last executing test programs: 4m4.332445178s ago: executing program 3 (id=4994): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0xfa11, 0x4, 0x0, 0x5, 0x18, 0x19, "72b0aa8d9f185fffa9d4ac70b53dd79ed488b82de4996b3400feff29c99d5ccfb515df5a0a0cf9461bf05700f31298b95a0669100d772f3d4e54108fd3ca47ba", "735549f6c408b6faa46d21f5be86d09599e1fb4d3872ebd8940b0aee31ea9d8d3cca7cdef0c20a001792d507fcc6a365b1529e0da5a22a660a5ac8b2d2131e6c", "f39ccbf5cf624b2c7a70d40120f21021996397feaff4618aa3637190cd324ec0", [0x8, 0x401]}) 4m4.016233165s ago: executing program 3 (id=4997): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800"], 0x7c}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/152}, {&(0x7f0000000300)=""/217}, {&(0x7f00000000c0)=""/29}], 0x0, &(0x7f0000000400)=""/104}, 0x7fff}], 0x32, 0x0, 0x0) 4m3.706136311s ago: executing program 3 (id=4999): syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x1, 0x38c}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x13) 4m3.33635244s ago: executing program 3 (id=5002): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 4m3.078569095s ago: executing program 3 (id=5005): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) close(r1) 4m2.525866745s ago: executing program 3 (id=5013): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4m1.784536101s ago: executing program 32 (id=5013): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3m19.0373084s ago: executing program 2 (id=5357): timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000840)={{r2, r3+10000000}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x3f, &(0x7f0000000940)={0x0, 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) 3m18.913385756s ago: executing program 2 (id=5360): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101000, 0x1a2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1000, 0x80) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x0) 3m17.961161766s ago: executing program 2 (id=5369): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="64117cb4383cdc33ff42a308217594dc5f0b2664c0eb909eeae9253161a9560ff2db6b11714c93ea5cdd1dfcc9daeafec44d72c3c9ed349061e8624d64f01a9d00f4817afc23ac4b475e6a8c349f83ba2c3dba35bf6b5f", 0x57}], 0x1}}], 0x1, 0x40000d0) openat$autofs(0xffffffffffffff9c, 0x0, 0x1cb140, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x46e62b7f, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3m17.769428981s ago: executing program 2 (id=5370): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 3m17.552501766s ago: executing program 2 (id=5374): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709d", 0x24e}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) 3m16.836350024s ago: executing program 2 (id=5379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x1) 3m16.540719221s ago: executing program 33 (id=5379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x1) 2m2.512585637s ago: executing program 5 (id=6013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000180)="566a5a8ec253e57889ba328c65a1a001", 0x10}], 0x1, 0x0, 0x0, 0x24008090}, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000026c0)=""/4103, 0x1007}], 0x1}}], 0x1, 0x41, 0x0) 2m2.338739914s ago: executing program 5 (id=6015): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000090641020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e0e415020c000280080001407f0000016e2a5bd11e"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 2m2.05189365s ago: executing program 5 (id=6017): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet6(r1, &(0x7f0000000600)="e7f906892a1b3a425d395f1f125a5af106825d79997b367b1e519cfb35a3d27ec5fbfffae9f923ed54dbc257fcacec9f928024a1a52114b364dfbae9947d2a9d0b7a8df787416942753d0986595d238b509c3a3789d9a2ac929f34f6b5c1d5ac92338704374b9fc5645824de31d61a5bc5bcc74f6c5e45f3e9e5d99b8625b5f2", 0x80, 0x1, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40002001) 2m1.788916173s ago: executing program 5 (id=6020): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m0.517669633s ago: executing program 5 (id=6030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x100, 0x1403, 0x400, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040895}, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 2m0.044533221s ago: executing program 5 (id=6032): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000300)={0x0, 0x80, 0x0, 0x800e, 0x23, 0x9, 0xa, 0xa, 0x6e1c, 0xffffff98, 0xffffffff, 0x2}) 1m59.571946677s ago: executing program 34 (id=6032): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000300)={0x0, 0x80, 0x0, 0x800e, 0x23, 0x9, 0xa, 0xa, 0x6e1c, 0xffffff98, 0xffffffff, 0x2}) 1m34.331830994s ago: executing program 1 (id=6213): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x1000000}}) 1m34.179060936s ago: executing program 1 (id=6215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000416000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0xb, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x4, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xf7, 0xaa, 0x8, 0x0, 0x4}, {0xdddd0000, 0xdddd0000, 0x8, 0x6, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x7d}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x40}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xe8}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x26, 0x3, 0x10}, {0xf000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 1m33.932095017s ago: executing program 1 (id=6218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000c300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_POLICE={0x48, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x7fffffff, 0x1, 0x3, {0x5, 0x1, 0x9, 0x1, 0x7a}, {0x7, 0x1, 0xb9, 0x1, 0x0, 0xe7}, 0x1, 0x3800, 0x7}}]}]}}]}, 0x7c}}, 0x0) 1m33.736926535s ago: executing program 1 (id=6219): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 1m33.688367531s ago: executing program 1 (id=6221): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 1m33.459310039s ago: executing program 1 (id=6224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0xa09, 0x0, 0x1, {0x2, 0x1f, 0x43, 0xff, r3}, [@IFA_FLAGS={0x8, 0x8, 0x2fd}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m33.002393033s ago: executing program 35 (id=6224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0xa09, 0x0, 0x1, {0x2, 0x1f, 0x43, 0xff, r3}, [@IFA_FLAGS={0x8, 0x8, 0x2fd}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m3.510630996s ago: executing program 0 (id=6466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m2.453584817s ago: executing program 0 (id=6474): unshare(0x2000400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x10000, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000001c0), 0x0, 0x0, 0x1) 1m2.241038297s ago: executing program 0 (id=6475): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB=' '], 0x20}, 0x0, 0xe3d08660d3cd4684}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1m1.890228777s ago: executing program 0 (id=6479): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x9901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 1m1.75031998s ago: executing program 0 (id=6480): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1m1.396446652s ago: executing program 0 (id=6483): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f0000001b00)=[{&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000001940)=""/193, 0xc1}], 0x2) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) 1m0.815994667s ago: executing program 36 (id=6483): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f0000001b00)=[{&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000001940)=""/193, 0xc1}], 0x2) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) 6.685224491s ago: executing program 4 (id=6890): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcc}}, './file0\x00'}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 5.676610576s ago: executing program 4 (id=6900): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff7, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.35055718s ago: executing program 4 (id=6904): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "09001d00"}, @main=@item_012={0x2, 0x0, 0xb, "d1f9"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) 3.110654157s ago: executing program 4 (id=6919): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) close(0x3) 2.776535194s ago: executing program 4 (id=6923): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 2.689386485s ago: executing program 4 (id=6925): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0}) 2.292390472s ago: executing program 9 (id=6928): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x2) 2.222716974s ago: executing program 8 (id=6930): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 2.006820871s ago: executing program 7 (id=6931): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xa) 1.955985034s ago: executing program 8 (id=6932): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x5, 0x12) mmap(&(0x7f000003b000/0xf000)=nil, 0xf000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0) 1.904611199s ago: executing program 9 (id=6934): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x5, @empty, 'ip6_vti0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.769309365s ago: executing program 7 (id=6935): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x2, 0x4) 1.602989189s ago: executing program 6 (id=6936): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) readv(r0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0x1a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void}, {@llc_tr={0x11, {@snap={0xaa, 0x0, "93", "5f8b31", 0x9100}}}}}, 0x0) 1.403613388s ago: executing program 7 (id=6937): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000680)=[{&(0x7f0000000100)="b3ae0b0145409b970bc1aff1a1aea92095e4247d4f50e63a1672663b0b8605a20250d042d2697e341a79cbe60b49450f707edb771a0f8681c999ba65304c9334831e49a6c309480c93f273ac642dbb07d24b471efb15e55766", 0x59}, {&(0x7f0000000180)="f32a9e013570d17ca3c3e435f4f56e9780631ce7d4a63b40825f32004659dac81e4d90d4778fb0ef53601c57ed07b37dcad7cbca91da4ddce57e8a5cdee2084829b93ad8fdcd01c17298d74605d311a0e9ceb2f11e46b10bf64c41b5c2f301590bccddf64b136513f6be0be670e779ec40d113956513d9d0af7b057d0caffab379e4c804986c2ce1ada3852ca06779b5d761b17c7e2d6aaee49a7e1d7d7c371de76303ce26ba52c464cb610113042678dd64f8ecd91c0e1417b227f3e08506b4ae2591a751dce3d3cc37264bc82577110eb9f70e9ba59e", 0xd7}, {&(0x7f0000000280)="4c30311afdf355bb8434b7fd483f01c252", 0x11}], 0x3, 0x97, 0x4, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x15) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) 1.324073869s ago: executing program 8 (id=6938): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff7, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.198913412s ago: executing program 7 (id=6939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.134224063s ago: executing program 6 (id=6940): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) close(r0) 1.065947653s ago: executing program 9 (id=6941): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d0334", 0x9}, {&(0x7f0000002600)="782ee097", 0x4}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 960.602553ms ago: executing program 7 (id=6942): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) wait4(0x0, 0x0, 0x0, 0x0) 960.224696ms ago: executing program 6 (id=6943): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x52a}}}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) 959.564924ms ago: executing program 8 (id=6944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x44}}, 0x0) 840.367727ms ago: executing program 9 (id=6945): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000340)=0xe) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000380)={0x0, 0x0}) 790.20407ms ago: executing program 8 (id=6946): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) recvmsg$qrtr(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x10020}, 0x1c, 0x0) 656.882806ms ago: executing program 9 (id=6947): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x500, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe}}, 0xe4) 600.526391ms ago: executing program 8 (id=6948): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb8, 0x2b, 0xc6, 0x20, 0x711, 0x901, 0xa806, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x70, 0x2, [{{0x9, 0x4, 0x44, 0x80, 0x0, 0x6c, 0xb9, 0x7e, 0x6}}]}}]}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 511.514667ms ago: executing program 7 (id=6949): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x0, 0x14, 0x4, "aee39745"}, 0x0, 0x0, &(0x7f00000009c0), 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x0, 0x30, 0x4, "b73b2f6e"}, 0x0, 0x0, 0x0, 0x0}) 265.732156ms ago: executing program 6 (id=6950): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 182.987731ms ago: executing program 6 (id=6951): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = fsopen(&(0x7f0000000080)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) dup3(r1, r2, 0x0) 181.489191ms ago: executing program 9 (id=6952): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47be, 0x2, 0xd, 0x0, 0x0) 0s ago: executing program 6 (id=6953): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c75488", 0x21, 0x840, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) kernel console output (not intermixed with test programs): ing to 0x8F [ 661.969995][T19670] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 662.041139][T19670] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.136632][T19670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.190363][T19670] usb 2-1: Product: syz [ 662.239871][T19670] usb 2-1: Manufacturer: syz [ 662.262855][T19670] usb 2-1: SerialNumber: syz [ 662.545076][T20702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 663.122690][T19684] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 663.217779][T20702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 663.296527][T19684] usb 7-1: config 0 has no interfaces? [ 663.317567][T19684] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 663.347422][T19684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.397276][T19684] usb 7-1: Product: syz [ 663.446198][T19684] usb 7-1: Manufacturer: syz [ 663.454240][T19670] cdc_ncm 2-1:1.0: bind() failure [ 663.496129][T19684] usb 7-1: SerialNumber: syz [ 663.506934][T19670] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 663.538705][T19670] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 663.555460][T19684] usb 7-1: config 0 descriptor?? [ 663.571133][T19670] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 663.621294][T19670] usb 2-1: USB disconnect, device number 75 [ 664.051531][T19670] usb 7-1: USB disconnect, device number 5 [ 665.574381][T20799] input: syz0 as /devices/virtual/input/input107 [ 665.904886][T20809] input: syz1 as /devices/virtual/input/input108 [ 666.750851][T20843] input: syz0 as /devices/virtual/input/input109 [ 667.162063][T19684] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 667.312693][ T5905] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 667.332472][T19684] usb 5-1: Using ep0 maxpacket: 8 [ 667.346317][T19684] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 