last executing test programs: 1m22.024985399s ago: executing program 4 (id=636): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000000000000000000001000000000d0001"], 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 1m19.360350637s ago: executing program 4 (id=651): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4) 1m19.306483393s ago: executing program 4 (id=652): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/100, 0x64}, 0x6}], 0x1, 0x45833af92e4b39ff, 0x0) 1m18.369325203s ago: executing program 4 (id=661): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0002009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 1m18.157641133s ago: executing program 4 (id=663): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @remote}, {0x4e23, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x398}}}}}}, 0x0) 1m17.777737256s ago: executing program 4 (id=667): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) socket$inet6(0xa, 0x3, 0x3c) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 1m17.527733806s ago: executing program 32 (id=667): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) socket$inet6(0xa, 0x3, 0x3c) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 33.182270128s ago: executing program 5 (id=895): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x80, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x4, r5, 0x1, 0x80}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000340)={@remote, @multicast, @void, {@llc_tr={0x11, {@llc={0x42, 0xf0, 'y'}}}}}, 0x0) 33.054421816s ago: executing program 5 (id=897): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x6, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0xffffffff, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x4, 0x7ff, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x2, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x7, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x6, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x80000008, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x400001, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x80, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x5, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x3d, 0x10000, 0xf9, 0x6, 0x408, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x20000, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1c0, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x1ff, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0x80000d3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x6, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0xffffffff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x9, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x9, 0xfffffffc, 0x81, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x20000050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 31.061663051s ago: executing program 5 (id=904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x408, 0x469}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x30}, 0x1, 0x200000000000000, 0x0, 0x2000805}, 0x4010) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r5, 0x8910, 0x1) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7f64, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0xcfd, 0x4, 0x1011, 0x3, 0x5, 0x8, 0x1, 0x3}}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) 28.259893693s ago: executing program 5 (id=914): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 27.308213591s ago: executing program 5 (id=928): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket(0x400000000010, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000340), 0x8) 26.310631941s ago: executing program 5 (id=934): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x5, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000340)={0x640527ff40f3107f, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0}) r2 = syz_open_dev$video4linux(&(0x7f0000000380), 0x100000000, 0x80) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000480)={0x9d0000, 0x7, 0x6, 0xffffffffffffffff, 0x0, 0x0}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0xd, 0xf, 0xffffffff, 0x20323159, [0x30, 0x3], [0xffff, 0xf09], 0x1}}) 25.776430454s ago: executing program 33 (id=934): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x5, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000340)={0x640527ff40f3107f, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0}) r2 = syz_open_dev$video4linux(&(0x7f0000000380), 0x100000000, 0x80) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000480)={0x9d0000, 0x7, 0x6, 0xffffffffffffffff, 0x0, 0x0}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0xd, 0xf, 0xffffffff, 0x20323159, [0x30, 0x3], [0xffff, 0xf09], 0x1}}) 5.385493447s ago: executing program 1 (id=1033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 5.259285628s ago: executing program 1 (id=1034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.002496693s ago: executing program 1 (id=1035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005003000"], 0xfdef) 4.46306914s ago: executing program 2 (id=1039): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f7}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 4.338860495s ago: executing program 1 (id=1042): r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x8}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r7 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000002f907864e5be33c6a8010102ac1414aa4001880bbeb9ba7ca80efb743e86633e907b8fd16c6984cdea36ddc547d2803ee847b46a33002cd17f711456761da2de0a7a09d4a8628c98b3077afcb55a81b7552abfd67ec95c85f671d0a1feceff6f9874ddd1bb4d78c84355b6b2f7403dfc11e20328f77eabe5fb130db03c5caaa71237a9cfcc12742827e04b2e1812", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 4.319666216s ago: executing program 2 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) 4.220087588s ago: executing program 0 (id=1044): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x3) read$FUSE(r2, &(0x7f00000082c0)={0x2020}, 0x2020) 4.135886417s ago: executing program 2 (id=1046): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x2000005, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.231910841s ago: executing program 1 (id=1050): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780), 0x8) close(0x3) 3.105734791s ago: executing program 1 (id=1052): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=""/92) 3.04311977s ago: executing program 0 (id=1053): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.95987307s ago: executing program 3 (id=1054): timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000340)={{}, {r1, r2+60000000}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'bond0\x00', @broadcast}) 2.94978148s ago: executing program 2 (id=1055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r1 = gettid() ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xaf4, 0x0) 2.815170697s ago: executing program 0 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff7f}, "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", "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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000167000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000156000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040040000f0f10970fe8fa6466baf80cb82cf59b88ef66bafc0cb000eec4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66ba004066ef66b8296c", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.645839529s ago: executing program 3 (id=1057): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 2.399615194s ago: executing program 3 (id=1058): creat(&(0x7f00000000c0)='./file0\x00', 0x18) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000005c000000000000000f00e035200000000f22e0"], 0x5c}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000e9ffff4f000000000000000f080f0866ba2100b0db000000ef450f22c2"], 0x296}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.309754372s ago: executing program 0 (id=1059): r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x8}, 0x8) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r8 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000002f907864e5be33c6a8010102ac1414aa4001880bbeb9ba7ca80efb743e86633e907b8fd16c6984cdea36ddc547d2803ee847b46a33002cd17f711456761da2de0a7a09d4a8628c98b3077afcb55a81b7552abfd67ec95c85f671d0a1feceff6f9874ddd1bb4d78c84355b6b2f7403dfc11e20328f77eabe5fb130db03c5caaa71237a9cfcc12742827e04b2e1812", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2.28260747s ago: executing program 3 (id=1060): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x5) 1.967025093s ago: executing program 3 (id=1061): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x14}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000640)='!'}) 1.708438264s ago: executing program 2 (id=1062): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 1.209089665s ago: executing program 0 (id=1063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9457b99846b6f498adbe647d969c4563681a22d5a76e6e6fc00940a097bda4cc8c70c327d016a875936c8ba9d0223c3ea9f3117038df08b613cb5d14e0b4b8a679952c8ab5660b0787bd7a700000000000051081ab69f42829d9f9d2cb324a5fdc40f6b6c7d4e83af601e9f647ad7e6", 0xa1, 0x8814, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.150933187s ago: executing program 3 (id=1064): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000110001002cbd7000fcdbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) close(0x3) 1.0928019s ago: executing program 2 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x2, 0x2, 0x4, 0x10000}, 0x0, 0x0) 0s ago: executing program 0 (id=1066): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x21, 0x10100, 0x0, 0x20000}, &(0x7f0000000040), &(0x7f0000000100)) write$cgroup_devices(r2, &(0x7f0000000140)={'c', ' *:* ', 'w\x00'}, 0x8) io_uring_enter(r2, 0x1c44, 0xfffffffe, 0x41, 0x0, 0xffffff27) kernel console output (not intermixed with test programs): enamed from eth3 [ 93.570909][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.583257][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.601593][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.618771][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.708920][ T5157] Bluetooth: hci2: command tx timeout [ 93.708929][ T51] Bluetooth: hci3: command tx timeout [ 93.783934][ T5157] Bluetooth: hci4: command tx timeout [ 93.816931][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.826600][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.859128][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.872154][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.898281][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.908694][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.967312][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.985566][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.011142][ T2120] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.018843][ T2120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.039561][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.046804][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.064776][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.119473][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.126666][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.138568][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.145738][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.160423][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.193177][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.200409][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.212011][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.219356][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.408434][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.429633][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.442209][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.507846][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.551072][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.577602][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.584949][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.621605][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.628794][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.711913][ T3144] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.719176][ T3144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.810373][ T3144] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.817704][ T3144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.920362][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.960744][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.052139][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.252526][ T5848] veth0_vlan: entered promiscuous mode [ 95.311221][ T5841] veth0_vlan: entered promiscuous mode [ 95.328028][ T5848] veth1_vlan: entered promiscuous mode [ 95.382195][ T5841] veth1_vlan: entered promiscuous mode [ 95.492070][ T5848] veth0_macvtap: entered promiscuous mode [ 95.515908][ T5841] veth0_macvtap: entered promiscuous mode [ 95.527934][ T5848] veth1_macvtap: entered promiscuous mode [ 95.548966][ T5841] veth1_macvtap: entered promiscuous mode [ 95.553632][ T5157] Bluetooth: hci0: command tx timeout [ 95.555341][ T51] Bluetooth: hci1: command tx timeout [ 95.631515][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.685455][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.702541][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.736657][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.757850][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.768008][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.778139][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.785377][ T51] Bluetooth: hci3: command tx timeout [ 95.787128][ T5157] Bluetooth: hci2: command tx timeout [ 95.792453][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.792499][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.821660][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.832508][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.843039][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.853471][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.864010][ T5157] Bluetooth: hci4: command tx timeout [ 95.885285][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.909811][ T5837] veth0_vlan: entered promiscuous mode [ 95.950359][ T5837] veth1_vlan: entered promiscuous mode [ 96.066818][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.079908][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.131755][ T5852] veth0_vlan: entered promiscuous mode [ 96.138556][ T5837] veth0_macvtap: entered promiscuous mode [ 96.176252][ T5837] veth1_macvtap: entered promiscuous mode [ 96.208216][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.211262][ T5850] veth0_vlan: entered promiscuous mode [ 96.216283][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.255145][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.263060][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.301290][ T5852] veth1_vlan: entered promiscuous mode [ 96.308943][ T5850] veth1_vlan: entered promiscuous mode [ 96.350641][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.376731][ T3144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.390470][ T3144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.413285][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.426068][ T5850] veth0_macvtap: entered promiscuous mode [ 96.444237][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.453011][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.462296][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.471172][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483997][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.499421][ T5850] veth1_macvtap: entered promiscuous mode [ 96.574714][ T5852] veth0_macvtap: entered promiscuous mode [ 96.607873][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.680752][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.702741][ T5852] veth1_macvtap: entered promiscuous mode [ 96.708372][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.738182][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.753231][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.767559][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.776442][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.869710][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.931445][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.978477][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.011940][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.021430][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.023426][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.039217][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.048341][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.171209][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.179926][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.267785][ T2120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.285115][ T2120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.295592][ T982] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.369473][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.382144][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.455760][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 97.463314][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.487294][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.487578][ T982] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 97.511821][ T982] usb 2-1: config 0 has no interface number 0 [ 97.518488][ T982] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.536124][ T982] usb 2-1: config 0 interface 85 has no altsetting 0 [ 97.550647][ T982] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 97.580186][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.608548][ T982] usb 2-1: Product: syz [ 97.624139][ T5157] Bluetooth: hci0: command tx timeout [ 97.624164][ T51] Bluetooth: hci1: command tx timeout [ 97.640082][ T982] usb 2-1: Manufacturer: syz [ 97.655082][ T982] usb 2-1: SerialNumber: syz [ 97.667978][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.679126][ T982] usb 2-1: config 0 descriptor?? [ 97.684673][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.865809][ T51] Bluetooth: hci2: command tx timeout [ 97.866055][ T5157] Bluetooth: hci3: command tx timeout [ 97.945240][ T5157] Bluetooth: hci4: command tx timeout [ 98.164278][ T5977] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 98.312515][ T5982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.337679][ T982] appletouch 2-1:0.85: Geyser mode initialized. [ 98.389418][ T982] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5 [ 98.622694][ T982] usb 2-1: USB disconnect, device number 2 [ 98.791247][ T982] appletouch 2-1:0.85: input: appletouch disconnected [ 98.934910][ T5995] Zero length message leads to an empty skb [ 99.838107][ T6005] mkiss: ax0: crc mode is auto. [ 99.898553][ T6009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.024720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.033244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.293886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.302321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.311268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.374347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.572701][ T6027] trusted_key: encrypted_key: insufficient parameters specified [ 100.665547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.783588][ T5960] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.973724][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 101.005113][ T5960] usb 5-1: config 0 has no interfaces? [ 101.018766][ T5960] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 101.052836][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.112929][ T5960] usb 5-1: config 0 descriptor?? [ 101.771971][ T5960] usb 5-1: USB disconnect, device number 2 [ 102.031989][ T3003] nci: nci_rsp_packet: unknown rsp opcode 0xe39 [ 102.102899][ T6041] block device autoloading is deprecated and will be removed. [ 102.343839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.881771][ T6054] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 103.243638][ T5965] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.295196][ T6063] veth0: entered promiscuous mode [ 103.305181][ T6062] veth0: left promiscuous mode [ 103.418398][ T5965] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 103.429461][ C0] Unknown status report in ack skb [ 103.444482][ T5965] usb 2-1: config 0 has no interface number 0 [ 103.450636][ T5965] usb 2-1: config 0 interface 255 has no altsetting 0 [ 103.503593][ T5965] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 103.533683][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.553544][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.587419][ T5965] usb 2-1: config 0 descriptor?? [ 103.616404][ T5965] cp210x 2-1:0.255: cp210x converter detected [ 103.705500][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 103.714231][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.730300][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.759460][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.790316][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.104278][ T5965] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 104.110012][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.176579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.278198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.326778][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.415801][ T5965] cp210x 2-1:0.255: GPIO initialisation failed: -19 [ 104.471188][ T5965] usb 2-1: cp210x converter now attached to ttyUSB0 [ 104.653303][ T5965] usb 2-1: USB disconnect, device number 3 [ 104.672792][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 104.685288][ T5965] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 104.690264][ T9] usbtmc 5-1:16.0: can't read capabilities [ 104.719507][ T5965] cp210x 2-1:0.255: device disconnected [ 104.783853][ T5960] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.945953][ T5960] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.963600][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.978381][ T5902] usb 5-1: USB disconnect, device number 3 [ 104.985988][ T5960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.005186][ T5960] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.032616][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.047235][ T5960] usb 1-1: Product: syz [ 105.051458][ T5960] usb 1-1: Manufacturer: syz [ 105.058321][ T5960] usb 1-1: SerialNumber: syz [ 105.084900][ T5960] usb 1-1: config 0 descriptor?? [ 105.109583][ T5960] usb 1-1: selecting invalid altsetting 0 [ 105.124119][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 105.141558][ T24] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 105.173226][ T24] usb 4-1: config 0 has no interface number 0 [ 105.186250][ T24] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.202761][ T24] usb 4-1: config 0 interface 85 has no altsetting 0 [ 105.254508][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 105.270295][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.091456][ T24] usb 4-1: Product: syz [ 106.095792][ T24] usb 4-1: Manufacturer: syz [ 106.100415][ T24] usb 4-1: SerialNumber: syz [ 106.116167][ T5960] usb 1-1: USB disconnect, device number 2 [ 106.169657][ T24] usb 4-1: config 0 descriptor?? [ 106.186281][ T6093] Bluetooth: MGMT ver 1.23 [ 106.217329][ T6093] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 106.246510][ T6095] kvm: user requested TSC rate below hardware speed [ 106.287839][ T6097] mkiss: ax0: crc mode is auto. [ 106.803626][ T24] appletouch 4-1:0.85: Geyser mode initialized. [ 106.821280][ T24] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input6 [ 106.974287][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.039960][ T5965] usb 4-1: USB disconnect, device number 2 [ 107.141701][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.198305][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.211923][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.227078][ T5965] appletouch 4-1:0.85: input: appletouch disconnected [ 107.261663][ T5902] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.289193][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.326529][ T5902] usb 3-1: config 0 descriptor?? [ 107.425813][ T6115] mkiss: ax0: crc mode is auto. [ 107.833153][ T5902] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 108.403210][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (syz.2.54) [ 108.504969][ T6135] syzkaller1: entered promiscuous mode [ 108.531542][ T6135] syzkaller1: entered allmulticast mode [ 108.562066][ T6140] GUP no longer grows the stack in syz.3.65 (6140): 200000004000-200000008000 (200000002000) [ 108.611003][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.3.65 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 108.611035][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.611056][ T6140] Call Trace: [ 108.611069][ T6140] [ 108.611079][ T6140] dump_stack_lvl+0x189/0x250 [ 108.611122][ T6140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.611147][ T6140] ? __pfx__printk+0x10/0x10 [ 108.611171][ T6140] ? find_vma+0xe7/0x160 [ 108.611207][ T6140] __get_user_pages+0x2a60/0x30b0 [ 108.611284][ T6140] ? __pfx___get_user_pages+0x10/0x10 [ 108.611327][ T6140] get_user_pages_remote+0x2f9/0xaa0 [ 108.611360][ T6140] ? __pfx_mtree_load+0x10/0x10 [ 108.611391][ T6140] ? __pfx_get_user_pages_remote+0x10/0x10 [ 108.611436][ T6140] __access_remote_vm+0x215/0x5f0 [ 108.611468][ T6140] ? __pfx___access_remote_vm+0x10/0x10 [ 108.611494][ T6140] ? alloc_pages_noprof+0xbe/0x190 [ 108.611522][ T6140] proc_pid_cmdline_read+0x440/0x840 [ 108.611546][ T6140] ? __asan_memset+0x22/0x50 [ 108.611584][ T6140] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 108.611612][ T6140] ? rw_verify_area+0x258/0x650 [ 108.611649][ T6140] vfs_readv+0x5a7/0x850 [ 108.611675][ T6140] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 108.611702][ T6140] ? __pfx_vfs_readv+0x10/0x10 [ 108.611744][ T6140] ? __fget_files+0x2a/0x420 [ 108.611774][ T6140] ? __fget_files+0x3a0/0x420 [ 108.611797][ T6140] ? __fget_files+0x2a/0x420 [ 108.611832][ T6140] __x64_sys_preadv+0x197/0x2a0 [ 108.611858][ T6140] ? __pfx___x64_sys_preadv+0x10/0x10 [ 108.611878][ T6140] ? rcu_is_watching+0x15/0xb0 [ 108.611907][ T6140] ? do_syscall_64+0xbe/0x3b0 [ 108.611935][ T6140] do_syscall_64+0xfa/0x3b0 [ 108.611958][ T6140] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.611985][ T6140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.612007][ T6140] ? clear_bhb_loop+0x60/0xb0 [ 108.612033][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.612054][ T6140] RIP: 0033:0x7fa626d8e9a9 [ 108.612079][ T6140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.612097][ T6140] RSP: 002b:00007fa627b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 108.612120][ T6140] RAX: ffffffffffffffda RBX: 00007fa626fb5fa0 RCX: 00007fa626d8e9a9 [ 108.612136][ T6140] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 108.612149][ T6140] RBP: 00007fa626e10d69 R08: 0000000000000200 R09: 0000000000000000 [ 108.612162][ T6140] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 108.612174][ T6140] R13: 0000000000000000 R14: 00007fa626fb5fa0 R15: 00007fff4d6430b8 [ 108.612207][ T6140] [ 108.620279][ T5902] usb 3-1: USB disconnect, device number 2 [ 109.075474][ T6150] netlink: 76 bytes leftover after parsing attributes in process `syz.3.68'. [ 109.430770][ T6157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 110.511136][ T6172] trusted_key: encrypted_key: insufficient parameters specified [ 111.024474][ T6185] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.330033][ T6193] netlink: 'syz.4.80': attribute type 22 has an invalid length. [ 111.359766][ T6193] netlink: 148 bytes leftover after parsing attributes in process `syz.4.80'. [ 111.575714][ T30] audit: type=1326 audit(1753361551.986:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.0.81" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36ef8e9a9 code=0x0 [ 112.217820][ T6213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 113.253816][ T982] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 113.426372][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.478760][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.536927][ T982] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.564783][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.608485][ T982] usb 5-1: config 0 descriptor?? [ 113.845238][ T6257] loop2: detected capacity change from 0 to 7 [ 113.859662][ T5852] Dev loop2: unable to read RDB block 7 [ 113.901038][ T982] usbhid 5-1:0.0: can't add hid device: -71 [ 113.918730][ T5852] loop2: AHDI p1 p2 p3 [ 113.936373][ T5852] loop2: partition table partially beyond EOD, truncated [ 113.948804][ T982] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 113.970044][ T5852] loop2: p1 start 1601398130 is beyond EOD, truncated [ 113.974981][ T982] usb 5-1: USB disconnect, device number 4 [ 114.007444][ T5852] loop2: p2 start 1702059890 is beyond EOD, truncated [ 114.042271][ T6257] Dev loop2: unable to read RDB block 7 [ 114.059134][ T6257] loop2: AHDI p1 p2 p3 [ 114.071201][ T6257] loop2: partition table partially beyond EOD, truncated [ 114.094713][ T6257] loop2: p1 start 1601398130 is beyond EOD, truncated [ 114.100775][ T6263] netlink: 'syz.0.103': attribute type 1 has an invalid length. [ 114.120499][ T6257] loop2: p2 start 1702059890 is beyond EOD, truncated [ 114.506310][ T6273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.106'. [ 114.816024][ T6278] mkiss: ax0: crc mode is auto. [ 115.005093][ T6289] process 'syz.3.113' launched './file1' with NULL argv: empty string added [ 115.023160][ T6290] trusted_key: encrypted_key: insufficient parameters specified [ 115.238506][ T6296] binder: 6294:6296 ioctl c0306201 200000000540 returned -14 [ 115.724040][ T5965] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.929323][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 115.955707][ T5965] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 115.987326][ T5965] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.013585][ T5965] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.013997][ T982] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.029572][ T5965] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.213673][ T982] usb 1-1: Using ep0 maxpacket: 16 [ 116.222092][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.244844][ T982] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 116.248773][ T5965] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.270012][ T5965] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.279209][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.289407][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.316067][ T982] usb 1-1: config 0 descriptor?? [ 116.393140][ T6319] trusted_key: encrypted_key: insufficient parameters specified [ 116.713166][ T5965] usb 4-1: usb_control_msg returned -32 [ 116.802811][ T5965] usbtmc 4-1:16.0: can't read capabilities [ 117.323042][ T982] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 117.350879][ T982] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 117.370200][ T982] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 117.401116][ T982] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 117.419938][ T982] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 117.435078][ T982] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 117.449873][ T6335] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 117.651456][ T9] usb 4-1: USB disconnect, device number 3 [ 117.708134][ T6337] mkiss: ax0: crc mode is auto. [ 118.314219][ T6349] block nbd0: NBD_DISCONNECT [ 118.340261][ T6349] block nbd0: Send disconnect failed -22 [ 118.353084][ T982] usb 1-1: USB disconnect, device number 3 [ 118.359950][ T6349] block nbd0: Send disconnect failed -22 [ 118.414608][ T6348] block nbd0: Disconnected due to user request. [ 118.432295][ T6348] block nbd0: shutting down sockets [ 118.540647][ T6356] trusted_key: encrypted_key: insufficient parameters specified [ 119.337254][ T6381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.357582][ T6381] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 119.844135][ T5924] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.907531][ T5960] IPVS: starting estimator thread 0... [ 119.958739][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 120.007907][ T6398] IPVS: using max 26 ests per chain, 62400 per kthread [ 120.029065][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.085293][ T5924] usb 4-1: config 1 has no interface number 0 [ 120.091491][ T5924] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.161878][ T5924] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 120.186710][ T5924] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x61, changing to 0x1 [ 120.206918][ T5924] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 120.222638][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.237056][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.250892][ T5924] usb 4-1: Product: syz [ 120.261670][ T5924] usb 4-1: Manufacturer: syz [ 120.268180][ T5924] usb 4-1: SerialNumber: syz [ 120.426060][ T5960] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.872122][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'. [ 120.963858][ T55] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.169188][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 121.251653][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.273810][ T5924] cdc_ncm 4-1:1.1: bind() failure [ 121.320442][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.427019][ T55] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.494867][ T5924] usb 4-1: USB disconnect, device number 4 [ 121.510485][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.530196][ T6099] udevd[6099]: failed to send result of seq 11699 to main daemon: Connection refused [ 121.602188][ T55] usb 3-1: config 0 descriptor?? [ 121.754007][ T55] hub 3-1:0.0: USB hub found [ 121.857756][ T55] hub 3-1:0.0: 1 port detected [ 121.870621][ T6435] capability: warning: `syz.4.169' uses deprecated v2 capabilities in a way that may be insecure [ 122.130706][ T6440] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 122.264489][ T55] usb 3-1: USB disconnect, device number 3 [ 122.355909][ T6449] trusted_key: encrypted_key: insufficient parameters specified [ 122.450293][ T5960] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.832461][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.923678][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 122.948743][ T5960] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 122.958673][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.980131][ T5960] usb 5-1: Product: syz [ 122.994183][ T5960] usb 5-1: Manufacturer: syz [ 122.999657][ T5960] usb 5-1: SerialNumber: syz [ 123.010516][ T5960] usb 5-1: config 0 descriptor?? [ 123.029010][ T5960] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 123.053098][ T5960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.075060][ T5960] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 123.094865][ T5960] usb 5-1: media controller created [ 123.162065][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.410522][ T5960] DVB: Unable to find symbol tda10046_attach() [ 123.423600][ T5960] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 123.463892][ T5960] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 123.492197][ T6469] Bluetooth: hci0: unsupported parameter 2327 [ 123.510355][ T6469] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 123.653756][ T48] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.842587][ T48] usb 1-1: config 0 has no interfaces? [ 123.870884][ T48] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 123.884318][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.892498][ T48] usb 1-1: Product: syz [ 123.899265][ T48] usb 1-1: Manufacturer: syz [ 123.906679][ T48] usb 1-1: SerialNumber: syz [ 123.922483][ T48] usb 1-1: config 0 descriptor?? [ 124.168186][ T6462] veth1_macvtap: left promiscuous mode [ 124.192601][ T5960] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 124.208151][ T5960] usb 5-1: USB disconnect, device number 5 [ 124.504606][ T6462] veth1_macvtap: entered promiscuous mode [ 124.576789][ T6502] trusted_key: encrypted_key: insufficient parameters specified [ 124.780476][ T55] usb 1-1: USB disconnect, device number 5 [ 125.347798][ T6462] syz.0.178 (6462) used greatest stack depth: 19512 bytes left [ 125.454015][ T48] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.625587][ T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.638124][ T12] veth1_macvtap: left promiscuous mode [ 125.658229][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 125.677938][ T48] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 125.693723][ T982] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.703387][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 125.716384][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 125.728816][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 125.740691][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 125.778157][ T48] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 125.803871][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 125.868948][ T55] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 125.893183][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.909448][ T982] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.914004][ T55] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 125.938298][ T48] usb 2-1: Product: syz [ 125.942537][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.948961][ T48] usb 2-1: Manufacturer: syz [ 125.994215][ T55] usb 3-1: Product: syz [ 125.998630][ T55] usb 3-1: Manufacturer: syz [ 126.000896][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.004074][ T48] usb 2-1: SerialNumber: syz [ 126.032889][ T55] usb 3-1: SerialNumber: syz [ 126.065638][ T982] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 126.072051][ T55] usb 3-1: config 0 descriptor?? [ 126.124369][ T48] usb 2-1: config 0 descriptor?? [ 126.304218][ T982] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 126.315282][ T982] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 126.324654][ T982] usb 1-1: Manufacturer: syz [ 126.497501][ T55] usb 3-1: USB disconnect, device number 4 [ 126.510954][ T982] usb 1-1: config 0 descriptor?? [ 126.694725][ T48] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 126.700862][ T48] input input9: Device does not respond to id packet M [ 126.719184][ T48] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 126.728584][ T48] input input9: Device does not respond to id packet P [ 126.736714][ T48] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 126.742990][ T48] input input9: Device does not respond to id packet B [ 126.752066][ T48] input input9: Device does not respond to id packet N [ 126.944284][ T982] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 126.953370][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 126.968032][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 126.983061][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 126.989140][ T982] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 127.002791][ T6539] dummy0: entered promiscuous mode [ 127.025921][ T6539] dummy0: left promiscuous mode [ 127.030248][ T48] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 127.051507][ T48] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 127.129978][ T48] usb 2-1: USB disconnect, device number 4 [ 127.603650][ T982] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.779696][ T48] usb 1-1: USB disconnect, device number 6 [ 127.818816][ T982] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.867209][ T982] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.890640][ T982] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.905774][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.924993][ T6553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.953261][ T982] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.179564][ T48] usb 4-1: USB disconnect, device number 5 [ 128.303690][ T982] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.475101][ T982] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.566283][ T982] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.721346][ T982] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.896317][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.004051][ T6578] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 129.018361][ T982] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.247533][ T982] usb 2-1: USB disconnect, device number 5 [ 129.849610][ T6595] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 130.253345][ T6593] input: syz1 as /devices/virtual/input/input11 [ 130.769550][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 131.007242][ T6612] mkiss: ax0: crc mode is auto. [ 131.553677][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.781749][ T6626] trusted_key: encrypted_key: insufficient parameters specified [ 131.882820][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 132.216672][ T5923] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.273586][ T5923] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.304352][ T5923] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 132.355714][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.382863][ T5923] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 132.413352][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.437483][ T5923] usb 2-1: config 0 descriptor?? [ 133.034737][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.041542][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.322404][ T5923] hid (null): global environment stack underflow [ 133.339047][ T5923] hid (null): invalid report_count 107748025 [ 133.345795][ T5923] hid (null): unknown global tag 0xd [ 133.351129][ T5923] hid (null): invalid report_count -741437095 [ 133.365908][ T5923] usb 2-1: USB disconnect, device number 6 [ 133.973878][ T6645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 135.870333][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 135.896342][ T6659] mkiss: ax0: crc mode is auto. [ 136.863831][ T5965] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.372164][ T5965] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.661861][ T5965] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.674920][ T5965] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.686918][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.032757][ T6686] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 138.053177][ T6670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.081048][ T5965] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.298671][ T5923] usb 2-1: USB disconnect, device number 7 [ 138.764182][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 138.780409][ T6708] mkiss: ax0: crc mode is auto. [ 138.861111][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 138.960720][ T6713] trusted_key: encrypted_key: insufficient parameters specified [ 140.234994][ T6734] trusted_key: encrypted_key: insufficient parameters specified [ 142.243597][ T982] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.282601][ T6766] mkiss: ax0: crc mode is auto. [ 142.565986][ T982] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 142.653696][ T6773] trusted_key: encrypted_key: insufficient parameters specified [ 143.254579][ T982] usb 1-1: config 160 has no interface number 0 [ 143.261029][ T982] usb 1-1: config 160 interface 200 has no altsetting 0 [ 143.271244][ T982] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 143.384985][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.436527][ T982] usb 1-1: Product: syz [ 143.440779][ T982] usb 1-1: Manufacturer: syz [ 143.470783][ T982] usb 1-1: SerialNumber: syz [ 143.589778][ T6775] trusted_key: encrypted_key: insufficient parameters specified [ 143.810543][ T982] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.823568][ T982] usb 1-1: MIDIStreaming interface descriptor not found [ 143.904091][ T982] usb 1-1: USB disconnect, device number 7 [ 145.076670][ T6794] mkiss: ax0: crc mode is auto. [ 145.636141][ T6814] kvm: MWAIT instruction emulated as NOP! [ 147.333768][ T5923] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.495574][ T5923] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.515874][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.535850][ T5923] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 147.556638][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.570069][ T5923] usb 3-1: config 0 descriptor?? [ 147.825482][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 147.835011][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 147.868332][ T5923] usb 3-1: USB disconnect, device number 5 [ 148.079519][ T6881] netlink: 48 bytes leftover after parsing attributes in process `syz.1.315'. [ 149.443565][ T55] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.684517][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.736718][ T6909] trusted_key: encrypted_key: insufficient parameters specified [ 150.009189][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.030213][ T55] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.239201][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.455508][ T55] usb 1-1: config 0 descriptor?? [ 151.185853][ T6914] trusted_key: encrypted_key: insufficient parameters specified [ 151.769845][ T6937] netlink: 1092 bytes leftover after parsing attributes in process `syz.4.336'. [ 151.927034][ T55] uclogic 0003:256C:006D.0005: v1 frame probing failed: -71 [ 151.935503][ T48] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.945948][ T55] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 151.957423][ T55] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 151.969546][ T55] usb 1-1: USB disconnect, device number 8 [ 152.126089][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 152.177535][ T48] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 152.199963][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.306260][ T6945] trusted_key: encrypted_key: insufficient parameters specified [ 152.829769][ T48] usb 4-1: config 0 descriptor?? [ 154.111926][ T6955] trusted_key: encrypted_key: insufficient parameters specified [ 155.120133][ T48] usbhid 4-1:0.0: can't add hid device: -71 [ 155.144254][ T48] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.156688][ T48] usb 4-1: USB disconnect, device number 6 [ 156.444561][ T6996] trusted_key: encrypted_key: insufficient parameters specified [ 157.386742][ T48] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.558627][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.583543][ T48] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.627624][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.646733][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.656339][ T48] usb 4-1: Product: syz [ 157.660553][ T48] usb 4-1: Manufacturer: syz [ 157.667428][ T48] usb 4-1: SerialNumber: syz [ 158.946117][ T48] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 158.953742][ T48] cdc_ncm 4-1:1.0: dwNtbInMaxSize=256 is too small. Using 2048 [ 158.980372][ T48] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 159.159732][ T48] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 159.323671][ T48] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 159.360374][ T48] usb 4-1: USB disconnect, device number 7 [ 159.380386][ T48] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 159.620680][ T7050] loop8: detected capacity change from 0 to 16384 [ 159.642292][ T7053] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 159.674360][ T7050] loop8: detected capacity change from 16384 to 16383 [ 159.799549][ T7056] mkiss: ax0: crc mode is auto. [ 159.883601][ T5902] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.421938][ T5902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.447938][ T5902] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.459940][ T5902] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.489442][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.517514][ T5902] usb 1-1: SerialNumber: syz [ 160.760689][ T5902] usb 1-1: 0:2 : does not exist [ 160.834887][ T5902] usb 1-1: USB disconnect, device number 9 [ 160.934066][ T7077] mkiss: ax0: crc mode is auto. [ 161.638124][ T7082] netlink: 392 bytes leftover after parsing attributes in process `syz.4.391'. [ 162.233769][ T55] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.438953][ T55] usb 3-1: config 0 has no interfaces? [ 162.472111][ T55] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 162.521159][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.585421][ T55] usb 3-1: config 0 descriptor?? [ 162.636529][ T48] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.824850][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 162.843129][ T48] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 162.876148][ T48] usb 2-1: config 179 has no interface number 0 [ 162.882530][ T48] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 162.903279][ T55] usb 3-1: USB disconnect, device number 6 [ 162.949196][ T48] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 163.013444][ T48] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 163.067015][ T48] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 163.119551][ T48] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.187899][ T48] usb 2-1: config 179 interface 65 has no altsetting 0 [ 163.213596][ T48] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 163.225017][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.247933][ T48] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14 [ 163.304946][ T7103] mkiss: ax0: crc mode is auto. [ 163.312915][ T5192] input input14: unable to receive magic message: -110 [ 163.352152][ T5192] input input14: unable to receive magic message: -32 [ 163.381801][ T5192] input input14: unable to receive magic message: -32 [ 163.396811][ T7105] netlink: 96 bytes leftover after parsing attributes in process `syz.0.399'. [ 163.412287][ T5192] input input14: unable to receive magic message: -32 [ 163.601396][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 163.673908][ T5923] usb 2-1: USB disconnect, device number 8 [ 163.674318][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 164.139834][ T7121] trusted_key: encrypted_key: insufficient parameters specified [ 164.840407][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 164.872380][ T7123] binder: 7122:7123 ioctl c0306201 200000000640 returned -22 [ 164.888786][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 167.435118][ T7149] trusted_key: encrypted_key: insufficient parameters specified [ 168.123641][ T7154] trusted_key: encrypted_key: insufficient parameters specified [ 168.621648][ T7163] mkiss: ax0: crc mode is auto. [ 172.702626][ T7198] trusted_key: encrypted_key: insufficient parameters specified [ 173.713551][ T5923] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 174.034321][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 174.042268][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 174.068413][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 174.096853][ T5923] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 174.118083][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.132456][ T7172] syz.3.420 (7172) used greatest stack depth: 19432 bytes left [ 174.142634][ T5923] usb 5-1: config 0 descriptor?? [ 174.149601][ T7201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.165093][ T5923] hub 5-1:0.0: USB hub found [ 174.500971][ T5923] hub 5-1:0.0: 1 port detected [ 175.858855][ T7220] mkiss: ax0: crc mode is auto. [ 175.989638][ T7226] netlink: 'syz.3.439': attribute type 39 has an invalid length. [ 176.058245][ T5923] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 176.058594][ T48] usb 5-1: USB disconnect, device number 6 [ 176.202416][ T7234] input: syz1 as /devices/virtual/input/input15 [ 176.544819][ T7245] trusted_key: encrypted_key: insufficient parameters specified [ 177.554389][ T7260] mkiss: ax0: crc mode is auto. [ 177.583714][ T7262] netlink: 3 bytes leftover after parsing attributes in process `syz.0.453'. [ 177.604725][ T7262] batadv1: entered promiscuous mode [ 177.610008][ T7262] batadv1: entered allmulticast mode [ 177.624963][ T5924] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 177.794579][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 177.808359][ T5924] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 177.829105][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.850815][ T5924] usb 3-1: config 0 descriptor?? [ 177.871033][ T5924] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 178.343767][ T48] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.351779][ T7282] trusted_key: encrypted_key: insufficient parameters specified [ 178.527675][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.540313][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.551628][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.565664][ T48] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.580993][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.622883][ T48] usb 2-1: config 0 descriptor?? [ 179.101055][ T48] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 179.115491][ T5924] gspca_nw80x: reg_w err -71 [ 179.120245][ T5924] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 179.138081][ T48] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 179.156350][ T5924] usb 3-1: USB disconnect, device number 7 [ 179.162347][ T48] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 179.175964][ T48] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 179.183764][ T48] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 179.191213][ T48] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 179.208066][ T48] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 179.234244][ T48] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 179.271633][ T7312] mkiss: ax0: crc mode is auto. [ 179.430915][ T5924] usb 2-1: USB disconnect, device number 9 [ 181.050231][ T30] audit: type=1326 audit(1753361622.467:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7316 comm="syz.4.473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b0e78e9a9 code=0x0 [ 181.486469][ T7353] netlink: 'syz.2.488': attribute type 3 has an invalid length. [ 181.632745][ T7353] netlink: 'syz.2.488': attribute type 3 has an invalid length. [ 182.627633][ T5924] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.897635][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.001636][ T7374] trusted_key: encrypted_key: insufficient parameters specified [ 183.110216][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.245218][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.654988][ T5924] usb 4-1: Product: syz [ 183.659244][ T5924] usb 4-1: Manufacturer: syz [ 183.671891][ T5924] usb 4-1: SerialNumber: syz [ 184.123605][ T55] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 184.319566][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.350200][ T55] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.371631][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.382429][ T55] usb 2-1: Product: syz [ 184.386846][ T55] usb 2-1: Manufacturer: syz [ 184.391895][ T55] usb 2-1: SerialNumber: syz [ 184.522556][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.531291][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.552669][ T7384] bridge0: entered promiscuous mode [ 184.563217][ T7384] bridge0: entered allmulticast mode [ 184.612996][ T7387] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.621149][ T7387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.629340][ T7387] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.636546][ T7387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.749935][ T5924] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 184.759803][ T5924] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 184.787125][ T5924] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 184.873610][ T5965] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.030629][ T55] cdc_ncm 2-1:1.0: bind() failure [ 185.048269][ T55] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 185.059728][ T55] cdc_ncm 2-1:1.1: bind() failure [ 185.071079][ T55] usb 2-1: USB disconnect, device number 10 [ 185.133324][ T5965] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 185.164003][ T5965] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 185.176438][ T5924] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 185.189433][ T5965] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 185.208847][ T5924] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 185.220542][ T5965] usb 1-1: config 220 has no interface number 2 [ 185.230050][ T5965] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 185.251231][ T5924] usb 4-1: USB disconnect, device number 8 [ 185.258372][ T5965] usb 1-1: config 220 interface 0 has no altsetting 0 [ 185.269797][ T5924] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 185.441691][ T5965] usb 1-1: config 220 interface 76 has no altsetting 0 [ 185.449459][ T5965] usb 1-1: config 220 interface 1 has no altsetting 0 [ 185.465232][ T5965] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 185.478113][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.487725][ T5965] usb 1-1: Product: syz [ 185.491938][ T5965] usb 1-1: Manufacturer: syz [ 185.497140][ T5965] usb 1-1: SerialNumber: syz [ 185.568454][ T7404] trusted_key: encrypted_key: insufficient parameters specified [ 186.107875][ T5965] usb 1-1: selecting invalid altsetting 0 [ 186.240680][ T5965] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 186.247168][ T5965] usb 1-1: No valid video chain found. [ 186.261929][ T5965] usb 1-1: selecting invalid altsetting 0 [ 186.267882][ T5965] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 186.286150][ T5965] usb 1-1: USB disconnect, device number 10 [ 186.621427][ T7423] loop2: detected capacity change from 0 to 7 [ 186.646262][ T7423] Dev loop2: unable to read RDB block 7 [ 186.652111][ T7423] loop2: unable to read partition table [ 186.659104][ T7423] loop2: partition table beyond EOD, truncated [ 186.666632][ T7423] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.013549][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 187.139398][ T7444] ======================================================= [ 187.139398][ T7444] WARNING: The mand mount option has been deprecated and [ 187.139398][ T7444] and is ignored by this kernel. Remove the mand [ 187.139398][ T7444] option from the mount to silence this warning. [ 187.139398][ T7444] ======================================================= [ 187.216673][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 187.246989][ T5923] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 187.264092][ T5923] usb 3-1: config 0 has no interface number 0 [ 187.330415][ T7447] trusted_key: encrypted_key: insufficient parameters specified [ 188.026482][ T5923] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 188.036383][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.056954][ T5923] usb 3-1: Product: syz [ 188.061202][ T5923] usb 3-1: Manufacturer: syz [ 188.083563][ T5923] usb 3-1: SerialNumber: syz [ 188.104222][ T5923] usb 3-1: config 0 descriptor?? [ 188.114613][ T5923] smsc95xx v2.0.0 [ 188.251643][ T7455] kvm: emulating exchange as write [ 188.478864][ T7462] netlink: 'syz.0.526': attribute type 10 has an invalid length. [ 188.540968][ T5923] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 188.593805][ T5923] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 188.618758][ T7462] team0: Port device wlan1 added [ 188.790514][ T7472] loop2: detected capacity change from 0 to 7 [ 188.807400][ T30] audit: type=1326 audit(1753361630.227:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7446 comm="syz.4.523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b0e78e9a9 code=0x0 [ 188.834033][ T7472] Dev loop2: unable to read RDB block 7 [ 188.841460][ T7472] loop2: unable to read partition table [ 188.853071][ T7472] loop2: partition table beyond EOD, truncated [ 188.884498][ T7472] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 189.330795][ T7487] loop6: detected capacity change from 0 to 7 [ 189.350047][ T7487] Dev loop6: unable to read RDB block 7 [ 189.379825][ T7487] loop6: unable to read partition