395.978162][ T5730] gspca_sunplus: reg_w_riv err -71 [ 395.978268][ T5730] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 396.021155][ T5730] usb 3-1: USB disconnect, device number 18 [ 396.687367][T11285] sctp: [Deprecated]: syz.2.2102 (pid 11285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.687367][T11285] Use struct sctp_sack_info instead [ 399.102910][ T197] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 399.252856][ T197] usb 3-1: Using ep0 maxpacket: 8 [ 399.255230][ T197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.255292][ T197] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 399.255318][ T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.304331][ T197] usb 3-1: config 0 descriptor?? [ 399.348645][ T197] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 401.406827][ T197] usb 3-1: USB disconnect, device number 19 [ 402.103030][ T197] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 402.262803][ T197] usb 3-1: Using ep0 maxpacket: 32 [ 402.265440][ T197] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.270894][ T197] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.270928][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.270950][ T197] usb 3-1: Product: syz [ 402.270965][ T197] usb 3-1: Manufacturer: syz [ 402.270979][ T197] usb 3-1: SerialNumber: syz [ 402.693110][ T7282] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 402.867510][ T7282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.867545][ T7282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.867567][ T7282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.867612][ T7282] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.867638][ T7282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.889560][ T7282] usb 4-1: config 0 descriptor?? [ 403.207358][ T197] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 403.219080][ T197] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 403.243975][ T197] cdc_ncm 3-1:1.0: bind() failure [ 403.269371][ T197] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 403.269427][ T197] cdc_ncm 3-1:1.1: bind() failure [ 403.298701][ T197] usb 3-1: USB disconnect, device number 20 [ 403.350776][ T7282] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 403.350824][ T7282] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 403.350848][ T7282] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 403.350870][ T7282] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 403.350894][ T7282] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 403.350919][ T7282] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 403.350944][ T7282] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 403.757433][ T7282] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 404.055382][ T197] usb 4-1: USB disconnect, device number 22 [ 406.852876][ T5731] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 407.022761][ T5731] usb 3-1: Using ep0 maxpacket: 32 [ 407.027450][ T5731] usb 3-1: unable to get BOS descriptor or descriptor too short [ 407.029910][ T5731] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 407.029942][ T5731] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 407.029964][ T5731] usb 3-1: config 14 has no interface number 0 [ 407.029982][ T5731] usb 3-1: config 14 has no interface number 1 [ 407.030070][ T5731] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 407.030110][ T5731] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 407.030139][ T5731] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 407.030167][ T5731] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 407.030198][ T5731] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 407.030226][ T5731] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.030256][ T5731] usb 3-1: config 14 interface 57 has no altsetting 0 [ 407.030276][ T5731] usb 3-1: config 14 interface 228 has no altsetting 0 [ 407.055784][ T5731] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 407.055820][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.055843][ T5731] usb 3-1: Product: syz [ 407.055859][ T5731] usb 3-1: Manufacturer: syz [ 407.055874][ T5731] usb 3-1: SerialNumber: syz [ 407.667868][ T5731] legousbtower 3-1:14.57: interrupt endpoints not found [ 407.823366][ T5696] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 407.983083][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 407.986843][ T5696] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 407.986877][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.994388][ T5696] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 407.994429][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.994451][ T5696] usb 1-1: Product: syz [ 407.994467][ T5696] usb 1-1: Manufacturer: syz [ 407.994482][ T5696] usb 1-1: SerialNumber: syz [ 408.017289][ T5696] usb 1-1: config 0 descriptor?? [ 408.087610][ T5731] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 408.174511][ T5696] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 408.177871][ T5731] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 408.828023][ T5717] usb 3-1: USB disconnect, device number 21 [ 408.844011][T11684] usb 3-1: LEGO USB Tower reset control request failed [ 409.088119][ T5717] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 409.693761][ T5696] gspca_sunplus: reg_r err -71 [ 409.693872][ T5696] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 409.715779][ T5696] usb 1-1: USB disconnect, device number 14 [ 410.822797][ T197] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 410.830828][T11761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 410.976783][ T197] usb 3-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 410.976817][ T197] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 410.976890][ T197] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 42, using maximum allowed: 30 [ 410.976932][ T197] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 42 [ 410.976960][ T197] usb 3-1: config 1 interface 0 has no altsetting 0 [ 411.014381][ T197] usb 3-1: string descriptor 0 read error: -22 [ 411.014545][ T197] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 411.014573][ T197] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 411.086120][ T197] usb 3-1: 0:2 : does not exist [ 411.236827][ T197] usb-storage 3-1:1.1: USB Mass Storage device detected [ 411.875293][ T197] usb 3-1: us122l: couldn't allocate write buffer [ 411.876179][ T197] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 411.886255][ T197] usb 3-1: USB disconnect, device number 22 [ 414.612942][T11886] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2376'. [ 416.176800][T11940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 416.177090][T11940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.177292][T11940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.177489][T11940] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 416.179495][T11950] netlink: 'syz.0.2407': attribute type 4 has an invalid length. [ 416.254583][T11952] netlink: 'syz.0.2407': attribute type 4 has an invalid length. [ 417.522853][ T5717] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 417.784398][ T5717] usb 1-1: Using ep0 maxpacket: 32 [ 417.803489][ T5717] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 417.803524][ T5717] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 417.803547][ T5717] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 417.803570][ T5717] usb 1-1: config 1 has no interface number 0 [ 417.803631][ T5717] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 417.803660][ T5717] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 417.803726][ T5717] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 417.803753][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.963613][ T5717] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 418.160840][ T5717] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 418.222884][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 418.222933][ T5610] Bluetooth: hci0: command 0x2016 tx timeout [ 418.222965][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 418.223001][ T4910] Bluetooth: hci3: command 0x0405 tx timeout [ 418.639061][T11984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2421'. [ 418.782349][ T5717] usb 1-1: USB disconnect, device number 15 [ 418.809883][T12024] loop2: detected capacity change from 0 to 7 [ 418.819457][ T5717] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 419.344977][T12024] Dev loop2: unable to read RDB block 7 [ 419.345036][T12024] loop2: unable to read partition table [ 419.346945][T12024] loop2: partition table beyond EOD, truncated [ 419.346979][T12024] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 421.544252][T12112] tmpfs: Unsupported parameter 'huge' [ 425.391260][T12252] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 425.391493][T12252] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 427.788639][T12314] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 427.872830][ T5735] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 427.965676][T12318] bond1: (slave geneve2): making interface the new active one [ 427.978787][T12318] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 427.980441][ T3052] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 427.980490][ T3052] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 427.980526][ T3052] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 427.980561][ T3052] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 428.025809][ T5735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.025840][ T5735] usb 1-1: config 0 has no interfaces? [ 428.046332][ T5735] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 428.046367][ T5735] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 428.046390][ T5735] usb 1-1: Product: syz [ 428.046405][ T5735] usb 1-1: Manufacturer: syz [ 428.046421][ T5735] usb 1-1: SerialNumber: syz [ 428.088795][ T5735] usb 1-1: config 0 descriptor?? [ 428.570941][ T5735] usb 1-1: USB disconnect, device number 16 [ 430.963695][ T5735] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 431.172437][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.172473][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.172496][ T5735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.172539][ T5735] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.172565][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.255696][ T5735] usb 4-1: config 0 descriptor?? [ 432.010089][ T5735] usbhid 4-1:0.0: can't add hid device: -71 [ 432.010225][ T5735] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 432.049905][ T5735] usb 4-1: USB disconnect, device number 23 [ 