667.362099][T19684] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 667.373460][T19684] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 667.391946][T19684] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 667.418304][T19684] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.435803][T19684] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 667.450998][T19684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.482250][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 667.488931][ T5905] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 667.497812][ T5905] usb 7-1: config 0 has no interface number 0 [ 667.507730][ T5905] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 667.517191][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.525305][ T5905] usb 7-1: Product: syz [ 667.529592][ T5905] usb 7-1: Manufacturer: syz [ 667.534376][ T5905] usb 7-1: SerialNumber: syz [ 667.544970][ T5905] usb 7-1: config 0 descriptor?? [ 667.565191][ T5905] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 667.632352][T19670] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 667.675814][T19684] usb 5-1: GET_CAPABILITIES returned 0 [ 667.681395][T19684] usbtmc 5-1:16.0: can't read capabilities [ 667.783477][T19670] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.793833][T19670] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 667.803049][T19670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.814247][T19670] usb 1-1: config 0 descriptor?? [ 667.822027][T17081] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 667.823953][T19670] pwc: Askey VC010 type 2 USB webcam detected. [ 667.984431][T17081] usb 2-1: Using ep0 maxpacket: 32 [ 667.991701][T17081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.994126][T19684] usb 5-1: USB disconnect, device number 75 [ 668.003997][T20850] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 668.015062][T17081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.032284][T17081] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 668.045212][T20873] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -19 [ 668.045585][T17081] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 668.092647][T17081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.114636][T17081] usb 2-1: config 0 descriptor?? [ 668.246243][T19670] pwc: recv_control_msg error -32 req 02 val 2b00 [ 668.254328][T19670] pwc: recv_control_msg error -32 req 02 val 2700 [ 668.264749][T19670] pwc: recv_control_msg error -32 req 02 val 2c00 [ 668.402351][ T5925] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 668.473141][T19670] pwc: recv_control_msg error -71 req 04 val 1300 [ 668.480292][T19670] pwc: recv_control_msg error -71 req 04 val 1400 [ 668.487525][T19670] pwc: recv_control_msg error -71 req 02 val 2000 [ 668.496276][T19670] pwc: recv_control_msg error -71 req 02 val 2100 [ 668.503518][T19670] pwc: recv_control_msg error -71 req 04 val 1500 [ 668.510531][T19670] pwc: recv_control_msg error -71 req 02 val 2500 [ 668.517534][T19670] pwc: recv_control_msg error -71 req 02 val 2400 [ 668.524428][T19670] pwc: recv_control_msg error -71 req 02 val 2600 [ 668.531387][T19670] pwc: recv_control_msg error -71 req 02 val 2900 [ 668.539495][T19670] pwc: recv_control_msg error -71 req 02 val 2800 [ 668.546848][T19670] pwc: recv_control_msg error -71 req 04 val 1100 [ 668.554037][T19670] pwc: recv_control_msg error -71 req 04 val 1200 [ 668.563828][T19670] pwc: Registered as video103. [ 668.581827][T19670] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input110 [ 668.586438][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 668.599390][T17081] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0058/input/input111 [ 668.623942][T19670] usb 1-1: USB disconnect, device number 63 [ 668.624879][ T5925] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.655101][ T5925] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 668.683157][ T5925] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 668.701946][ T5925] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.739466][T20872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.751029][ T5925] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 668.764566][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.764954][T20872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.817190][T17081] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0058/input/input112 [ 668.826892][ T5905] gspca_spca1528: reg_w err -71 [ 668.849947][ T5905] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 668.886104][ T5905] usb 7-1: USB disconnect, device number 6 [ 668.985275][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5847'. [ 669.016351][T17081] kye 0003:0458:5011.0058: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 669.060497][ T5925] usb 6-1: GET_CAPABILITIES returned 0 [ 669.073068][ T5925] usbtmc 6-1:16.0: can't read capabilities [ 669.080609][T17081] usb 2-1: USB disconnect, device number 76 [ 669.139466][T20880] fido_id[20880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 669.299185][ T5925] usb 6-1: USB disconnect, device number 13 [ 669.604597][T20887] cgroup: fork rejected by pids controller in /syz6 [ 670.341963][ T5925] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 670.531277][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.563883][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.581918][ T5925] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 670.611350][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.641746][ T5925] usb 6-1: config 0 descriptor?? [ 670.658121][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.785036][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.886598][ T5925] usbhid 6-1:0.0: can't add hid device: -71 [ 670.901708][ T5925] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 670.929252][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.947730][ T5925] usb 6-1: USB disconnect, device number 14 [ 671.216127][ T36] bridge_slave_1: left allmulticast mode [ 671.242822][ T36] bridge_slave_1: left promiscuous mode [ 671.256815][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.304012][ T36] bridge_slave_0: left allmulticast mode [ 671.309694][ T36] bridge_slave_0: left promiscuous mode [ 671.344602][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.381979][T19670] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 671.553537][T19670] usb 6-1: Using ep0 maxpacket: 32 [ 671.567645][T19670] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.594328][T19670] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 671.629746][T19670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.684245][T19670] usb 6-1: config 0 descriptor?? [ 671.704219][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 671.713950][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 671.716661][T19670] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 671.738261][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 671.758631][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 671.777672][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 671.811606][T19670] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 672.216205][T19670] usb 6-1: USB disconnect, device number 15 [ 672.235240][T19670] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 672.649788][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.665054][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.676624][ T36] bond0 (unregistering): Released all slaves [ 672.981264][T20960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5874'. [ 673.702523][ T43] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 673.912113][ T5835] Bluetooth: hci2: command tx timeout [ 673.922641][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.966714][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.032190][ T43] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 674.041288][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.087256][ T36] hsr_slave_0: left promiscuous mode [ 674.123612][ T36] hsr_slave_1: left promiscuous mode [ 674.143587][ T43] usb 2-1: config 0 descriptor?? [ 674.161216][T21010] binder: 21007:21010 ioctl 40046205 0 returned -22 [ 674.169349][T21011] netlink: 'syz.4.5888': attribute type 16 has an invalid length. [ 674.188615][T21011] netlink: 'syz.4.5888': attribute type 17 has an invalid length. [ 674.249261][ T36] veth1_macvtap: left promiscuous mode [ 674.266359][ T36] veth0_macvtap: left promiscuous mode [ 674.283658][ T36] veth1_vlan: left promiscuous mode [ 674.289049][ T36] veth0_vlan: left promiscuous mode [ 674.785705][ T43] usb 2-1: string descriptor 0 read error: -22 [ 674.987643][ T43] uclogic 0003:256C:006D.0059: interface is invalid, ignoring [ 675.235341][ T43] usb 2-1: USB disconnect, device number 77 [ 675.272904][ T36] team0 (unregistering): Port device team_slave_1 removed [ 675.316159][ T36] team0 (unregistering): Port device team_slave_0 removed [ 675.992346][ T5835] Bluetooth: hci2: command tx timeout [ 676.021739][T20933] chnl_net:caif_netlink_parms(): no params data found [ 676.317887][T21056] input: syz1 as /devices/virtual/input/input113 [ 676.424694][T20933] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.452422][T20933] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.459669][T20933] bridge_slave_0: entered allmulticast mode [ 676.475760][T20933] bridge_slave_0: entered promiscuous mode [ 676.502361][T20933] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.509546][T20933] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.532166][T20933] bridge_slave_1: entered allmulticast mode [ 676.539836][T20933] bridge_slave_1: entered promiscuous mode [ 676.765374][T20933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.799421][T20933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.993183][T21086] loop2: detected capacity change from 0 to 7 [ 677.013659][T21086] Dev loop2: unable to read RDB block 7 [ 677.019572][T21086] loop2: unable to read partition table [ 677.032523][T21086] loop2: partition table beyond EOD, truncated [ 677.041246][T20933] team0: Port device team_slave_0 added [ 677.048983][T21086] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 677.145286][T20933] team0: Port device team_slave_1 added [ 677.222086][ T5905] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 677.280230][T20933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.299909][T20933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.345469][T20933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.401481][T20933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.410660][T20933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.433793][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.479566][ T5905] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 677.489168][T20933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.536952][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.565443][ T5905] usb 6-1: config 0 descriptor?? [ 677.624574][T20933] hsr_slave_0: entered promiscuous mode [ 677.641524][T20933] hsr_slave_1: entered promiscuous mode [ 677.653509][T20933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.671925][T20933] Cannot create hsr debugfs directory [ 677.767081][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5923'. [ 677.833862][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 677.839936][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 677.877597][ T5905] usb 6-1: USB disconnect, device number 16 [ 678.072453][ T5835] Bluetooth: hci2: command tx timeout [ 678.148354][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5927'. [ 678.382198][ T5905] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 678.423504][T19684] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 678.542608][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 678.559669][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.574933][ T5905] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 678.585252][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.593469][T19670] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 678.602632][T19684] usb 1-1: Using ep0 maxpacket: 32 [ 678.618931][T19684] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 678.627844][T19684] usb 1-1: config 0 has no interface number 0 [ 678.640076][ T5905] usb 6-1: config 0 descriptor?? [ 678.653188][T19684] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 678.666644][ T5905] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 678.678221][T19684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.701104][T19684] usb 1-1: Product: syz [ 678.706224][ T5905] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 678.721957][T19684] usb 1-1: Manufacturer: syz [ 678.729990][T19684] usb 1-1: SerialNumber: syz [ 678.755174][T19684] usb 1-1: config 0 descriptor?? [ 678.771935][T19670] usb 2-1: Using ep0 maxpacket: 8 [ 678.778448][T19670] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 678.794832][T19670] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 678.809498][T19670] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 678.826744][T19684] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 678.836500][T19670] usb 2-1: Product: syz [ 678.840964][T19670] usb 2-1: Manufacturer: syz [ 678.851534][T19670] usb 2-1: SerialNumber: syz [ 678.864752][T19670] usb 2-1: config 0 descriptor?? [ 678.907048][T19670] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 678.921605][ T5905] usb 6-1: USB disconnect, device number 17 [ 678.927613][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 678.944189][ T5905] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 679.019587][T20933] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 679.038096][T20933] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 679.133643][T19684] usb 1-1: qt2_attach - failed to power on unit: -71 [ 679.138055][T20933] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 679.152892][T19684] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 679.160065][T21087] ldusb: No device or device unplugged -19 [ 679.175359][T20933] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 679.189401][T19684] usb 1-1: USB disconnect, device number 64 [ 679.328756][T20933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.355780][T20933] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.374085][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.381240][ T7754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.426887][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.434089][ T7756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.565241][T20933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.643518][T20933] veth0_vlan: entered promiscuous mode [ 679.663065][T20933] veth1_vlan: entered promiscuous mode [ 679.782266][T21162] loop6: detected capacity change from 0 to 7 [ 679.807204][T21162] Dev loop6: unable to read RDB block 7 [ 679.814331][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5934'. [ 679.816170][T21162] loop6: unable to read partition table [ 679.865941][T21162] loop6: partition table beyond EOD, truncated [ 679.887026][T20933] veth0_macvtap: entered promiscuous mode [ 