table [ 189.400319][ T7487] loop6: partition table beyond EOD, truncated [ 189.427706][ T7487] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 189.438476][ T5923] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 189.453989][ T5923] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 189.472410][ T5923] usb 3-1: USB disconnect, device number 8 [ 190.073647][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.235703][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.346624][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.378306][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.402975][ T7527] trusted_key: encrypted_key: insufficient parameters specified [ 190.433069][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.460894][ T7508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.476732][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.697095][ T5965] usb 2-1: USB disconnect, device number 11 [ 192.436371][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 192.852904][ T7584] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 192.887218][ T7584] bond1: entered promiscuous mode [ 192.892646][ T7584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.916687][ T7584] bond1: (slave dummy0): making interface the new active one [ 192.924313][ T7584] dummy0: entered promiscuous mode [ 192.931585][ T7584] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 193.013623][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 193.045390][ T982] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.180505][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.191212][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.201497][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.210734][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.218890][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 193.226779][ T9] usb 5-1: SerialNumber: syz [ 193.233111][ T982] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 193.247049][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 193.258591][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 193.269916][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 193.281015][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 193.295862][ T982] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 193.306755][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.323508][ T982] usb 2-1: Product: syz [ 193.327792][ T982] usb 2-1: Manufacturer: syz [ 193.332437][ T982] usb 2-1: SerialNumber: syz [ 193.340796][ T982] usb 2-1: config 0 descriptor?? [ 193.478111][ T9] usb 5-1: 0:2 : does not exist [ 193.519105][ T9] usb 5-1: USB disconnect, device number 7 [ 193.757078][ T982] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 193.766328][ T982] input input16: Device does not respond to id packet M [ 193.784547][ T982] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 193.790659][ T982] input input16: Device does not respond to id packet P [ 193.811182][ T982] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 193.826206][ T982] input input16: Device does not respond to id packet B [ 193.840107][ T982] input input16: Limiting number of effects to 32 (device reports 109) [ 194.045599][ T48] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 194.065329][ T982] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 194.082130][ T982] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 194.094620][ T982] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 194.102473][ T982] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 194.109898][ T51] Bluetooth: hci5: sending frame failed (-49) [ 194.117713][ T5157] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 194.121310][ T982] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 194.147564][ T982] usb 2-1: USB disconnect, device number 12 [ 194.223554][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 194.240658][ T48] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.256388][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.275989][ T48] usb 4-1: Product: syz [ 194.289956][ T48] usb 4-1: Manufacturer: syz [ 194.296858][ T48] usb 4-1: SerialNumber: syz [ 194.311811][ T48] usb 4-1: config 0 descriptor?? [ 194.323729][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 194.349129][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.357332][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.493628][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 194.512961][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 194.536406][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.542743][ T48] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.553103][ T9] usb 1-1: Product: syz [ 194.561977][ T9] usb 1-1: Manufacturer: syz [ 194.573618][ T9] usb 1-1: SerialNumber: syz [ 194.597195][ T9] usb 1-1: config 0 descriptor?? [ 194.629797][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 195.223671][ T55] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.403633][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 195.411241][ T55] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.428211][ T55] usb 5-1: config 0 has no interfaces? [ 195.436626][ T55] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 195.449614][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.457673][ T55] usb 5-1: Product: syz [ 195.461892][ T55] usb 5-1: Manufacturer: syz [ 195.473498][ T55] usb 5-1: SerialNumber: syz [ 195.481821][ T55] usb 5-1: config 0 descriptor?? [ 195.713315][ T5923] usb 5-1: USB disconnect, device number 8 [ 195.749563][ T48] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 195.762048][ T48] usb 4-1: USB disconnect, device number 9 [ 196.045203][ T9] gspca_stk1135: reg_w 0xf err -71 [ 196.053218][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 196.060131][ T9] gspca_stk1135: Sensor write failed [ 196.068152][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 196.074731][ T9] gspca_stk1135: Sensor write failed [ 196.080254][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 196.087642][ T9] gspca_stk1135: Sensor read failed [ 196.093079][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 196.099530][ T9] gspca_stk1135: Sensor read failed [ 196.105072][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 196.111862][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 196.118383][ T9] gspca_stk1135: Sensor read failed [ 196.123839][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 196.130291][ T9] gspca_stk1135: Sensor read failed [ 196.137054][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 196.143683][ T9] gspca_stk1135: Sensor write failed [ 196.149034][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 196.155611][ T9] gspca_stk1135: Sensor write failed [ 196.161113][ T9] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 196.181289][ T9] usb 1-1: USB disconnect, device number 11 [ 197.384192][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 197.756143][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.822107][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.110887][ T9] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 198.133877][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.179580][ T9] usb 5-1: config 0 descriptor?? [ 198.412511][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 198.420268][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 198.431385][ T9] usb 5-1: USB disconnect, device number 9 [ 198.476068][ T48] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 198.478143][ T7687] netlink: 44 bytes leftover after parsing attributes in process `syz.0.607'. [ 198.499243][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.507636][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.660837][ T48] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.675770][ T7689] binder: 7688:7689 ioctl c0306201 2000000003c0 returned -14 [ 198.676889][ T48] usb 4-1: no configurations [ 198.695163][ T48] usb 4-1: can't read configurations, error -22 [ 199.858620][ T7721] trusted_key: encrypted_key: insufficient parameters specified [ 202.269055][ T7742] af_packet: tpacket_rcv: packet too big, clamped from 200 to 4294967272. macoff=96 [ 202.888673][ T7762] trusted_key: encrypted_key: insufficient parameters specified [ 204.972996][ T7779] loop2: detected capacity change from 0 to 7 [ 205.002622][ T7779] Dev loop2: unable to read RDB block 7 [ 205.010470][ T7779] loop2: unable to read partition table [ 205.020349][ T7779] loop2: partition table beyond EOD, truncated [ 205.033719][ T48] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 205.036954][ T7779] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.220299][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.242395][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.264509][ T48] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.279048][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.293741][ T48] usb 5-1: SerialNumber: syz [ 205.556331][ T48] usb 5-1: 0:2 : does not exist [ 205.561297][ T48] usb 5-1: unit 255 not found! [ 205.605176][ T48] usb 5-1: 5:0: cannot get min/max values for control 1 (id 5) [ 205.647669][ T48] usb 5-1: USB disconnect, device number 10 [ 206.056355][ T7801] mkiss: ax0: crc mode is auto. [ 206.615990][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 208.004371][ T48] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 208.083752][ T5923] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 208.191606][ T7847] mkiss: ax0: crc mode is auto. [ 208.228411][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 208.245914][ T48] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 208.246961][ T5923] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 208.271020][ T48] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 208.286718][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.300695][ T48] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.307997][ T5923] usb 2-1: config 0 descriptor?? [ 208.335990][ T48] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.369987][ T48] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.392441][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.637959][ T48] usb 4-1: GET_CAPABILITIES returned 0 [ 208.649522][ T48] usbtmc 4-1:16.0: can't read capabilities [ 208.665265][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.674559][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.682321][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.690547][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.706790][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.854714][ T48] usb 4-1: USB disconnect, device number 12 [ 209.031986][ T7854] chnl_net:caif_netlink_parms(): no params data found [ 209.258376][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.271216][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.280404][ T7854] bridge_slave_0: entered allmulticast mode [ 209.290231][ T7854] bridge_slave_0: entered promiscuous mode [ 209.300677][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.308264][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.315662][ T7854] bridge_slave_1: entered allmulticast mode [ 209.326554][ T7854] bridge_slave_1: entered promiscuous mode [ 209.572986][ T7854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.601767][ T7854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.670776][ T7878] trusted_key: encrypted_key: insufficient parameters specified [ 210.399462][ T7854] team0: Port device team_slave_0 added [ 210.470730][ T7854] team0: Port device team_slave_1 added [ 210.555758][ T5923] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 210.583588][ T5923] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 210.623818][ T5923] asix 2-1:0.0: probe with driver asix failed with error -71 [ 210.671068][ T5923] usb 2-1: USB disconnect, device number 13 [ 210.743662][ T5842] Bluetooth: hci0: command tx timeout [ 210.795785][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.861373][ T7890] trusted_key: encrypted_key: insufficient parameters specified [ 211.453529][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.553805][ T7854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.659055][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.707566][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.789895][ T7854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.798341][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 211.808054][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.814276][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 211.856201][ T7897] mkiss: ax0: crc mode is auto. [ 211.870062][ T7892] nbd0: detected capacity change from 0 to 8589934592 [ 211.901104][ T7900] block nbd0: Send control failed (result -89) [ 211.912282][ T7900] block nbd0: Request send failed, requeueing [ 211.931862][ T5842] block nbd0: Receive control failed (result -32) [ 211.932094][ T7854] hsr_slave_0: entered promiscuous mode [ 211.954225][ T11] block nbd0: Dead connection, failed to find a fallback [ 211.958060][ T7854] hsr_slave_1: entered promiscuous mode [ 211.961777][ T11] block nbd0: shutting down sockets [ 211.972913][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.982377][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.992712][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 211.993265][ T7900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.017895][ T7854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.029638][ T7900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 212.042125][ T7854] Cannot create hsr debugfs directory [ 212.045758][ T7900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.069254][ T7900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 212.106545][ T7900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.123632][ T7900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 212.131790][ T7900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.146030][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.155723][ T7900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 212.163557][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.183014][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.201136][ T7900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.202746][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.224256][ T7902] mmap: syz.2.682 (7902) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 212.243572][ T7900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 212.264498][ T9] usb 4-1: config 0 descriptor?? [ 212.280589][ T7900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.291227][ T7900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 212.300218][ T7900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.310863][ T7900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 212.329827][ T7900] ldm_validate_partition_table(): Disk read failed. [ 212.337111][ T7900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.350514][ T7900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 212.358748][ T7900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.372055][ T7900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 212.380424][ T7900] Dev nbd0: unable to read RDB block 0 [ 212.391463][ T7900] nbd0: unable to read partition table [ 212.399991][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 212.417344][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 212.432804][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 212.446732][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 212.461642][ T7900] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 212.477693][ T7900] UDF-fs: Scanning with blocksize 1024 failed [ 212.493165][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 212.507477][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483647, location=2147483647 [ 212.611524][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483391, location=2147483391 [ 212.637313][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483646, location=2147483646 [ 212.652839][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483390, location=2147483390 [ 212.697806][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483645, location=2147483645 [ 212.710743][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483389, location=2147483389 [ 212.731432][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483497, location=2147483497 [ 212.742867][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483241, location=2147483241 [ 212.769357][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483495, location=2147483495 [ 212.788768][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483239, location=2147483239 [ 212.801400][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 212.816822][ T7900] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 212.824666][ T5842] Bluetooth: hci0: command tx timeout [ 212.837101][ T7900] UDF-fs: Scanning with blocksize 2048 failed [ 212.886083][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 212.890526][ T7854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.909714][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741823, location=1073741823 [ 212.922098][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741567, location=1073741567 [ 212.940513][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741822, location=1073741822 [ 212.940996][ T7854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.951688][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741566, location=1073741566 [ 212.969929][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741821, location=1073741821 [ 212.977239][ T7854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.993830][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741565, location=1073741565 [ 212.996753][ T7854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.016203][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741673, location=1073741673 [ 213.061410][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741417, location=1073741417 [ 213.097758][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741671, location=1073741671 [ 213.123160][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741415, location=1073741415 [ 213.146299][ T7900] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 213.157378][ T7900] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 213.165181][ T7900] UDF-fs: Scanning with blocksize 4096 failed [ 213.176585][ T7900] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 213.221365][ T7854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.258295][ T7854] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.291751][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.299008][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.332876][ T2120] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.340126][ T2120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.524676][ T9] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input17 [ 213.660103][ T9] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input18 [ 213.698899][ T9] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 213.752017][ T9] usb 4-1: USB disconnect, device number 13 [ 213.953820][ T5895] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 213.996392][ T7854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.169233][ T7940] trusted_key: encrypted_key: insufficient parameters specified [ 214.766548][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 214.807579][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.870917][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.912705][ T5842] Bluetooth: hci0: command tx timeout [ 214.928220][ T5895] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 214.939530][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.973225][ T5895] usb 3-1: config 0 descriptor?? [ 215.206521][ T5895] usbhid 3-1:0.0: can't add hid device: -71 [ 215.228849][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.256839][ T5895] usb 3-1: USB disconnect, device number 9 [ 215.273674][ T5924] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 215.277958][ T7854] veth0_vlan: entered promiscuous mode [ 215.320583][ T7854] veth1_vlan: entered promiscuous mode [ 215.434618][ T7854] veth0_macvtap: entered promiscuous mode [ 215.447244][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.461219][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.475595][ T5924] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 215.479297][ T7854] veth1_macvtap: entered promiscuous mode [ 215.491824][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 215.501471][ T5924] usb 1-1: SerialNumber: syz [ 215.566689][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.602843][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.623299][ T7854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.647313][ T7854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.660198][ T7854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.670279][ T7854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.758245][ T5924] usb 1-1: 0:2 : does not exist [ 215.842695][ T5924] usb 1-1: USB disconnect, device number 12 [ 215.941597][ T2120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.005885][ T2120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.288604][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 216.335147][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 216.341650][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.350373][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.358255][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.366164][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.374001][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.381878][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.389715][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.397612][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.405443][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.413324][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.421160][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.429054][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.436936][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.444837][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.452668][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.460612][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.468455][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.476356][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.484184][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.492081][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.499914][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.507817][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.515661][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.523592][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.531403][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.539301][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.547176][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.555065][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.562870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.570757][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.578586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.586493][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.594321][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.602199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.610020][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.617937][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.625791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.633707][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.641521][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.649411][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.657237][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.665119][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.672920][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.680812][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.688642][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.696520][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.704345][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.712264][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.720108][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.728085][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.735911][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.743795][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.751636][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.759537][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.767363][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.775246][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.783139][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.791020][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.798931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.806823][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.814667][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.822551][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.830380][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.838266][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.846100][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.853985][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.861787][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.869667][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.877490][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.885364][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.893164][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.901074][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.908898][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.916797][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.924654][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.932530][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.940362][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.948259][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.956095][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.963990][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.971810][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.979701][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 216.987530][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 216.995446][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.003275][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.011169][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.018994][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.026888][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.034761][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.042651][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.050498][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.058407][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.066237][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.074132][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.081956][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.089888][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.097719][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.105608][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.113471][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.121436][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.129268][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.137158][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.144998][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.152897][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.160731][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.168618][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.176444][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.184326][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.192129][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.200008][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.207839][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.215724][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.223561][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.231437][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.239278][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.247166][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.255004][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.262871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.270704][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.278631][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.286465][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.294353][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.302152][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.310033][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.317876][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.325779][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.333623][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.341513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 217.349346][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 217.357390][ T5842] Bluetooth: hci0: command tx timeout [ 217.400270][ T7949] input: syz1 as /devices/virtual/input/input19 [ 217.437458][ T7356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.446444][ T7356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.665547][ T7962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.702076][ T7962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.712546][ T7962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.750022][ T7962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.762137][ T7962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.782029][ T7962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.794009][ T7962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.838268][ T7962] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 217.845265][ T7962] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.876794][ T7962] vhci_hcd vhci_hcd.0: Device attached [ 217.887539][ T7967] vhci_hcd: connection closed [ 217.890112][ T3144] vhci_hcd: stop threads [ 