434.449566][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 434.449589][ T36] audit: type=1800 audit(1783856286.014:212): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2674" name="file0" dev="overlay" ino=2248 res=0 errno=0 [ 437.167235][T12623] syz_tun: entered allmulticast mode [ 437.245203][T12622] syz_tun: left allmulticast mode [ 439.892819][ T5584] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 440.044063][ T5584] usb 4-1: Using ep0 maxpacket: 32 [ 440.047019][ T5584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.047058][ T5584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.047101][ T5584] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 440.047127][ T5584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.115491][ T5584] usb 4-1: config 0 descriptor?? [ 440.243621][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.243704][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.586882][ T5584] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 440.586922][ T5584] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 440.761959][ T5584] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 440.967872][ T5584] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 441.167273][ T5584] ft260 0003:0403:6030.000E: failed to retrieve status: -32, no wakeup [ 441.168581][ T5584] ft260 0003:0403:6030.000E: failed to retrieve status: -32 [ 441.742513][ T5584] usb 4-1: USB disconnect, device number 24 [ 444.452920][ T5584] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 444.616120][ T5584] usb 3-1: config index 0 descriptor too short (expected 18482, got 18) [ 444.616155][ T5584] usb 3-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 444.616176][ T5584] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 444.619201][ T5584] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 444.619232][ T5584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.619254][ T5584] usb 3-1: Product: syz [ 444.619270][ T5584] usb 3-1: Manufacturer: syz [ 444.619285][ T5584] usb 3-1: SerialNumber: syz [ 444.947944][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 447.321518][T12943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2856'. [ 447.323751][T12943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2856'. [ 447.471968][ T5584] usb 3-1: USB disconnect, device number 23 [ 447.572874][ T42] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 447.723329][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 447.728232][ T42] usb 1-1: config 203 has an invalid interface number: 182 but max is 1 [ 447.728263][ T42] usb 1-1: config 203 has an invalid interface number: 244 but max is 1 [ 447.728286][ T42] usb 1-1: config 203 has no interface number 0 [ 447.728303][ T42] usb 1-1: config 203 has no interface number 1 [ 447.728382][ T42] usb 1-1: config 203 interface 244 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 447.728408][ T42] usb 1-1: config 203 interface 244 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 447.728438][ T42] usb 1-1: config 203 interface 244 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 447.728463][ T42] usb 1-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.728487][ T42] usb 1-1: config 203 interface 244 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 447.728512][ T42] usb 1-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.728534][ T42] usb 1-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.728555][ T42] usb 1-1: config 203 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.728577][ T42] usb 1-1: config 203 interface 244 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 447.728604][ T42] usb 1-1: config 203 interface 182 has no altsetting 0 [ 447.742320][ T42] usb 1-1: string descriptor 0 read error: -22 [ 447.742463][ T42] usb 1-1: New USB device found, idVendor=0403, idProduct=fd4b, bcdDevice=56.a8 [ 447.742576][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.790747][ T42] ftdi_sio 1-1:203.182: FTDI USB Serial Device converter detected [ 447.804482][ T42] ftdi_sio ttyUSB0: unknown device type: 0x56a8 [ 447.851360][ T42] ftdi_sio 1-1:203.244: FTDI USB Serial Device converter detected [ 447.861593][ T42] ftdi_sio ttyUSB1: unknown device type: 0x56a8 [ 448.164460][ T42] usb 1-1: USB disconnect, device number 17 [ 448.178919][ T42] ftdi_sio 1-1:203.182: device disconnected [ 448.287879][ T42] ftdi_sio 1-1:203.244: device disconnected [ 449.539269][T13014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2888'. [ 449.860581][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2888'. [ 452.871951][ T36] audit: type=1326 audit(1783856304.444:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.901323][ T36] audit: type=1326 audit(1783856304.444:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.931932][ T36] audit: type=1326 audit(1783856304.504:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.932291][ T36] audit: type=1326 audit(1783856304.504:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.932585][ T36] audit: type=1326 audit(1783856304.504:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.954483][ T36] audit: type=1326 audit(1783856304.524:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.954538][ T36] audit: type=1326 audit(1783856304.524:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.954581][ T36] audit: type=1326 