679.892917][T21162] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 679.907474][T19670] gspca_zc3xx: reg_w_i err -71 [ 679.951999][T20933] veth1_macvtap: entered promiscuous mode [ 680.152694][ T5835] Bluetooth: hci2: command tx timeout [ 680.253462][T20933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.278527][T20933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.307684][T20933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.317428][T20933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.353558][T20933] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.400685][T20933] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.522667][T19670] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 680.529041][T19670] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 680.616346][T19670] usb 2-1: USB disconnect, device number 78 [ 680.744012][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.773550][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.942865][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.977059][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.409523][T21210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5952'. [ 681.436427][T21210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5952'. [ 681.759560][T21231] netlink: 'syz.1.5956': attribute type 21 has an invalid length. [ 681.812091][T21231] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5956'. [ 682.458159][T21253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5967'. [ 682.516556][T21253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5967'. [ 682.662056][T19684] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 682.843632][T19684] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.874009][T19684] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.891177][T19684] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 682.905004][T19684] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.930564][T19684] usb 7-1: config 0 descriptor?? [ 683.396070][T19684] hkems 0003:2006:0118.005A: reserved main item tag 0xe [ 683.406304][T19684] hkems 0003:2006:0118.005A: item fetching failed at offset 4/7 [ 683.418803][T19684] hkems 0003:2006:0118.005A: parse failed [ 683.426319][T19684] hkems 0003:2006:0118.005A: probe with driver hkems failed with error -22 [ 683.562883][ T43] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 683.628735][ T5895] usb 7-1: USB disconnect, device number 7 [ 683.731990][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 683.741434][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.743578][T21297] netlink: 'syz.1.5979': attribute type 4 has an invalid length. [ 683.786604][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.837826][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 683.891910][ T43] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 683.926180][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.958473][ T43] usb 5-1: config 0 descriptor?? [ 684.430109][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.005B/input/input114 [ 684.570068][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.005B/input/input115 [ 684.721474][ T43] kye 0003:0458:5011.005B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 684.738239][T21336] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.5991'. [ 685.582224][ C1] kye 0003:0458:5011.005B: usb_submit_urb(ctrl) failed: -1 [ 685.680890][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.689572][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.966785][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5997'. [ 686.231657][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6002'. [ 686.354786][T19676] usb 5-1: USB disconnect, device number 76 [ 686.842927][T21387] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 687.634012][T21416] netlink: 'syz.1.6025': attribute type 1 has an invalid length. [ 687.693443][T21416] bond2: entered promiscuous mode [ 687.698990][T21416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 687.738593][T21416] bond2: (slave bridge1): making interface the new active one [ 687.746198][T21416] bridge1: entered promiscuous mode [ 687.753179][T21416] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 687.991216][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6016'. [ 688.032141][T21429] netlink: 'syz.1.6016': attribute type 5 has an invalid length. [ 689.342650][T19676] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 689.554282][T19676] usb 2-1: Using ep0 maxpacket: 8 [ 689.595821][T19676] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 689.670945][T19676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.727575][T19676] usb 2-1: Product: syz [ 689.754377][T19676] usb 2-1: Manufacturer: syz [ 689.794952][T19676] usb 2-1: SerialNumber: syz [ 689.878248][T19676] usb 2-1: config 0 descriptor?? [ 689.984022][T19676] gspca_main: sq905-2.14.0 probing 2770:9120 [ 690.373477][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6034'. [ 690.682869][ T7756] bond1: left allmulticast mode [ 690.687814][ T7756] bond1: left promiscuous mode [ 690.723051][ T7756] bridge0: port 3(bond1) entered disabled state [ 690.783079][ T7756] bridge_slave_1: left allmulticast mode [ 690.788781][ T7756] bridge_slave_1: left promiscuous mode [ 690.829179][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.867967][ T7756] bridge_slave_0: left allmulticast mode [ 690.889368][ T7756] bridge_slave_0: left promiscuous mode [ 690.900304][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.003195][T19676] gspca_sq905: bulk read fail (-22) len 0/4 [ 691.009208][T19676] sq905 2-1:0.0: probe with driver sq905 failed with error -5 [ 691.067960][ T30] audit: type=1326 audit(1750973115.958:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21498 comm="syz.4.6042" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f82539 code=0x0 [ 691.166447][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 691.193075][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 691.216565][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 691.236119][T19684] usb 2-1: USB disconnect, device number 79 [ 691.246211][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 691.259910][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 691.382016][ T5905] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 691.561985][ T5905] usb 7-1: Using ep0 maxpacket: 8 [ 691.571481][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.598013][ T5905] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 691.621962][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.643751][ T5905] usb 7-1: config 0 descriptor?? [ 691.873240][ T5905] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 691.986364][ T7756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.006232][ T7756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.016285][ T7756] bond0 (unregistering): Released all slaves [ 692.295085][ T7756] bond1 (unregistering): Released all slaves [ 692.377204][T19670] usb 7-1: USB disconnect, device number 8 [ 692.759956][ T7756] batman_adv: batadv0: Removing interface: macvtap1 [ 693.332100][ T7756] hsr_slave_0: left promiscuous mode [ 693.354595][ T5841] Bluetooth: hci0: command tx timeout [ 693.367546][ T7756] hsr_slave_1: left promiscuous mode [ 693.378902][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.416615][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.882294][T19676] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 694.082021][T19676] usb 5-1: Using ep0 maxpacket: 16 [ 694.099286][T19676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.141961][T19676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.179088][T19676] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 694.235577][T19676] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 694.260877][T19676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.293162][T19676] usb 5-1: config 0 descriptor?? [ 694.736011][T19676] HID 045e:07da: Invalid code 65791 type 1 [ 694.778078][T19676] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.005C/input/input116 [ 694.861702][T19676] microsoft 0003:045E:07DA.005C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 694.895452][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805711fc00: rx timeout, send abort [ 695.013822][T21587] netlink: 'syz.1.6063': attribute type 1 has an invalid length. [ 695.050280][ T5905] usb 5-1: USB disconnect, device number 77 [ 695.157899][ T7756] team0 (unregistering): Port device team_slave_1 removed [ 695.246823][ T7756] team0 (unregistering): Port device team_slave_0 removed [ 695.406835][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805711fc00: abort rx timeout. Force session deactivation [ 695.433306][ T5841] Bluetooth: hci0: command tx timeout [ 696.665182][T21587] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 696.675898][T21588] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 696.739278][T21515] chnl_net:caif_netlink_parms(): no params data found [ 697.107985][T21515] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.141265][T21515] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.176546][T21515] bridge_slave_0: entered allmulticast mode [ 697.199170][T21635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6076'. [ 697.211361][T21515] bridge_slave_0: entered promiscuous mode [ 697.235131][T21515] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.247273][T21515] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.312131][T21515] bridge_slave_1: entered allmulticast mode [ 697.331323][T21515] bridge_slave_1: entered promiscuous mode [ 697.461932][T21634] binder: 21632:21634 ioctl c0306201 80001a80 returned -14 [ 697.480671][T21515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.532917][ T5841] Bluetooth: hci0: command tx timeout [ 697.566173][T21515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.790710][T21515] team0: Port device team_slave_0 added [ 697.810053][T21515] team0: Port device team_slave_1 added [ 697.917336][ T7756] IPVS: stop unused estimator thread 0... [ 698.026011][ T30] audit: type=1326 audit(1750973122.918:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2558 code=0x7ffc0000 [ 698.116202][ T30] audit: type=1326 audit(1750973122.928:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 698.138345][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.160021][ T30] audit: type=1326 audit(1750973122.928:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2558 code=0x7ffc0000 [ 698.194037][T21515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.203877][ T30] audit: type=1326 audit(1750973122.928:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 698.211895][T21515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.251648][ T30] audit: type=1326 audit(1750973122.958:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2558 code=0x7ffc0000 [ 698.274010][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.409908][ T30] audit: type=1326 audit(1750973122.958:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 698.494231][T21515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.562043][ T30] audit: type=1326 audit(1750973122.968:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 698.630737][T21515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.672864][T21515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.701944][ T30] audit: type=1326 audit(1750973122.968:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2558 code=0x7ffc0000 [ 698.724022][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.789842][T21515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.797479][ T30] audit: type=1326 audit(1750973122.968:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 698.822543][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.933161][ T30] audit: type=1326 audit(1750973122.968:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2558 code=0x7ffc0000 [ 698.955283][ C0] vkms_vblank_simulate: vblank timer overrun [ 699.266437][T21515] hsr_slave_0: entered promiscuous mode [ 699.293765][T21515] hsr_slave_1: entered promiscuous mode [ 699.300104][T21515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.308439][T21515] Cannot create hsr debugfs directory [ 699.602981][ T5841] Bluetooth: hci0: command tx timeout [ 699.662046][T19684] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 699.708712][T21515] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 699.747877][T21515] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 699.770068][T21515] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 699.822793][T19684] usb 2-1: Using ep0 maxpacket: 32 [ 699.831381][T21515] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 699.835899][T19684] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 699.863231][T19684] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 699.875965][T19684] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 699.894631][T19684] usb 2-1: Product: syz [ 699.904768][T19684] usb 2-1: Manufacturer: syz [ 699.916407][T19684] usb 2-1: SerialNumber: syz [ 699.945443][T21688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 700.149360][T21515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.245759][T21515] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.279238][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.286439][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.310919][T19684] usb 2-1: USB disconnect, device number 80 [ 700.383553][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.390748][ T7751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.547941][T21515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.673817][T21515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.818903][T21515] veth0_vlan: entered promiscuous mode [ 700.848172][T21515] veth1_vlan: entered promiscuous mode [ 700.921215][T21515] veth0_macvtap: entered promiscuous mode [ 700.922025][T19684] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 700.957014][T21515] veth1_macvtap: entered promiscuous mode [ 701.020519][T21515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.055559][T21515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.070811][T21515] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.082060][T21515] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.090792][T21515] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.107041][T21515] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.126475][T19684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.160613][T19684] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 701.227916][T19684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.270778][T19684] usb 5-1: config 0 descriptor?? [ 701.335637][T21747] netlink: 'syz.0.6104': attribute type 12 has an invalid length. [ 701.492867][ T7760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.528761][ T7760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.534825][T19684] usbhid 5-1:0.0: can't add hid device: -71 [ 701.566642][T19684] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 701.625449][T19684] usb 5-1: USB disconnect, device number 78 [ 