217.920158][ T3144] vhci_hcd: release socket [ 217.933123][ T3144] vhci_hcd: disconnect device [ 217.963959][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 218.155439][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.183862][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.196067][ T9] usb 1-1: Product: syz [ 218.200326][ T9] usb 1-1: Manufacturer: syz [ 218.207646][ T9] usb 1-1: SerialNumber: syz [ 218.221431][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.260203][ T982] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.204793][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.222943][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.901253][ T48] usb 1-1: USB disconnect, device number 13 [ 220.202630][ T982] usb 1-1: Service connection timeout for: 257 [ 220.213098][ T982] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 220.223463][ T982] ath9k_htc: Failed to initialize the device [ 220.231799][ T48] usb 1-1: ath9k_htc: USB layer deinitialized [ 220.394562][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 220.582768][ T8022] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 220.587789][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 220.621180][ T5924] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 220.631742][ T5924] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.656108][ T5924] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.687671][ T5924] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.699960][ T5924] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.719750][ T5924] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.729058][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.984806][ T5924] usb 6-1: GET_CAPABILITIES returned 0 [ 221.001287][ T5924] usbtmc 6-1:16.0: can't read capabilities [ 221.380889][ T5924] usb 6-1: USB disconnect, device number 2 [ 222.153642][ T8050] input: syz1 as /devices/virtual/input/input20 [ 222.384511][ T8055] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 222.410803][ T8055] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 222.896320][ T8078] kvm: Disabled LAPIC found during irq injection [ 224.189079][ T8087] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input21 [ 225.141796][ T8097] mkiss: ax0: crc mode is auto. [ 225.393667][ T982] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.563610][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 225.589240][ T982] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 225.617069][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.657714][ T982] usb 3-1: config 0 has no interfaces? [ 225.676245][ T982] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 225.703116][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.741870][ T982] usb 3-1: config 0 descriptor?? [ 225.764730][ T8112] netlink: 'syz.0.753': attribute type 3 has an invalid length. [ 225.780864][ T8112] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.753'. [ 228.002300][ T9] usb 3-1: USB disconnect, device number 10 [ 228.903101][ T8149] loop2: detected capacity change from 0 to 7 [ 228.920341][ T8149] Dev loop2: unable to read RDB block 7 [ 228.927167][ T8149] loop2: unable to read partition table [ 228.933218][ T8149] loop2: partition table beyond EOD, truncated [ 228.939681][ T8149] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.073971][ T5965] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 229.199938][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.772'. [ 229.240544][ T8161] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 229.248202][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 229.259475][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.283558][ T5965] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 229.292723][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.334331][ T5965] usb 1-1: config 0 descriptor?? [ 229.430095][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.774'. [ 229.433529][ T5923] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 229.623615][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 229.636979][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.661800][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.702858][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 229.747625][ T5923] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 229.756679][ T5965] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 229.756718][ T5965] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 229.756744][ T5965] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 229.756769][ T5965] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 229.756794][ T5965] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 229.801029][ T5965] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 229.930432][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.949621][ C1] usb 1-1: input irq status -75 received [ 229.975120][ T5923] usb 6-1: config 0 descriptor?? [ 230.366018][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.416906][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.215925][ T5895] usb 1-1: USB disconnect, device number 14 [ 231.252744][ T5923] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0009/input/input22 [ 231.348390][ T5923] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0009/input/input23 [ 231.413071][ T5923] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 231.991880][ T8193] trusted_key: encrypted_key: insufficient parameters specified [ 232.385448][ C0] kye 0003:0458:5011.0009: usb_submit_urb(ctrl) failed: -1 [ 233.138056][ T8206] mkiss: ax0: crc mode is auto. [ 233.527105][ T5923] usb 6-1: USB disconnect, device number 3 [ 233.803821][ T5923] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 234.017247][ T5923] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 234.037046][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.067142][ T5923] usb 6-1: config 0 descriptor?? [ 234.073313][ T8221] loop2: detected capacity change from 0 to 7 [ 234.084568][ T8221] loop2: [POWERTEC] p1 p2 p3 [ 234.094051][ T8221] loop2: p2 start 4294967287 is beyond EOD, truncated [ 234.100994][ T8221] loop2: p3 start 1932423285 is beyond EOD, truncated [ 235.718465][ T5923] pegasus 6-1:0.0: can't reset MAC [ 235.724102][ T5923] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 235.749033][ T5923] usb 6-1: USB disconnect, device number 4 [ 236.322528][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 236.581840][ T8266] netlink: 'syz.3.811': attribute type 4 has an invalid length. [ 236.642763][ T8261] mkiss: ax0: crc mode is auto. [ 236.648339][ T8268] netlink: 'syz.3.811': attribute type 4 has an invalid length. [ 236.858840][ T8276] overlayfs: failed to clone upperpath [ 236.960236][ T8278] mkiss: ax1: crc mode is auto. [ 240.000602][ T8308] mkiss: ax0: crc mode is auto. [ 240.399584][ T8329] syz_tun: entered allmulticast mode [ 240.412353][ T8328] syz_tun: left allmulticast mode [ 240.982261][ T5923] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 241.203316][ T5923] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.232223][ T5923] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.251271][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.261429][ T5923] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.282195][ T8345] mkiss: ax0: crc mode is auto. [ 241.292317][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.304463][ T5923] usb 6-1: config 0 descriptor?? [ 241.918799][ T5923] usb 6-1: string descriptor 0 read error: -22 [ 242.137766][ T5923] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000A/input/input24 [ 242.226634][ T5923] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000A/input/input25 [ 242.252198][ T5923] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000A/input/input26 [ 242.274989][ T5923] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000A/input/input27 [ 242.298353][ T5923] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 242.333661][ T55] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 242.493556][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 242.501266][ T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.517095][ T55] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 242.529809][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 242.541043][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.556027][ T55] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 242.565403][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.573468][ T55] usb 3-1: Product: syz [ 242.577797][ T55] usb 3-1: Manufacturer: syz [ 242.582477][ T55] usb 3-1: SerialNumber: syz [ 242.589848][ T55] usb 3-1: config 0 descriptor?? [ 242.654893][ T55] rc_core: IR keymap rc-xbox-dvd not found [ 242.660839][ T55] Registered IR keymap rc-empty [ 242.667609][ T55] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 242.682333][ T55] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 242.999804][ T5923] usb 3-1: USB disconnect, device number 11 [ 242.999849][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 243.559086][ T8380] trusted_key: encrypted_key: insufficient parameters specified [ 244.090497][ T5924] usb 6-1: USB disconnect, device number 5 [ 244.709073][ T8399] trusted_key: encrypted_key: insufficient parameters specified [ 245.481153][ T8402] input: syz1 as /devices/virtual/input/input29 [ 245.542686][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 245.815121][ T8415] trusted_key: encrypted_key: insufficient parameters specified [ 246.834421][ T8425] sg_write: data in/out 92/14 bytes for SCSI command 0x0-- guessing data in; [ 246.834421][ T8425] program syz.5.864 not setting count and/or reply_len properly [ 247.901665][ T8440] mkiss: ax0: crc mode is auto. [ 248.065667][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'. [ 250.666798][ T8488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30 [ 250.788522][ T5895] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 251.077126][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.103734][ T5895] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 251.113389][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.271587][ T5895] usb 2-1: config 0 descriptor?? [ 252.480779][ T5895] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 252.835522][ T5895] lenovo 0003:17EF:6047.000B: Failed to switch middle button: -71 [ 252.849618][ T5895] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -71 [ 252.861209][ T5895] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 253.000480][ T5895] usb 2-1: USB disconnect, device number 14 [ 253.779336][ T8523] trusted_key: encrypted_key: insufficient parameters specified [ 254.757868][ T8527] netlink: 277 bytes leftover after parsing attributes in process `syz.1.903'. [ 254.795782][ T8529] mkiss: ax0: crc mode is auto. [ 255.147856][ T8538] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 255.643548][ T8540] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input31 [ 255.835671][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.842376][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.213613][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 258.240946][ T8592] binder: 8591:8592 unknown command 0 [ 258.250122][ T8592] binder: 8591:8592 ioctl c0306201 2000000003c0 returned -22 [ 258.260484][ T8592] binder_alloc: 8591: binder_alloc_buf, no vma [ 259.034884][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.076036][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.132921][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.182122][ T9] usb 3-1: config 0 descriptor?? [ 259.200098][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 259.503067][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.630539][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 259.645561][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 259.667719][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 259.677552][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.685544][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 259.833345][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.910024][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 259.945241][ T5842] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 260.000643][ T8619] netlink: 156 bytes leftover after parsing attributes in process `syz.3.937'. [ 260.027646][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.136237][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 260.162872][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 260.200753][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 260.218279][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 260.244076][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 260.253960][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 260.275260][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 260.293229][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 260.311202][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 260.341344][ T9] pwc: Registered as video103. [ 260.371246][ T13] bridge_slave_1: left allmulticast mode [ 260.392284][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 260.413632][ T13] bridge_slave_1: left promiscuous mode [ 260.420899][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.456600][ T9] usb 3-1: USB disconnect, device number 12 [ 260.468755][ T13] bridge_slave_0: left allmulticast mode [ 260.493966][ T13] bridge_slave_0: left promiscuous mode [ 260.518622][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.554172][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.569333][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.577700][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.585807][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.594537][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.193598][ T5960] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 262.352236][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.363065][ T5960] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.374407][ T5960] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.390854][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.403266][ T5960] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 262.414253][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 262.427519][ T13] bond0 (unregistering): Released all slaves [ 262.434040][ T5960] usb 1-1: SerialNumber: syz [ 262.656832][ T5960] usb 1-1: 0:2 : does not exist [ 262.663919][ T5839] Bluetooth: hci0: command tx timeout [ 262.849535][ T5960] usb 1-1: USB disconnect, device number 15 [ 263.774273][ T8681] Bluetooth: MGMT ver 1.23 [ 263.780122][ T8681] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 264.054010][ T5839] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 264.064411][ T5839] Bluetooth: hci3: Injecting HCI hardware error event [ 264.072758][ T5839] Bluetooth: hci3: hardware error 0x00 [ 264.267204][ T8693] trusted_key: encrypted_key: insufficient parameters specified [ 264.893743][ T5842] Bluetooth: hci0: command tx timeout [ 264.990921][ T13] hsr_slave_0: left promiscuous mode [ 265.018156][ T13] hsr_slave_1: left promiscuous mode [ 265.028282][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.040392][ T8698] overlayfs: failed to clone upperpath [ 265.049872][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.065456][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.081569][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.116797][ T13] veth1_macvtap: left promiscuous mode [ 265.122565][ T13] veth0_macvtap: left promiscuous mode [ 265.134183][ T13] veth1_vlan: left promiscuous mode [ 265.153847][ T13] veth0_vlan: left promiscuous mode [ 266.273837][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 266.714885][ T13] team0 (unregistering): Port device team_slave_1 removed [ 266.753000][ T13] team0 (unregistering): Port device team_slave_0 removed [ 266.906412][ T5839] Bluetooth: hci0: command tx timeout [ 267.309134][ T8730] trusted_key: encrypted_key: insufficient parameters specified [ 268.409087][ T8744] trusted_key: encrypted_key: insufficient parameters specified [ 268.989661][ T5839] Bluetooth: hci0: command tx timeout [ 269.017510][ T8625] chnl_net:caif_netlink_parms(): no params data found [ 269.324961][ T8754] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.979'. [ 269.412857][ T8754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.979'. [ 270.361341][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.383965][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.466039][ T8625] bridge_slave_0: entered allmulticast mode [ 270.557558][ T8625] bridge_slave_0: entered promiscuous mode [ 270.907196][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.923695][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.944490][ T8625] bridge_slave_1: entered allmulticast mode [ 270.952345][ T8625] bridge_slave_1: entered promiscuous mode [ 271.440020][ T8775] trusted_key: encrypted_key: insufficient parameters specified [ 271.689434][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.060451][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.278524][ T8625] team0: Port device team_slave_0 added [ 272.570236][ T8625] team0: Port device team_slave_1 added [ 272.606678][ T30] audit: type=1804 audit(1753361714.017:5): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.990" name="/newroot/165/bus/file0" dev="overlay" ino=909 res=1 errno=0 [ 272.748353][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.895701][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.925878][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.000270][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.096705][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.326821][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.451913][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.632161][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.777473][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.073673][ T5960] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 274.130967][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.210652][ T8625] hsr_slave_0: entered promiscuous mode [ 274.231361][ T8625] hsr_slave_1: entered promiscuous mode [ 274.237918][ T8625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.250117][ T8625] Cannot create hsr debugfs directory [ 274.258937][ T5960] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 274.276507][ T5960] usb 1-1: config 0 has no interface number 0 [ 274.298644][ T5960] usb 1-1: config 0 interface 29 has no altsetting 0 [ 274.313928][ T5960] usb 1-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d [ 274.333234][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.371638][ T5960] usb 1-1: config 0 descriptor?? [ 274.597653][ T5960] usb 1-1: string descriptor 0 read error: -71 [ 274.613693][ T5960] usb-storage 1-1:0.29: USB Mass Storage device detected [ 274.664161][ T5960] usb-storage 1-1:0.29: Quirks match for vid 357d pid 7788: 4800000 [ 274.784094][ T13] bridge_slave_1: left allmulticast mode [ 274.791469][ T13] bridge_slave_1: left promiscuous mode [ 274.802959][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.806531][ T5960] usb 1-1: USB disconnect, device number 16 [ 274.858350][ T13] bridge_slave_0: left allmulticast mode [ 274.865119][ T13] bridge_slave_0: left promiscuous mode [ 274.870930][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.001660][ T30] audit: type=1326 audit(1753361716.417:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.1.997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f8998e9a9 code=0x0 [ 275.551692][ T5924] kernel write not supported for file /463/clear_refs (pid: 5924 comm: kworker/1:4) [ 276.046209][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.059741][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.070436][ T13] bond0 (unregistering): Released all slaves [ 276.125247][ T8851] mkiss: ax0: crc mode is auto. [ 276.299347][ T8857] overlayfs: failed to clone upperpath [ 276.667132][ T8625] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.116553][ T13] hsr_slave_0: left promiscuous mode [ 277.156314][ T13] hsr_slave_1: left promiscuous mode [ 277.181413][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.201145][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.232056][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.248983][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.342535][ T13] veth1_macvtap: left promiscuous mode [ 277.356794][ T13] veth0_macvtap: left promiscuous mode [ 277.371395][ T13] veth1_vlan: left promiscuous mode [ 277.382218][ T13] veth0_vlan: left promiscuous mode [ 279.320174][ T8919] trusted_key: encrypted_key: insufficient parameters specified [ 280.046048][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 280.148864][ T13] team0 (unregistering): Port device team_slave_1 removed [ 280.229871][ T13] team0 (unregistering): Port device team_slave_0 removed [ 280.317576][ T8931] binder: 8930:8931 ioctl c0306201 0 returned -14 [ 280.864013][ T8625] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.875597][ T8625] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.942101][ T8927] macvlan0: entered allmulticast mode [ 280.968616][ T8927] veth1_vlan: entered allmulticast mode [ 280.982595][ T8927] team0: Port device macvlan0 added [ 281.009983][ T8625] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.141664][ T8946] @: renamed from vlan0 (while UP) [ 281.466194][ T8964] evm: overlay not supported [ 281.649148][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.732613][ T8971] trusted_key: encrypted_key: insufficient parameters specified [ 282.431716][ T8625] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.459320][ T2120] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.466525][ T2120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.508764][ T2120] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.516024][ T2120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.653829][ T8986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1051'. [ 282.802721][ T8994] bond0: entered promiscuous mode [ 282.810698][ T8994] bond_slave_0: entered promiscuous mode [ 282.817129][ T8994] bond_slave_1: entered promiscuous mode [ 282.844285][ T8994] bond0: entered allmulticast mode [ 282.849735][ T8994] bond_slave_0: entered allmulticast mode [ 282.872620][ T8994] bond_slave_1: entered allmulticast mode [ 283.437124][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.715481][ T9014] trusted_key: encrypted_key: insufficient parameters specified [ 284.509331][ T9021] veth1_vlan: left allmulticast mode [ 284.628536][ T9021] team0: Port device macvlan0 removed [ 285.718172][ T5924] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 285.764531][ T5924] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 285.914238][ T8625] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 285.926277][ T8625] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 285.935844][ T8625] CPU: 0 UID: 0 PID: 8625 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 285.948003][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.958071][ T8625] RIP: 0010:____ip_mc_inc_group+0x214/0xde0 [ 285.963989][ T8625] Code: b0 9a 05 01 48 c7 c7 00 86 9c 8c be ec 05 00 00 48 c7 c2 80 86 9c 8c e8 4a 84 ae f7 44 89 e8 4d 8d 34 c6 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 ae 2c 30 f8 4d 8b 2e 4d 85 ed 0f 84 [ 285.983618][ T8625] RSP: 0018:ffffc9000bc2eb90 EFLAGS: 00010206 [ 285.989709][ T8625] RAX: 000000001fffe1ac RBX: dffffc0000000000 RCX: ffff888020341e00 [ 285.997696][ T8625] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 286.005676][ T8625] RBP: 0000000000000001 R08: ffffffff8f509e67 R09: 1ffffffff1ea13cc [ 286.013673][ T8625] R10: dffffc0000000000 R11: fffffbfff1ea13cd R12: 00000000010000e0 [ 286.021667][ T8625] R13: 00000000000001ac R14: 00000000ffff0d60 R15: 0000000000000cc0 [ 286.029692][ T8625] FS: 000055556877b500(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 286.038639][ T8625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.045231][ T8625] CR2: 0000001b30c1fffc CR3: 000000002402c000 CR4: 00000000003526f0 [ 286.053252][ T8625] DR0: 000000000000000e DR1: 00000000000044e4 DR2: 0000000000000008 [ 286.061232][ T8625] DR3: 0000000000000002 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 286.069229][ T8625] Call Trace: [ 286.072533][ T8625] [ 286.075487][ T8625] ip_mc_up+0x125/0x300 [ 286.079670][ T8625] inetdev_event+0xfb3/0x15b0 [ 286.084357][ T8625] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 286.090786][ T8625] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 286.097655][ T8625] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 286.104254][ T8625] ? __pfx_inetdev_event+0x10/0x10 [ 286.109384][ T8625] notifier_call_chain+0x1b6/0x3e0 [ 286.114513][ T8625] __dev_notify_flags+0x18d/0x2e0 [ 286.119561][ T8625] ? __pfx___dev_notify_flags+0x10/0x10 [ 286.125125][ T8625] ? __dev_change_flags+0x4cc/0x6d0 [ 286.130347][ T8625] ? __pfx___dev_change_flags+0x10/0x10 [ 286.135910][ T8625] ? do_setlink+0x8ce/0x41c0 [ 286.140517][ T8625] netif_change_flags+0xe8/0x1a0 [ 286.145479][ T8625] do_setlink+0xc55/0x41c0 [ 286.149916][ T8625] ? __kernel_text_address+0xd/0x40 [ 286.155133][ T8625] ? arch_stack_walk+0xfc/0x150 [ 286.159998][ T8625] ? __pfx_do_setlink+0x10/0x10 [ 286.164870][ T8625] ? __lock_acquire+0xab9/0xd20 [ 286.169748][ T8625] ? __pfx___mutex_trylock_common+0x10/0x10 [ 286.175658][ T8625] ? rcu_is_watching+0x15/0xb0 [ 286.180433][ T8625] ? trace_contention_end+0x39/0x120 [ 286.185734][ T8625] ? __mutex_lock+0x330/0xe80 [ 286.190431][ T8625] ? rtnl_newlink+0x8db/0x1c70 [ 286.195230][ T8625] ? rcu_is_watching+0x15/0xb0 [ 286.200007][ T8625] ? __pfx___mutex_lock+0x10/0x10 [ 286.205047][ T8625] ? ns_capable+0x8a/0xf0 [ 286.209390][ T8625] ? rtnl_link_get_net_capable+0x16a/0x350 [ 286.215230][ T8625] rtnl_newlink+0x160b/0x1c70 [ 286.219921][ T8625] ? netlink_sendmsg+0x805/0xb30 [ 286.224886][ T8625] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.229934][ T8625] ? kasan_quarantine_put+0xdd/0x220 [ 286.235238][ T8625] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.240448][ T8625] ? __pfx_do_softirq+0x10/0x10 [ 286.245321][ T8625] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.250705][ T8625] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.255930][ T8625] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.261320][ T8625] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 286.267048][ T8625] ? __dev_queue_xmit+0x27e/0x3a70 [ 286.272174][ T8625] ? __dev_queue_xmit+0x27e/0x3a70 [ 286.277304][ T8625] ? __dev_queue_xmit+0x27e/0x3a70 [ 286.282429][ T8625] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 286.287683][ T8625] ? __lock_acquire+0xab9/0xd20 [ 286.292557][ T8625] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.297610][ T8625] rtnetlink_rcv_msg+0x7cf/0xb70 [ 286.302584][ T8625] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 286.307715][ T8625] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.313201][ T8625] ? ref_tracker_free+0x63a/0x7d0 [ 286.318255][ T8625] ? __copy_skb_header+0xa7/0x550 [ 286.323295][ T8625] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.328692][ T8625] ? __skb_clone+0x63/0x7a0 [ 286.333217][ T8625] netlink_rcv_skb+0x208/0x470 [ 286.338025][ T8625] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.343552][ T8625] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.348867][ T8625] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.354089][ T8625] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.359322][ T8625] netlink_unicast+0x75c/0x8e0 [ 286.364118][ T8625] netlink_sendmsg+0x805/0xb30 [ 286.368905][ T8625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.374220][ T8625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.379521][ T8625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.384821][ T8625] __sock_sendmsg+0x21c/0x270 [ 286.389511][ T8625] __sys_sendto+0x3bd/0x520 [ 286.394033][ T8625] ? __pfx___sys_sendto+0x10/0x10 [ 286.399077][ T8625] ? fput_close_sync+0x119/0x200 [ 286.404037][ T8625] ? __pfx_fput_close_sync+0x10/0x10 [ 286.409339][ T8625] __x64_sys_sendto+0xde/0x100 [ 286.414118][ T8625] do_syscall_64+0xfa/0x3b0 [ 286.418632][ T8625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.424706][ T8625] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.430871][ T8625] ? clear_bhb_loop+0x60/0xb0 [ 286.435560][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.441469][ T8625] RIP: 0033:0x7f8ae739083c [ 286.445902][ T8625] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 286.465528][ T8625] RSP: 002b:00007ffd7d8bb620 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 286.473978][ T8625] RAX: ffffffffffffffda RBX: 00007f8ae80e4620 RCX: 00007f8ae739083c [ 286.481964][ T8625] RDX: 000000000000002c RSI: 00007f8ae80e4670 RDI: 0000000000000003 [ 286.489976][ T8625] RBP: 0000000000000000 R08: 00007ffd7d8bb674 R09: 000000000000000c [ 286.497963][ T8625] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 286.505944][ T8625] R13: 0000000000000000 R14: 00007f8ae80e4670 R15: 0000000000000000 [ 286.513937][ T8625] [ 286.516966][ T8625] Modules linked in: [ 286.522079][ T8625] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 286.604068][ T8625] RIP: 0010:____ip_mc_inc_group+0x214/0xde0 [ 286.610060][ T8625] Code: b0 9a 05 01 48 c7 c7 00 86 9c 8c be ec 05 00 00 48 c7 c2 80 86 9c 8c e8 4a 84 ae f7 44 89 e8 4d 8d 34 c6 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 ae 2c 30 f8 4d 8b 2e 4d 85 ed 0f 84 [ 286.629812][ T8625] RSP: 0018:ffffc9000bc2eb90 EFLAGS: 00010206 [ 286.636064][ T8625] RAX: 000000001fffe1ac RBX: dffffc0000000000 RCX: ffff888020341e00 [ 286.644977][ T8625] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 286.653703][ T8625] RBP: 0000000000000001 R08: ffffffff8f509e67 R09: 1ffffffff1ea13cc [ 286.661730][ T8625] R10: dffffc0000000000 R11: fffffbfff1ea13cd R12: 00000000010000e0 [ 286.669762][ T8625] R13: 00000000000001ac R14: 00000000ffff0d60 R15: 0000000000000cc0 [ 286.677892][ T8625] FS: 000055556877b500(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 286.686913][ T8625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.693847][ T8625] CR2: 00007f8b84676f98 CR3: 000000002402c000 CR4: 00000000003526f0 [ 286.701867][ T8625] Kernel panic - not syncing: Fatal exception [ 286.708278][ T8625] Kernel Offset: disabled [ 286.712613][ T8625] Rebooting in 86400 seconds..