audit(1783856304.524:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.954640][ T36] audit: type=1326 audit(1783856304.524:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.954685][ T36] audit: type=1326 audit(1783856304.524:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13148 comm="syz.3.2948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b417de59 code=0x7ffc0000 [ 452.990132][T13154] loop2: detected capacity change from 0 to 7 [ 453.096016][T13154] Dev loop2: unable to read RDB block 7 [ 453.096068][T13154] loop2: unable to read partition table [ 453.096280][T13154] loop2: partition table beyond EOD, truncated [ 453.096323][T13154] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.960523][T13238] blkio.reset_stats is deprecated [ 457.724128][T13282] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 459.795847][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 459.795880][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 460.151652][T13382] fuse: Unknown parameter 'qd' [ 461.209637][T13418] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 461.387579][T13418] bond2 (unregistering): Released all slaves [ 461.673085][ T5731] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 461.833883][T13442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.835794][ T5731] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 461.835831][ T5731] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.835877][ T5731] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 461.835902][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.080258][ T5731] usb 1-1: usb_control_msg returned -32 [ 462.080317][ T5731] usbtmc 1-1:16.0: can't read capabilities [ 462.882822][T13478] netlink: 'syz.2.3094': attribute type 4 has an invalid length. [ 464.372121][ T5735] usb 1-1: USB disconnect, device number 18 [ 464.862811][ T5735] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 465.021730][ T5735] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 465.021767][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.021788][ T5735] usb 1-1: Product: syz [ 465.021804][ T5735] usb 1-1: Manufacturer: syz [ 465.021819][ T5735] usb 1-1: SerialNumber: syz [ 465.050878][ T5735] usb 1-1: config 0 descriptor?? [ 465.061070][ T5735] ch341 1-1:0.0: ch341-uart converter detected [ 466.411385][ T5735] ch341-uart ttyUSB0: break control not supported, using simulated break [ 466.423835][ T5735] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 467.009203][ T42] usb 1-1: USB disconnect, device number 19 [ 467.231842][ T42] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 467.256556][ T42] ch341 1-1:0.0: device disconnected [ 469.132102][T13671] fuse: fd is not a fuse device [ 469.836795][T13691] fuse: fd is not a fuse device [ 470.688709][T13718] erspan0 speed is unknown, defaulting to 1000 [ 478.129079][T13891] binder_alloc: 13887: pid 13887 spamming oneway? 1 buffers allocated for a total size of 4096 [ 478.872842][ T42] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 479.155854][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 479.174845][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.174876][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 479.174931][ T42] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.206454][T13918] fuse: fd is not a fuse device [ 479.224285][ T42] usb 1-1: string descriptor 0 read error: -22 [ 479.224456][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.224484][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.687103][ T5731] usb 1-1: USB disconnect, device number 20 [ 480.720210][T13929] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 482.182069][ T5584] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 482.511194][ T5584] usb 1-1: unable to get BOS descriptor or descriptor too short [ 482.598783][ T5584] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 482.598825][ T5584] usb 1-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 482.626728][ T5584] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 482.626766][ T5584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.626787][ T5584] usb 1-1: Product: syz [ 482.626803][ T5584] usb 1-1: Manufacturer: syz [ 482.626818][ T5584] usb 1-1: SerialNumber: syz [ 483.008880][T13966] netlink: 'syz.3.3301': attribute type 11 has an invalid length. [ 483.685143][ T42] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 483.776244][ T5696] usb 1-1: USB disconnect, device number 21 [ 483.875537][ T42] usb 3-1: config index 0 descriptor too short (expected 18450, got 18) [ 483.875571][ T42] usb 3-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 483.875593][ T42] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 483.878646][ T42] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 483.878678][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.878700][ T42] usb 3-1: Product: syz [ 483.878715][ T42] usb 3-1: Manufacturer: syz [ 483.878730][ T42] usb 3-1: SerialNumber: syz [ 486.363571][ T42] usb 3-1: USB disconnect, device number 24 [ 490.027547][T14123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.156871][T14128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.164633][T14128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.631739][ T43] ------------[ cut here ]------------ [ 490.631757][ T43] intreq != rdev->scan_req && intreq != rdev->int_scan_req [ 490.631768][ T43] WARNING: net/wireless/scan.c:1200 at cfg80211_scan_done+0x2ca/0x460, CPU#0: kworker/u8:2/43 [ 490.632000][ T43] Modules linked in: [ 490.632022][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.632051][ T43] Tainted: [L]=SOFTLOCKUP [ 490.632058][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.632072][ T43] Workqueue: events_unbound cfg80211_wiphy_work [ 490.632128][ T43] RIP: 0010:cfg80211_scan_done+0x2ca/0x460 [ 490.632161][ T43] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 85 c3 38 f7 90 0f 0b 90 e9 2f fe ff ff e8 77 c3 38 f7 90 <0f> 0b 90 e9 d4 fe ff ff e8 69 c3 38 f7 48 8d 3d f2 8b 33 05 67 48 [ 490.632179][ T43] RSP: 0018:ffffc90000b47960 EFLAGS: 00010293 [ 490.632196][ T43] RAX: ffffffff8a8c74f9 RBX: ffff888032a6ca18 RCX: ffff88801f693e00 [ 490.632213][ T43] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.632226][ T43] RBP: ffffc90000b47a20 R08: 0000000000000000 R09: 0000000000000000 [ 490.632239][ T43] R10: dffffc0000000000 R11: fffffbfff1f5efff R12: ffff888032a6ca00 [ 490.632255][ T43] R13: ffff888060c20278 R14: dffffc0000000000 R15: ffff888060c20880 [ 490.632270][ T43] FS: 0000000000000000(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 490.632285][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.632325][ T43] CR2: 000055557ef78a38 CR3: 0000000034cea000 CR4: 00000000003526f0 [ 490.632344][ T43] Call Trace: [ 490.632353][ T43] [ 490.632366][ T43] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 490.632439][ T43] __ieee80211_scan_completed+0x548/0xb20 [ 490.632540][ T43] cfg80211_wiphy_work+0x29e/0x420 [ 490.632569][ T43] ? process_scheduled_works+0xa20/0x14e0 [ 490.632763][ T43] process_scheduled_works+0xa8e/0x14e0 [ 490.632823][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 490.632865][ T43] ? assign_work+0x3cf/0x5d0 [ 490.632898][ T43] worker_thread+0xa47/0xfb0 [ 490.632958][ T43] kthread+0x388/0x470 [ 490.633014][ T43] ? __pfx_worker_thread+0x10/0x10 [ 490.633040][ T43] ? __pfx_kthread+0x10/0x10 [ 490.633075][ T43] ret_from_fork+0x514/0xb70 [ 490.633163][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 490.633196][ T43] ? __switch_to+0xc89/0x1420 [ 490.633248][ T43] ? __pfx_kthread+0x10/0x10 [ 490.633281][ T43] ret_from_fork_asm+0x1a/0x30 [ 490.633351][ T43] [ 490.633379][ T43] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 490.633398][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.633427][ T43] Tainted: [L]=SOFTLOCKUP [ 490.633435][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.633448][ T43] Workqueue: events_unbound cfg80211_wiphy_work [ 490.633475][ T43] Call Trace: [ 490.633483][ T43] [ 490.633491][ T43] vpanic+0x56c/0xa60 [ 490.633524][ T43] ? __pfx__printk+0x10/0x10 [ 490.633548][ T43] ? __pfx_vpanic+0x10/0x10 [ 490.633565][ T43] ? is_bpf_text_address+0x292/0x2b0 [ 490.633729][ T43] ? is_bpf_text_address+0x26/0x2b0 [ 490.633763][ T43] panic+0xc5/0xd0 [ 490.633788][ T43] ? __pfx_panic+0x10/0x10 [ 490.633821][ T43] ? ret_from_fork_asm+0x1a/0x30 [ 490.633851][ T43] __warn+0x315/0x4c0 [ 490.633869][ T43] ? cfg80211_scan_done+0x2ca/0x460 [ 490.633899][ T43] ? cfg80211_scan_done+0x2ca/0x460 [ 490.633927][ T43] __report_bug+0x331/0x530 [ 490.633998][ T43] ? cfg80211_scan_done+0x2ca/0x460 [ 490.634028][ T43] ? __pfx___report_bug+0x10/0x10 [ 490.634055][ T43] ? __lock_acquire+0x683/0x2ce0 [ 490.634124][ T43] ? cfg80211_scan_done+0x2ca/0x460 [ 490.634151][ T43] report_bug+0x16a/0x220 [ 490.634174][ T43] ? cfg80211_scan_done+0x2ca/0x460 [ 490.634201][ T43] ? cfg80211_scan_done+0x2cc/0x460 [ 490.634227][ T43] handle_bug+0x9c/0x200 [ 490.634276][ T43] exc_invalid_op+0x1a/0x50 [ 490.634295][ T43] asm_exc_invalid_op+0x1a/0x20 [ 490.634335][ T43] RIP: 0010:cfg80211_scan_done+0x2ca/0x460 [ 490.634363][ T43] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 85 c3 38 f7 90 0f 0b 90 e9 2f fe ff ff e8 77 c3 38 f7 90 <0f> 0b 90 e9 d4 fe ff ff e8 69 c3 38 f7 48 8d 3d f2 8b 33 05 67 48 [ 490.634379][ T43] RSP: 0018:ffffc90000b47960 EFLAGS: 00010293 [ 490.634395][ T43] RAX: ffffffff8a8c74f9 RBX: ffff888032a6ca18 RCX: ffff88801f693e00 [ 490.634409][ T43] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.634420][ T43] RBP: ffffc90000b47a20 R08: 0000000000000000 R09: 0000000000000000 [ 490.634431][ T43] R10: dffffc0000000000 R11: fffffbfff1f5efff R12: ffff888032a6ca00 [ 490.634445][ T43] R13: ffff888060c20278 R14: dffffc0000000000 R15: ffff888060c20880 [ 490.634465][ T43] ? cfg80211_scan_done+0x2c9/0x460 [ 490.634503][ T43] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 490.634542][ T43] __ieee80211_scan_completed+0x548/0xb20 [ 490.634580][ T43] cfg80211_wiphy_work+0x29e/0x420 [ 490.634616][ T43] ? process_scheduled_works+0xa20/0x14e0 [ 490.634637][ T43] process_scheduled_works+0xa8e/0x14e0 [ 490.634707][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 490.634734][ T43] ? assign_work+0x3cf/0x5d0 [ 490.634759][ T43] worker_thread+0xa47/0xfb0 [ 490.634807][ T43] kthread+0x388/0x470 [ 490.634832][ T43] ? __pfx_worker_thread+0x10/0x10 [ 490.634853][ T43] ? __pfx_kthread+0x10/0x10 [ 490.634879][ T43] ret_from_fork+0x514/0xb70 [ 490.634915][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 490.634941][ T43] ? __switch_to+0xc89/0x1420 [ 490.634967][ T43] ? __pfx_kthread+0x10/0x10 [ 490.634993][ T43] ret_from_fork_asm+0x1a/0x30 [ 490.635028][ T43] [ 490.637201][ T43] Kernel Offset: disabled