701.686872][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.725824][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.082124][T19684] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 702.252852][T19684] usb 5-1: Using ep0 maxpacket: 32 [ 702.262057][T19670] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 702.278972][T19684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.309272][T19684] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 702.338717][T19684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.385290][T19684] usb 5-1: config 0 descriptor?? [ 702.413108][T19684] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 702.453705][T19684] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 702.461831][T19670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.490503][T19670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.523202][T19670] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.539691][T19670] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.574671][T19670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.645076][ C0] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 702.657691][T19670] usb 1-1: config 0 descriptor?? [ 702.727294][T21779] netlink: 'syz.1.6111': attribute type 1 has an invalid length. [ 702.738543][T21779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6111'. [ 702.975461][ C0] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 703.091807][T19670] plantronics 0003:047F:FFFF.005D: No inputs registered, leaving [ 703.127053][T19670] plantronics 0003:047F:FFFF.005D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 704.045469][T19670] usb 5-1: USB disconnect, device number 79 [ 704.097614][T19670] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 704.582582][T21833] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6120'. [ 705.033042][T19670] usb 1-1: USB disconnect, device number 65 [ 706.043750][T19676] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 706.213912][T19676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.253328][T19676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.275854][T19676] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 706.299262][T19676] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 706.309549][T19676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.337212][T19676] usb 5-1: config 0 descriptor?? [ 706.768481][T19676] plantronics 0003:047F:FFFF.005E: reserved main item tag 0xd [ 706.810744][T19676] plantronics 0003:047F:FFFF.005E: No inputs registered, leaving [ 706.877865][T19676] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 707.100147][T19682] usb 5-1: USB disconnect, device number 80 [ 707.943027][T19670] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 708.112079][T19670] usb 2-1: Using ep0 maxpacket: 32 [ 708.124015][T19670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.145344][T19670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.179389][T19670] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 708.223737][T19670] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 708.251933][T19670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.286962][T19670] usb 2-1: config 0 descriptor?? [ 708.790509][T19670] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.005F/input/input118 [ 708.921268][T19670] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.005F/input/input119 [ 709.039578][T19670] kye 0003:0458:5011.005F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 709.892021][ T5925] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 709.953936][ C0] kye 0003:0458:5011.005F: usb_submit_urb(ctrl) failed: -1 [ 710.047159][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.055431][ T5925] usb 5-1: config 0 has no interface number 0 [ 710.061596][ T5925] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 710.073115][ T5925] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 710.084436][ T5925] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 710.093618][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.106386][ T5925] usb 5-1: config 0 descriptor?? [ 710.113961][T21974] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 710.128998][ T5925] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 710.404262][T19670] usb 5-1: USB disconnect, device number 81 [ 710.753007][ T43] usb 2-1: USB disconnect, device number 81 [ 712.665150][T19670] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 712.727028][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 712.727046][ T30] audit: type=1800 audit(1750973137.628:6153): pid=22044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6188" name="dmabuf" dev="dmabuf" ino=19 res=0 errno=0 [ 712.756185][T22047] netlink: 'syz.6.6189': attribute type 27 has an invalid length. [ 712.852208][T19670] usb 5-1: Using ep0 maxpacket: 8 [ 712.866155][T19670] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 712.907252][T19670] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 712.943803][T19670] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 61192, setting to 1024 [ 712.955886][T19670] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 712.966796][T19670] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.981428][T19670] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 713.001654][T19670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.264702][T19670] usb 5-1: GET_CAPABILITIES returned 0 [ 713.278353][T19670] usbtmc 5-1:16.0: can't read capabilities [ 713.514716][ T43] usb 5-1: USB disconnect, device number 82 [ 713.962114][ T5925] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 714.149590][ T5925] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 714.192621][ T5925] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 714.212788][ T5925] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 714.242204][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.273189][T22078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 714.283858][ T5925] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 714.601287][T19684] usb 2-1: USB disconnect, device number 82 [ 715.532765][ T5925] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 715.703819][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.736686][ T5925] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 715.758129][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.779401][ T5925] usb 1-1: config 0 descriptor?? [ 716.011306][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 716.019891][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 716.032792][ T5925] usb 1-1: USB disconnect, device number 66 [ 716.171949][T17081] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 716.331964][T17081] usb 7-1: Using ep0 maxpacket: 32 [ 716.339028][T17081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.354699][T17081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.365643][T17081] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 716.381650][T17081] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 716.411204][T17081] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.437171][T17081] usb 7-1: config 0 descriptor?? [ 716.486330][ T7756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.492617][ T43] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 716.604734][ T7756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.662011][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 716.675050][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.697535][ T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 716.715976][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.716388][ T7756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.741413][ T43] usb 1-1: config 0 descriptor?? [ 716.775173][ T43] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 716.796875][ T43] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 716.897797][T17081] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0060/input/input120 [ 716.918973][ T7756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.072647][T22138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.107479][T22138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.134636][T17081] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0060/input/input121 [ 717.272317][T17081] kye 0003:0458:5011.0060: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 717.323306][ T5895] usb 1-1: USB disconnect, device number 67 [ 717.392672][ T5895] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 717.400425][T17081] usb 7-1: USB disconnect, device number 9 [ 717.555062][T19676] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 717.617554][T22172] fido_id[22172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 717.651242][ T7756] bridge_slave_1: left allmulticast mode [ 717.667535][ T7756] bridge_slave_1: left promiscuous mode [ 717.679702][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.719418][ T7756] bridge_slave_0: left allmulticast mode [ 717.726577][ T7756] bridge_slave_0: left promiscuous mode [ 717.733126][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.743781][T19676] usb 5-1: Using ep0 maxpacket: 16 [ 717.776056][T19676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.825888][T19676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.863208][T19676] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 717.904072][T19676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.956742][T19676] usb 5-1: config 0 descriptor?? [ 718.017756][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 718.028575][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 718.042129][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 718.053844][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 718.063314][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.437512][ T7756] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 718.447175][ T7756] bridge1 (unregistering): left promiscuous mode [ 718.605699][T19676] usb 5-1: language id specifier not provided by device, defaulting to English [ 718.735515][ T7756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.758552][ T7756] bond_slave_0: left promiscuous mode [ 718.772161][ T7756] bond_slave_0: left allmulticast mode [ 718.785563][ T7756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.806744][T19676] letsketch 0003:6161:4D15.0061: Device info: à° [ 718.814283][ T7756] bond_slave_1: left promiscuous mode [ 718.826035][ T7756] bond_slave_1: left allmulticast mode [ 718.839040][ T7756] bond0 (unregistering): Released all slaves [ 718.896942][ T7756] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 718.911098][ T7756] bond1 (unregistering): Released all slaves [ 719.046969][ T7756] bond2 (unregistering): Released all slaves [ 719.062774][T19676] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 719.070739][T19676] letsketch 0003:6161:4D15.0061: probe with driver letsketch failed with error -71 [ 719.100274][T19676] usb 5-1: USB disconnect, device number 83 [ 719.121930][T19684] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 719.194552][ T7756] tipc: Disabling bearer [ 719.211348][ T7756] tipc: Left network mode [ 719.315213][T19684] usb 7-1: unable to get BOS descriptor or descriptor too short [ 719.372539][T19684] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 719.380183][T19684] usb 7-1: can't read configurations, error -71 [ 719.591977][T22186] chnl_net:caif_netlink_parms(): no params data found [ 719.781378][ T7756] dummy0: left promiscuous mode [ 719.964890][T19676] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 720.143546][T19676] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 720.154605][ T5835] Bluetooth: hci1: command tx timeout [ 720.164779][T19676] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 720.164806][T19676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.185399][T19676] usb 1-1: config 0 descriptor?? [ 720.191076][T22221] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 720.439730][ T7756] team0 (unregistering): Port device team_slave_1 removed [ 720.465593][T19684] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 720.503546][ T7756] team0 (unregistering): Port device team_slave_0 removed [ 720.641782][T19676] elan 0003:04F3:0755.0062: unknown main item tag 0x0 [ 720.651478][T19676] elan 0003:04F3:0755.0062: unknown main item tag 0x0 [ 720.660750][T19684] usb 7-1: Using ep0 maxpacket: 8 [ 720.660790][T19676] elan 0003:04F3:0755.0062: unknown main item tag 0x0 [ 720.669279][T19684] usb 7-1: config 150 has an invalid interface number: 204 but max is 1 [ 720.680033][T19676] elan 0003:04F3:0755.0062: unknown main item tag 0x0 [ 720.683779][T19684] usb 7-1: config 150 has no interface number 0 [ 720.689140][T19676] elan 0003:04F3:0755.0062: unknown main item tag 0x0 [ 720.710264][T19684] usb 7-1: config 150 interface 204 has no altsetting 0 [ 720.718170][T19676] elan 0003:04F3:0755.0062: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 720.724023][T19684] usb 7-1: config 150 interface 1 has no altsetting 0 [ 720.749273][T19684] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 720.762043][T19684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.778516][T19684] usb 7-1: Product: syz [ 720.783977][T19684] usb 7-1: Manufacturer: syz [ 720.796451][T19684] usb 7-1: SerialNumber: syz [ 721.038017][T19684] xr_serial 7-1:150.204: xr_serial converter detected [ 721.236602][T22186] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.244610][T22186] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.254429][T22186] bridge_slave_0: entered allmulticast mode [ 721.264308][T22186] bridge_slave_0: entered promiscuous mode [ 721.274023][T22186] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.281470][T22186] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.290209][T22186] bridge_slave_1: entered allmulticast mode [ 721.313653][T22186] bridge_slave_1: entered promiscuous mode [ 721.421454][T22186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.469191][T22186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.589637][T22186] team0: Port device team_slave_0 added [ 721.606115][ T7756] IPVS: stop unused estimator thread 0... [ 721.620942][T22186] team0: Port device team_slave_1 added [ 721.822589][T22186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.831492][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.859912][T19684] usb 7-1: xr_serial converter now attached to ttyUSB0 [ 721.878488][T22186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.924376][T22186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.934279][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.975694][T22186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.078421][T17081] usb 7-1: USB disconnect, device number 11 [ 722.089305][T17081] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 722.129481][T17081] xr_serial 7-1:150.204: device disconnected [ 722.163354][T22186] hsr_slave_0: entered promiscuous mode [ 722.180986][T22186] hsr_slave_1: entered promiscuous mode [ 722.195133][T22186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.217414][T22186] Cannot create hsr debugfs directory [ 722.232156][ T5835] Bluetooth: hci1: command tx timeout [ 722.594231][T19676] usb 1-1: USB disconnect, device number 68 [ 723.107921][T22186] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 723.159951][T22186] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 723.176002][ T43] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 723.218488][T22186] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 723.251498][T22186] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 723.341997][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 723.365176][ T43] usb 1-1: config 0 has no interfaces? [ 723.381177][ T43] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 723.419825][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.465073][ T43] usb 1-1: config 0 descriptor?? [ 723.601313][T22186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.653026][ T5905] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 723.667468][T22186] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.721386][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.728658][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.756096][T19670] usb 1-1: USB disconnect, device number 69 [ 723.827312][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.834569][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.866040][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 723.877673][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.934269][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.989976][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 724.031333][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.078241][ T5905] usb 5-1: config 0 descriptor?? [ 724.104650][ T5905] hub 5-1:0.0: USB hub found [ 724.169315][T22186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.313304][ T5835] Bluetooth: hci1: command tx timeout [ 724.325134][ T5905] hub 5-1:0.0: 1 port detected [ 724.348893][T22186] veth0_vlan: entered promiscuous mode [ 724.428806][T22186] veth1_vlan: entered promiscuous mode [ 724.504767][T22328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6270'. [ 724.541113][T22186] veth0_macvtap: entered promiscuous mode [ 724.705525][T22328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 724.739876][T22186] veth1_macvtap: entered promiscuous mode [ 724.827018][T22333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 724.852449][T22333] bond3: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 724.874118][T22333] bond3: (slave ip6tnl2): Error -95 calling set_mac_address [ 724.960979][T22186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.981930][ T5905] hub 5-1:0.0: activate --> -90 [ 724.997131][T22186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.030681][T22186] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.042452][T22186] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.052557][T22186] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.061297][T22186] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.139376][T22340] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 725.152772][T22340] syzkaller0: group set to 0 [ 725.339845][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.359051][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.392110][ T43] usb 5-1: USB disconnect, device number 84 [ 725.511891][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.520105][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.612055][ T5905] usb 5-1-port1: config error [ 726.393359][ T5835] Bluetooth: hci1: command tx timeout [ 727.417901][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6298'. [ 727.873571][T19684] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 728.064410][ T5895] hid-generic FFFC:0003:0000.0063: unknown main item tag 0x0 [ 728.084735][T22450] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6305'. [ 728.088540][T19684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 728.110647][ T5895] hid-generic FFFC:0003:0000.0063: unknown main item tag 0x0 [ 728.127606][T19684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 728.135267][T22450] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6305'. [ 728.151404][ T5895] hid-generic FFFC:0003:0000.0063: unknown main item tag 0x0 [ 728.164485][ T5895] hid-generic FFFC:0003:0000.0063: unknown main item tag 0x0 [ 728.169058][T19684] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 728.182033][T22446] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6305'. [ 728.189014][ T5895] hid-generic FFFC:0003:0000.0063: unknown main item tag 0x0 [ 728.207954][T19684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.234380][ T5895] hid-generic FFFC:0003:0000.0063: unknown main item tag 0x0 [ 728.237016][T19684] usb 1-1: config 0 descriptor?? [ 728.254953][ T5895] hid-generic FFFC:0003:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 728.275629][T22430] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 728.539016][T22457] fido_id[22457]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 728.868659][T19684] usbhid 1-1:0.0: can't add hid device: -71 [ 728.902033][T19684] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 728.958579][T19684] usb 1-1: USB disconnect, device number 70 [ 729.482213][T19684] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 729.669704][T19684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.711366][T19684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.777296][T19684] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 729.809020][T19684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.879878][T19684] usb 1-1: config 0 descriptor?? [ 730.353697][T19684] hid-led 0003:04D8:F372.0064: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 730.526793][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6313'. [ 730.622900][T19684] hid-led 0003:04D8:F372.0064: Greynut Luxafor initialized [ 730.683049][T19684] usb 1-1: USB disconnect, device number 71 [ 730.770112][ T7754] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 730.809554][ T60] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 730.854738][ T7754] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 730.892106][ T7754] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 730.915806][ T36] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 730.935656][ T7754] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 730.959037][ T60] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 731.005183][ T3533] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 731.022929][ T3533] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 731.048002][ T3533] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 731.083154][ T3533] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 731.109542][T19457] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 731.149480][T19457] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 731.169899][T19457] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 731.180581][T19457] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 731.189983][T19457] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 731.206988][T19457] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 731.225068][ T7754] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 731.408486][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6328'. [ 732.622349][T22571] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.523611][T22614] input: syz0 as /devices/virtual/input/input122 [ 733.549040][T22611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 733.852758][T22624] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6352'. [ 733.892324][T22624] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6352'. [ 734.169558][T22638] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6357'. [ 734.938659][T22663] vivid-000: disconnect [ 735.071986][T19672] vivid-000: reconnect [ 735.164114][T22671] loop3: detected capacity change from 0 to 1 [ 735.178357][T22671] Dev loop3: unable to read RDB block 1 [ 735.189799][T22671] loop3: unable to read partition table [ 735.198297][T22671] loop3: partition table beyond EOD, truncated [ 735.212099][T22671] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 735.536254][T22681] kvm: kvm [22678]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008d) [ 735.692169][T17081] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 735.880811][T17081] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 735.912360][T17081] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.920399][T17081] usb 9-1: Product: syz [ 735.951767][T17081] usb 9-1: Manufacturer: syz [ 735.963651][T17081] usb 9-1: SerialNumber: syz [ 735.992932][T17081] usb 9-1: config 0 descriptor?? [ 736.260355][T19672] usb 9-1: USB disconnect, device number 2 [ 736.571963][T17081] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 736.754379][T17081] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 736.795199][T17081] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 736.815884][T17081] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 736.843066][T17081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.878426][T22707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 736.923598][T17081] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 737.119785][T17081] usb 1-1: USB disconnect, device number 72 [ 739.258949][T17081] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 739.282327][T22807] cgroup: fork rejected by pids controller in /syz7 [ 739.446171][T17081] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 739.480405][T17081] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 739.523499][T17081] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 739.547975][T17081] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.579458][T22800] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 739.600860][T17081] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 739.628257][T22820] netlink: 'syz.4.6416': attribute type 6 has an invalid length. [ 739.862698][T19676] usb 7-1: USB disconnect, device number 12 [ 740.100036][ T3533] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.254459][ T3533] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.398898][ T3533] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.581564][ T3533] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.615889][T22850] tipc: Started in network mode [ 740.620811][T22850] tipc: Node identity ac1414aa, cluster identity 4711 [ 740.641538][T22850] tipc: Enabled bearer , priority 10 [ 740.954985][T22861] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 740.964443][T22858] IPVS: stopping backup sync thread 22861 ... [ 740.998675][ T3533] bridge_slave_1: left allmulticast mode [ 741.017311][ T3533] bridge_slave_1: left promiscuous mode [ 741.031736][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.067781][ T3533] bridge_slave_0: left allmulticast mode [ 741.091967][ T3533] bridge_slave_0: left promiscuous mode [ 741.127110][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.471071][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.488316][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.506195][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.517673][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.526055][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.544036][T22883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6433'. [ 741.753186][T19672] tipc: Node number set to 2886997162 [ 742.122478][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.136238][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.163703][ T3533] bond0 (unregistering): Released all slaves [ 742.191900][T22882] veth0_to_bond: entered allmulticast mode [ 742.307846][T22883] veth0_to_bond (unregistering): left allmulticast mode [ 742.376002][T22883] bond0: (slave bond_slave_0): Releasing backup interface [ 742.592594][T19684] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 742.758764][T19684] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 742.779917][T19684] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.800229][T19684] usb 9-1: Product: syz [ 742.824481][T19684] usb 9-1: Manufacturer: syz [ 742.829122][T19684] usb 9-1: SerialNumber: syz [ 742.861125][T19684] usb 9-1: config 0 descriptor?? [ 742.895263][T19684] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 742.938108][ T3533] hsr_slave_0: left promiscuous mode [ 742.956396][ T3533] hsr_slave_1: left promiscuous mode [ 742.966732][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.975960][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.988972][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.002406][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.040571][ T3533] veth1_macvtap: left promiscuous mode [ 743.047157][ T3533] veth0_macvtap: left promiscuous mode [ 743.052896][ T3533] veth1_vlan: left promiscuous mode [ 743.058250][ T3533] veth0_vlan: left promiscuous mode [ 743.598137][ T5835] Bluetooth: hci0: command tx timeout [ 743.758244][ T3533] team0 (unregistering): Port device team_slave_1 removed [ 743.817944][ T3533] team0 (unregistering): Port device team_slave_0 removed [ 744.122463][T19684] gspca_sunplus: reg_r err -71 [ 744.127355][T19684] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 744.150906][T19684] usb 9-1: USB disconnect, device number 3 [ 745.003096][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6453'. [ 745.036293][T22957] wireguard0: entered promiscuous mode [ 745.041815][T22957] wireguard0: entered allmulticast mode [ 745.265265][T22886] chnl_net:caif_netlink_parms(): no params data found [ 745.404629][T19684] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 745.574500][T19684] usb 5-1: Using ep0 maxpacket: 16 [ 745.599380][T19684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.620316][T19684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.630465][T19684] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 745.640825][T19684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.656416][T19684] usb 5-1: config 0 descriptor?? [ 745.691983][ T5835] Bluetooth: hci0: command tx timeout [ 745.790161][T22886] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.802269][T22886] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.809426][ T30] audit: type=1326 audit(1750973170.708:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.8.6459" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x0 [ 745.831664][T22886] bridge_slave_0: entered allmulticast mode [ 745.844427][T22886] bridge_slave_0: entered promiscuous mode [ 745.877151][T22886] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.891961][T22886] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.899299][T22886] bridge_slave_1: entered allmulticast mode [ 745.907398][T22886] bridge_slave_1: entered promiscuous mode [ 746.014788][T22886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.045476][T22886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.092441][T19684] apple 0003:05AC:0274.0065: unknown main item tag 0x4 [ 746.111011][T19684] apple 0003:05AC:0274.0065: unexpected long global item [ 746.137396][T19684] apple 0003:05AC:0274.0065: parse failed [ 746.149813][T19684] apple 0003:05AC:0274.0065: probe with driver apple failed with error -22 [ 746.191786][T22886] team0: Port device team_slave_0 added [ 746.207295][T22886] team0: Port device team_slave_1 added [ 746.315751][T22886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.332843][T19684] usb 5-1: USB disconnect, device number 85 [ 746.352182][T22886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.434537][T22886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.509814][T22886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.520629][T22886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.592716][T22886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.633512][T23012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6467'. [ 746.796082][T22886] hsr_slave_0: entered promiscuous mode [ 746.811493][T22886] hsr_slave_1: entered promiscuous mode [ 746.828196][T22886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 746.841181][T22886] Cannot create hsr debugfs directory [ 747.124821][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.131391][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.301957][ T5895] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 747.479749][ T5895] usb 5-1: config 0 has no interfaces? [ 747.512661][ T5895] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 747.524779][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.533405][ T5895] usb 5-1: Product: syz [ 747.537596][ T5895] usb 5-1: Manufacturer: syz [ 747.542828][ T5895] usb 5-1: SerialNumber: syz [ 747.554204][ T5895] usb 5-1: config 0 descriptor?? [ 747.753401][ T5835] Bluetooth: hci0: command tx timeout [ 747.889625][T19672] usb 5-1: USB disconnect, device number 86 [ 747.892312][ T5895] IPVS: starting estimator thread 0... [ 748.023379][T23047] IPVS: using max 26 ests per chain, 62400 per kthread [ 748.779041][T22886] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 748.822306][T22886] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 748.952971][T22886] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 748.969663][T22886] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 749.331456][ T5924] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 749.402966][T22947] vlan2: left promiscuous mode [ 749.408171][T22947] bridge0: port 3(vlan2) entered disabled state [ 749.449126][T22947] bridge_slave_1: left allmulticast mode [ 749.465917][T22947] bridge_slave_1: left promiscuous mode [ 749.474356][T23088] binder: 23087:23088 ioctl c0306201 80000640 returned -22 [ 749.492149][T22947] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.505031][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.534886][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.546544][T22947] bridge_slave_0: left promiscuous mode [ 749.568879][ T5924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.592062][T22947] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.598049][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.643993][ T5924] usb 5-1: Product: syz [ 749.661932][ T5924] usb 5-1: Manufacturer: syz [ 749.666571][ T5924] usb 5-1: SerialNumber: syz [ 749.833156][ T5835] Bluetooth: hci0: command tx timeout [ 749.922373][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.951957][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.963000][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.970564][ T5924] usb 5-1: 0:2 : does not exist [ 749.981391][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.990994][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 750.022980][ T5924] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 750.148719][ T5924] usb 5-1: USB disconnect, device number 87 [ 750.246668][T22173] udevd[22173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.238348][T23120] could not allocate digest TFM handle cryptd(blake2b-160) [ 751.328055][T22947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.344480][T22947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.369150][T22947] bond0 (unregistering): Released all slaves [ 751.656947][T22947] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 751.670665][T23144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6502'. [ 751.679823][T22947] vxcan3: left promiscuous mode [ 751.696643][T22947] bond1 (unregistering): Released all slaves [ 751.763395][ T5924] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 751.804714][ T5924] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz0 [ 752.054576][T22947] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 752.072028][T22947] batadv1: left promiscuous mode [ 752.077116][ T5835] Bluetooth: hci4: command tx timeout [ 752.085516][T22947] bond2 (unregistering): Released all slaves [ 752.402166][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6506'. [ 752.501029][T22947] bond3 (unregistering): Released all slaves [ 752.577934][T22886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.789710][T22947] tipc: Disabling bearer [ 752.810249][T22947] tipc: Left network mode [ 752.814522][T22886] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.869395][T19457] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.876538][T19457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.901436][T19457] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.908679][T19457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.166204][T22886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.576164][T22886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.601464][T22947] hsr_slave_0: left promiscuous mode [ 753.609230][T22947] hsr_slave_1: left promiscuous mode [ 753.732133][ T5924] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 753.897087][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 753.929262][ T5924] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 753.963175][ T5924] usb 5-1: config 0 has no interface number 0 [ 753.980254][ T5924] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 754.010627][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.034676][ T5924] usb 5-1: Product: syz [ 754.038881][ T5924] usb 5-1: Manufacturer: syz [ 754.052373][ T5924] usb 5-1: SerialNumber: syz [ 754.083504][ T5924] usb 5-1: config 0 descriptor?? [ 754.113468][ T5924] smsc95xx v2.0.0 [ 754.153028][ T5835] Bluetooth: hci4: command tx timeout [ 754.198075][T22947] team_slave_1 (unregistering): left promiscuous mode [ 754.217780][T22947] team0 (unregistering): Port device team_slave_1 removed [ 754.402606][T22947] team_slave_0 (unregistering): left promiscuous mode [ 754.423078][T22947] team0 (unregistering): Port device team_slave_0 removed [ 754.507583][ T5924] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 754.542507][ T5924] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 755.172877][ T5924] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 755.198478][ T5924] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 755.215067][T23098] chnl_net:caif_netlink_parms(): no params data found [ 755.252965][ T5924] usb 5-1: USB disconnect, device number 88 [ 755.472544][T23098] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.488708][T23098] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.503634][T23098] bridge_slave_0: entered allmulticast mode [ 755.518988][T23098] bridge_slave_0: entered promiscuous mode [ 755.553142][T23098] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.560442][T23098] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.568019][T23098] bridge_slave_1: entered allmulticast mode [ 755.576786][T23098] bridge_slave_1: entered promiscuous mode [ 755.635254][T22886] veth0_vlan: entered promiscuous mode [ 755.668059][T22947] IPVS: stop unused estimator thread 0... [ 755.689058][T23098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.741541][T23098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.849301][T22886] veth1_vlan: entered promiscuous mode [ 755.957002][T23098] team0: Port device team_slave_0 added [ 755.983170][T23098] team0: Port device team_slave_1 added [ 756.244140][ T5835] Bluetooth: hci4: command tx timeout [ 756.274603][T23098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.281570][T23098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.430623][T23098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.525537][T23098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.543333][T23098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.598549][T23098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.694631][ T30] audit: type=1326 audit(1750973181.598:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 756.741360][ T30] audit: type=1326 audit(1750973181.628:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 756.828537][ T30] audit: type=1326 audit(1750973181.628:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 756.850672][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.894058][T22947] IPVS: stop unused estimator thread 0... [ 756.952787][ T30] audit: type=1326 audit(1750973181.628:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 757.005491][T22886] veth0_macvtap: entered promiscuous mode [ 757.046435][ T30] audit: type=1326 audit(1750973181.628:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 757.068536][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.098727][ T30] audit: type=1326 audit(1750973181.628:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 757.120806][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.136557][ T30] audit: type=1326 audit(1750973181.628:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 757.144158][T23098] hsr_slave_0: entered promiscuous mode [ 757.167580][ T30] audit: type=1326 audit(1750973181.628:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 757.211277][T23098] hsr_slave_1: entered promiscuous mode [ 757.218120][T23098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.234452][T23098] Cannot create hsr debugfs directory [ 757.245191][T22886] veth1_macvtap: entered promiscuous mode [ 757.269595][ T30] audit: type=1326 audit(1750973181.628:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 757.295085][ T30] audit: type=1326 audit(1750973181.628:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.6.6531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 757.317193][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.506250][T22886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.525817][T22886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.557640][T23264] nla_validate_range_unsigned: 11 callbacks suppressed [ 757.557656][T23264] netlink: 'syz.4.6540': attribute type 11 has an invalid length. [ 757.700631][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.762098][T22886] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.770843][T22886] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.802813][T22886] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.811565][T22886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.905195][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.059630][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.313705][ T5835] Bluetooth: hci4: command tx timeout [ 758.471332][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.665525][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 758.677278][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 758.694838][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 758.707021][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 758.713233][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.722925][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 758.772877][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.177646][ T36] bridge_slave_1: left allmulticast mode [ 759.190793][ T36] bridge_slave_1: left promiscuous mode [ 759.205172][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.243130][ T36] bridge_slave_0: left allmulticast mode [ 759.251721][ T36] bridge_slave_0: left promiscuous mode [ 759.265516][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.153690][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.167143][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.176919][ T36] bond0 (unregistering): Released all slaves [ 760.199688][T23098] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 760.202073][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.219891][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.249891][T23098] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 760.340806][T23098] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 760.503360][T23098] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 760.792498][ T5835] Bluetooth: hci1: command tx timeout [ 760.804665][T23338] loop6: detected capacity change from 0 to 7 [ 760.812930][T23338] Dev loop6: unable to read RDB block 7 [ 760.818543][T23338] loop6: AHDI p1 p2 [ 760.848196][T23338] loop6: partition table partially beyond EOD, truncated [ 760.862404][T23338] loop6: p1 start 926365495 is beyond EOD, truncated [ 760.997809][ T36] hsr_slave_0: left promiscuous mode [ 761.024400][ T36] hsr_slave_1: left promiscuous mode [ 761.040313][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.063148][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.081414][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.102941][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.186363][ T36] veth1_macvtap: left promiscuous mode [ 761.194430][ T36] veth0_macvtap: left promiscuous mode [ 761.200078][ T36] veth1_vlan: left promiscuous mode [ 761.207344][ T36] veth0_vlan: left promiscuous mode [ 761.809032][ T36] team0 (unregistering): Port device team_slave_1 removed [ 761.856496][ T36] team0 (unregistering): Port device team_slave_0 removed [ 762.522134][T23098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.578365][T23292] chnl_net:caif_netlink_parms(): no params data found [ 762.740765][T23098] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.872351][ T5835] Bluetooth: hci1: command tx timeout [ 762.928414][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.935556][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.975572][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.982778][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.050575][T23292] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.069450][T23292] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.093008][T23292] bridge_slave_0: entered allmulticast mode [ 763.110948][T23292] bridge_slave_0: entered promiscuous mode [ 763.132922][T23292] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.141213][T23292] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.148989][T23292] bridge_slave_1: entered allmulticast mode [ 763.174348][T23292] bridge_slave_1: entered promiscuous mode [ 763.294847][T23292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.310751][T23292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.356495][T23292] team0: Port device team_slave_0 added [ 763.374921][T23292] team0: Port device team_slave_1 added [ 763.413944][T23292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.420909][T23292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.447781][T23292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.465184][T23098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.475593][T23292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.483060][T23292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.509590][T23292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.589160][T23292] hsr_slave_0: entered promiscuous mode [ 763.596469][T23292] hsr_slave_1: entered promiscuous mode [ 763.603559][T23292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.611168][T23292] Cannot create hsr debugfs directory [ 763.647688][T23098] veth0_vlan: entered promiscuous mode [ 763.695289][T23098] veth1_vlan: entered promiscuous mode [ 763.889726][T23098] veth0_macvtap: entered promiscuous mode [ 763.914201][T23098] veth1_macvtap: entered promiscuous mode [ 763.961599][T23098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.981649][T23098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.010548][T23098] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.022553][T23098] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.031364][T23098] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.040834][T23098] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.402663][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.420755][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.536601][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.570913][T23292] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 764.582379][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.632981][T23292] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 764.659435][T23292] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 764.726606][T23292] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 764.952119][ T5835] Bluetooth: hci1: command tx timeout [ 765.034773][T23422] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 765.143900][T19672] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 765.361999][T19672] usb 7-1: config 0 has no interfaces? [ 765.392108][T19672] usb 7-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 765.444379][T19672] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.476489][T19672] usb 7-1: Product: syz [ 765.486357][T19672] usb 7-1: Manufacturer: syz [ 765.500681][T19672] usb 7-1: SerialNumber: syz [ 765.538254][T19672] usb 7-1: config 0 descriptor?? [ 765.587528][T23292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.680143][T23292] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.727484][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.734708][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.777104][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.784297][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.997386][T17081] IPVS: starting estimator thread 0... [ 766.021431][T17081] usb 7-1: USB disconnect, device number 13 [ 766.102882][T23441] IPVS: using max 33 ests per chain, 79200 per kthread [ 766.120335][T23292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.209941][T23292] veth0_vlan: entered promiscuous mode [ 766.246684][T23292] veth1_vlan: entered promiscuous mode [ 766.348860][T23292] veth0_macvtap: entered promiscuous mode [ 766.378991][T23455] loop6: detected capacity change from 0 to 7 [ 766.388534][T23292] veth1_macvtap: entered promiscuous mode [ 766.394675][T23455] Dev loop6: unable to read RDB block 7 [ 766.400718][T23455] loop6: AHDI p1 p2 [ 766.418106][T23455] loop6: partition table partially beyond EOD, truncated [ 766.440356][T23455] loop6: p1 start 926365495 is beyond EOD, truncated [ 766.466771][T23292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.490260][T23292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.526784][T23459] input: syz0 as /devices/virtual/input/input123 [ 766.548775][T23292] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.590569][T23292] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.641969][T23292] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.650726][T23292] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.036807][ T5835] Bluetooth: hci1: command tx timeout [ 767.176932][T22947] IPVS: stop unused estimator thread 0... [ 767.239244][ T7754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.286087][ T7754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.397995][ T7756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.452755][ T7756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.821590][T23489] bridge_slave_0: left allmulticast mode [ 767.850257][T23489] bridge_slave_0: left promiscuous mode [ 767.864902][T23489] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.886000][T23489] bridge_slave_1: left allmulticast mode [ 767.895063][T23489] bridge_slave_1: left promiscuous mode [ 767.909508][T23489] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.947126][T23489] bond0: (slave bond_slave_0): Releasing backup interface [ 768.016550][T23489] bond0: (slave bond_slave_1): Releasing backup interface [ 768.090937][T23489] team0: Port device team_slave_0 removed [ 768.115780][T23489] team0: Port device team_slave_1 removed [ 768.134026][T23489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.166735][T23489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.203652][T23489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.222263][T23489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.632636][ T5895] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 769.837456][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 769.869608][ T5895] usb 5-1: config 5 has an invalid interface number: 72 but max is 0 [ 769.888119][ T5895] usb 5-1: config 5 has no interface number 0 [ 769.913244][ T5895] usb 5-1: config 5 interface 72 has no altsetting 0 [ 769.961278][ T5895] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 770.017053][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.093509][ T5895] usb 5-1: Product: syz [ 770.110392][ T5895] usb 5-1: Manufacturer: syz [ 770.128205][ T5895] usb 5-1: SerialNumber: syz [ 770.454835][ T5895] ftdi_sio 5-1:5.72: FTDI USB Serial Device converter detected [ 770.513814][ T5895] usb 5-1: Detected FT4232H [ 770.552479][ T5895] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 770.584870][ T5895] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 770.627800][ T5895] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 770.708051][ T5895] usb 5-1: USB disconnect, device number 89 [ 770.748886][ T5895] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 770.846112][ T5895] ftdi_sio 5-1:5.72: device disconnected [ 773.368783][T23630] netlink: 'syz.6.6625': attribute type 2 has an invalid length. [ 773.395845][T23630] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6625'. [ 774.362284][ T43] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 774.558848][ T43] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 774.562044][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6635'. [ 774.590120][ T43] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 774.621929][ T43] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 774.664586][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.125221][ T43] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 775.173881][ T43] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input124 [ 775.223062][ T43] input: failed to attach handler kbd to device input124, error: -5 [ 775.288367][T23683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6645'. [ 775.315310][ T43] usb 9-1: USB disconnect, device number 4 [ 775.395925][T23683] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) ! [ 776.374711][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 776.374730][ T30] audit: type=1326 audit(1750973201.278:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.6.6656" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 776.575123][T23720] loop2: detected capacity change from 0 to 7 [ 776.591764][T23720] Dev loop2: unable to read RDB block 7 [ 776.607269][T23720] loop2: unable to read partition table [ 776.622818][T23720] loop2: partition table beyond EOD, truncated [ 776.629040][T23720] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 776.733123][ T5905] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 776.827708][T23727] netlink: 88 bytes leftover after parsing attributes in process `syz.8.6662'. [ 776.836993][T23727] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6662'. [ 776.837450][T23728] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6661'. [ 776.904245][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 776.915194][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.941430][ T5905] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 776.970329][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.007203][ T5905] usb 5-1: config 0 descriptor?? [ 777.453441][ T5905] mcp2221 0003:04D8:00DD.0067: unknown main item tag 0x0 [ 777.506940][ T5905] mcp2221 0003:04D8:00DD.0067: unknown main item tag 0x0 [ 777.514933][ T5905] mcp2221 0003:04D8:00DD.0067: unknown main item tag 0x0 [ 777.522849][ T5905] mcp2221 0003:04D8:00DD.0067: unknown main item tag 0x0 [ 777.531072][ T5905] mcp2221 0003:04D8:00DD.0067: unknown main item tag 0x0 [ 777.539420][ T5905] mcp2221 0003:04D8:00DD.0067: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 777.769653][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6668'. [ 777.854965][ T43] usb 5-1: USB disconnect, device number 90 [ 778.341994][ T5924] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 778.513798][ T5924] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.558101][ T5924] usb 9-1: config 0 interface 0 has no altsetting 0 [ 778.599375][ T5924] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 778.614467][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.639520][ T5924] usb 9-1: Product: syz [ 778.651549][ T5924] usb 9-1: Manufacturer: syz [ 778.660025][ T5924] usb 9-1: SerialNumber: syz [ 778.684223][ T5924] usb 9-1: config 0 descriptor?? [ 778.708310][ T5924] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 778.756660][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 778.862425][ T5924] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 778.901330][ T5924] usb 9-1: media controller created [ 778.981797][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.162114][ T5924] DVB: Unable to find symbol tda10046_attach() [ 779.177560][ T5924] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 779.206123][ T5924] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 780.078244][ T5924] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 780.109178][ T5924] usb 9-1: USB disconnect, device number 5 [ 780.552146][T19684] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 780.750671][T19684] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 780.773225][T19684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.797455][T19684] usb 5-1: Product: syz [ 780.812308][T19684] usb 5-1: Manufacturer: syz [ 780.826328][T19684] usb 5-1: SerialNumber: syz [ 780.852731][T19684] usb 5-1: config 0 descriptor?? [ 781.066954][T19672] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 781.279361][T19672] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 781.302547][T19672] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 781.322048][T19684] airspy 5-1:0.0: Board ID: 00 [ 781.326928][T19684] airspy 5-1:0.0: Firmware version: [ 781.333013][T19672] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 781.352710][T19672] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.378327][T23825] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 781.411557][T19672] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 781.662991][T19672] usb 10-1: USB disconnect, device number 2 [ 781.835196][T23851] netlink: 'syz.6.6698': attribute type 2 has an invalid length. [ 781.846379][T23851] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6698'. [ 782.127505][T19684] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 782.143331][T19684] airspy 5-1:0.0: Registered as swradio24 [ 782.172900][T19684] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 782.218742][T19684] usb 5-1: USB disconnect, device number 91 [ 783.521895][ T5905] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 783.704076][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 783.727021][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 783.754470][ T43] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 783.757692][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 783.822712][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.862299][ T5905] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.871409][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.918629][ T5905] usb 5-1: config 0 descriptor?? [ 783.926046][ T43] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.960712][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 784.009637][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 784.042811][ T43] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 784.083259][ T43] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 784.092597][ T43] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 784.100708][ T43] usb 10-1: Manufacturer: syz [ 784.131452][ T43] usb 10-1: config 0 descriptor?? [ 784.342069][ T5904] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 784.369070][ T5905] plantronics 0003:047F:FFFF.0068: No inputs registered, leaving [ 784.428262][ T5905] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 784.554251][ T43] rc_core: IR keymap rc-hauppauge not found [ 784.560214][ T43] Registered IR keymap rc-empty [ 784.581530][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.613920][ T5904] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 784.623267][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.627665][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.651593][ T5904] usb 7-1: config 0 descriptor?? [ 784.700203][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 784.761801][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input126 [ 784.831411][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.891995][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.937224][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.992600][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 785.035598][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 785.083576][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 785.122001][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 785.164491][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 785.203946][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 785.234429][ T43] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 785.277225][ T43] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 785.304305][ T43] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 785.337224][ T43] usb 10-1: USB disconnect, device number 3 [ 785.818500][ T30] audit: type=1326 audit(1750973210.718:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.6728" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 785.998177][ T5904] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 786.010867][ T5904] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 786.035494][ T5904] asix 7-1:0.0: probe with driver asix failed with error -71 [ 786.048985][ T5904] usb 7-1: USB disconnect, device number 14 [ 786.457882][ T5905] usb 5-1: USB disconnect, device number 92 [ 786.597257][T23997] syzkaller1: entered promiscuous mode [ 786.608404][T23997] syzkaller1: entered allmulticast mode [ 787.410508][T24031] bridge0: entered promiscuous mode [ 787.453787][T24031] batman_adv: batadv0: Adding interface: macsec1 [ 787.471404][T24031] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.542531][T24031] batman_adv: batadv0: Interface activated: macsec1 [ 789.092119][ T5895] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 789.263671][ T5895] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 789.291976][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.321601][ T5895] usb 5-1: config 0 descriptor?? [ 789.767850][ T5895] elan 0003:04F3:0755.0069: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 790.029093][ T5925] usb 5-1: USB disconnect, device number 93 [ 790.482479][ T5904] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 790.507712][ T30] audit: type=1326 audit(1750973215.408:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24135 comm="syz.9.6777" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x0 [ 790.644618][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 790.653954][ T5904] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 790.674130][ T5904] usb 7-1: config 0 has no interface number 0 [ 790.691623][ T5904] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 790.728093][ T5904] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 790.755996][ T5904] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 790.774369][ T5904] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 790.806769][ T5904] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 790.825827][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.863324][ T5904] usb 7-1: config 0 descriptor?? [ 790.890769][ T5904] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 791.160723][ T5905] usb 7-1: USB disconnect, device number 15 [ 791.179364][ T5905] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 791.416718][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6784'. [ 791.700632][T24176] input: syz1 as /devices/virtual/input/input127 [ 791.884760][ T5905] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 791.926359][ T5905] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 796.751994][ T5904] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 796.971920][ T5904] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 797.017392][ T5904] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 797.060532][ T5904] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 797.096836][ T5904] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F is Bulk; changing to Interrupt [ 797.104255][T24342] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6833'. [ 797.162325][ T5904] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 797.171424][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.215708][T24321] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 797.275267][ T5904] hub 9-1:1.0: bad descriptor, ignoring hub [ 797.281225][ T5904] hub 9-1:1.0: probe with driver hub failed with error -5 [ 797.352539][ T5904] cdc_wdm 9-1:1.0: skipping garbage [ 797.361903][ T5904] cdc_wdm 9-1:1.0: skipping garbage [ 797.400962][ T5904] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 797.442048][ T5904] cdc_wdm 9-1:1.0: Unknown control protocol [ 797.909912][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 797.916575][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 797.923072][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 797.929716][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 797.936113][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 797.942745][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 797.949458][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 797.956185][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 797.962700][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 797.969343][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 797.975866][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 797.982494][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 797.989233][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 797.995864][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 798.003031][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 798.009663][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 798.022467][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 798.029117][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 798.036281][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 798.042913][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 798.356241][T24383] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.6844'. [ 798.722954][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 799.002203][T19684] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 799.192082][T19684] usb 10-1: Using ep0 maxpacket: 32 [ 799.221726][T19684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.292065][T19684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.348118][T19684] usb 10-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 799.384103][T19684] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.434242][T19684] usb 10-1: config 0 descriptor?? [ 799.460982][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 799.504010][T17081] usb 9-1: USB disconnect, device number 6 [ 799.931101][T19684] waterforce 0003:1044:7A4D.006B: unknown main item tag 0x0 [ 799.972042][T19684] waterforce 0003:1044:7A4D.006B: unknown main item tag 0x0 [ 800.021272][T19684] waterforce 0003:1044:7A4D.006B: unknown main item tag 0x0 [ 800.063424][T19684] waterforce 0003:1044:7A4D.006B: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.9-1/input0 [ 800.168132][T19684] waterforce 0003:1044:7A4D.006B: fw version request failed with -38 [ 800.219532][T19684] usb 10-1: USB disconnect, device number 4 [ 800.496265][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6854'. [ 801.164877][T24477] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6872'. [ 801.180922][T24477] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6872'. [ 801.691655][ T30] audit: type=1326 audit(1750973226.578:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff5558 code=0x7ffc0000 [ 801.963140][T24492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6877'. [ 801.965460][ T30] audit: type=1326 audit(1750973226.578:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x7ffc0000 [ 802.079627][ T30] audit: type=1326 audit(1750973226.578:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff5558 code=0x7ffc0000 [ 802.169341][ T30] audit: type=1326 audit(1750973226.578:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x7ffc0000 [ 802.352089][ T30] audit: type=1326 audit(1750973226.588:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff5558 code=0x7ffc0000 [ 802.486401][ T30] audit: type=1326 audit(1750973226.588:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff5558 code=0x7ffc0000 [ 802.641446][ T30] audit: type=1326 audit(1750973226.588:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x7ffc0000 [ 802.731952][ T30] audit: type=1326 audit(1750973226.588:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff5558 code=0x7ffc0000 [ 802.815375][ T30] audit: type=1326 audit(1750973226.588:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x7ffc0000 [ 802.954995][ T30] audit: type=1326 audit(1750973226.618:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff5558 code=0x7ffc0000 [ 804.636767][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6902'. [ 804.823087][ T5924] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 805.032385][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 805.039572][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.059660][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.082038][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 805.115360][ T5924] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 805.172272][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.205428][ T5924] usb 5-1: config 0 descriptor?? [ 805.655481][ T5924] microsoft 0003:045E:07DA.006C: ignoring exceeding usage max [ 805.724015][ T5924] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.006C/input/input128 [ 805.890905][ T5895] microsoft 0003:045E:07DA.006C: implement() called with too large value 1 (n: 0)! (kworker/1:5) [ 805.994081][ T5924] microsoft 0003:045E:07DA.006C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 806.101864][ T5924] usb 5-1: USB disconnect, device number 94 [ 806.188996][T24584] fido_id[24584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 807.471913][ T5924] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 807.669587][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.701362][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.783927][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 807.831984][ T5924] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 807.862028][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.972905][ T5924] usb 5-1: config 0 descriptor?? [ 808.399175][T24633] netlink: 'syz.6.6936': attribute type 1 has an invalid length. [ 808.455828][ T5924] plantronics 0003:047F:FFFF.006D: No inputs registered, leaving [ 808.500687][ T5924] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 808.509203][T24633] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.6936'. [ 808.570968][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.577427][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.192255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.551994][T19684] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 809.734807][T19684] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.751087][T19684] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.764387][T19684] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 809.774131][T19684] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.795110][T19684] usb 9-1: config 0 descriptor?? [ 809.859441][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 809.859459][ T30] audit: type=1800 audit(1750973234.748:6273): pid=24676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6953" name="nullb0" dev="devtmpfs" ino=4126 res=0 errno=0 [ 809.904986][T24676] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 809.912829][T24676] #PF: supervisor instruction fetch in kernel mode [ 809.919334][T24676] #PF: error_code(0x0010) - not-present page [ 809.925304][T24676] PGD 800000002a517067 P4D 800000002a517067 PUD 4966f067 PMD 0 [ 809.932973][T24676] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 809.938377][T24676] CPU: 0 UID: 0 PID: 24676 Comm: syz.6.6953 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 809.950459][T24676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 809.960549][T24676] RIP: 0010:0x0 [ 809.964038][T24676] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 809.971404][T24676] RSP: 0018:ffffc9000ca1f818 EFLAGS: 00010283 [ 809.977498][T24676] RAX: ffffffff81f84b34 RBX: 1ffffd4000273f10 RCX: 0000000000080000 [ 809.985479][T24676] RDX: ffffc9000e156000 RSI: ffffea000139f880 RDI: ffff8880621c0a80 [ 809.993468][T24676] RBP: ffffc9000ca1f8d0 R08: ffffea000139f887 R09: 1ffffd4000273f10 [ 810.001451][T24676] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 810.009431][T24676] R13: ffffea000139f888 R14: ffffea000139f880 R15: 1ffffd4000273f11 [ 810.017412][T24676] FS: 0000000000000000(0000) GS:ffff888125c50000(0063) knlGS:00000000f503eb40 [ 810.026343][T24676] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 810.032927][T24676] CR2: ffffffffffffffd6 CR3: 0000000031cfc000 CR4: 00000000003526f0 [ 810.040910][T24676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 810.048894][T24676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 810.056886][T24676] Call Trace: [ 810.060167][T24676] [ 810.063200][T24676] filemap_read_folio+0x117/0x380 [ 810.068246][T24676] ? __pfx_filemap_read_folio+0x10/0x10 [ 810.073805][T24676] ? filemap_add_folio+0x1af/0x270 [ 810.078927][T24676] do_read_cache_folio+0x350/0x590 [ 810.084063][T24676] freader_get_folio+0x3c4/0x830 [ 810.089026][T24676] freader_fetch+0xa3/0x5d0 [ 810.093560][T24676] __build_id_parse+0x133/0x7d0 [ 810.098439][T24676] ? __pfx___build_id_parse+0x10/0x10 [ 810.103837][T24676] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.109059][T24676] procfs_procmap_ioctl+0x7f0/0xce0 [ 810.114266][T24676] ? __lock_acquire+0xab9/0xd20 [ 810.119142][T24676] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 810.124875][T24676] ? __fget_files+0x2a/0x420 [ 810.129496][T24676] ? __fget_files+0x2a/0x420 [ 810.134100][T24676] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 810.139658][T24676] __ia32_compat_sys_ioctl+0x543/0x840 [ 810.145130][T24676] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 810.151122][T24676] ? __se_sys_futex_time32+0x360/0x3e0 [ 810.156594][T24676] ? rcu_is_watching+0x15/0xb0 [ 810.161370][T24676] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 810.167966][T24676] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.173171][T24676] __do_fast_syscall_32+0xb6/0x2b0 [ 810.178284][T24676] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.183498][T24676] do_fast_syscall_32+0x34/0x80 [ 810.188356][T24676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 810.194704][T24676] RIP: 0023:0xf704e539 [ 810.198782][T24676] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 810.218394][T24676] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 810.226846][T24676] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0686611 [ 810.234823][T24676] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 810.242806][T24676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 810.250790][T24676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 810.258768][T24676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 810.266747][T24676] [ 810.269778][T24676] Modules linked in: [ 810.273711][T24676] CR2: 0000000000000000 [ 810.277872][T24676] ---[ end trace 0000000000000000 ]--- [ 810.283334][T24676] RIP: 0010:0x0 [ 810.286805][T24676] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 810.294167][T24676] RSP: 0018:ffffc9000ca1f818 EFLAGS: 00010283 [ 810.300239][T24676] RAX: ffffffff81f84b34 RBX: 1ffffd4000273f10 RCX: 0000000000080000 [ 810.308224][T24676] RDX: ffffc9000e156000 RSI: ffffea000139f880 RDI: ffff8880621c0a80 [ 810.316202][T24676] RBP: ffffc9000ca1f8d0 R08: ffffea000139f887 R09: 1ffffd4000273f10 [ 810.324182][T24676] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 810.332155][T24676] R13: ffffea000139f888 R14: ffffea000139f880 R15: 1ffffd4000273f11 [ 810.340134][T24676] FS: 0000000000000000(0000) GS:ffff888125c50000(0063) knlGS:00000000f503eb40 [ 810.349068][T24676] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 810.355652][T24676] CR2: ffffffffffffffd6 CR3: 0000000031cfc000 CR4: 00000000003526f0 [ 810.363629][T24676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 810.371623][T24676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 810.379595][T24676] Kernel panic - not syncing: Fatal exception [ 810.386046][T24676] Kernel Offset: disabled [ 810.390378][T24676] Rebooting in 86400 seconds..