last executing test programs: 3.938313688s ago: executing program 2 (id=1235): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x143580, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x143580, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x400004, 0x14, "3e000004f5ffd9060400"}) 3.769709103s ago: executing program 3 (id=1236): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201010000000010120c050000000000000109022400010000303109040044030300030009210110ff01220600090581031000030108"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r1, 0x6a, 0x16, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="38300c0000000c089e56c3000000001f7b9b91f354"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0xf, 0xff, 0x2, 0x7, 0x8001, 0x7]}, &(0x7f0000000180)=0x78) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000), 0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000080)={'ip6gre0\x00', @ifru_mtu=0x1}) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x2080) socket$packet(0x11, 0x2, 0x300) 3.387954377s ago: executing program 2 (id=1238): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x777) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2240, 0x100) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x14, r2, 0x703, 0x0, 0x4, {0xb}}, 0x14}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7fffffff}}]}}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="7f", 0x1}], 0x2, 0x17, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) 3.042574428s ago: executing program 2 (id=1242): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x71bd27, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500ab000300000000000000", @ANYRES16=r2, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r3, &(0x7f0000001480)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004) socket$kcm(0x10, 0x2, 0x0) syz_clone(0xa1000, &(0x7f0000000340)="2800ed916a81dc0661d44856ea5e98ed9a0fee688ead3598b4647e2b5b6aedfb4177ff01df317d57fecdfc82c8be572829c89f85367c40f7f6da01c9422e3c31b8f0f3dab98fbea1e01379461984638fde3fffd894859ed30b0bf74cce9a4ff1110ccf062664a4069976f2714468b289c7e451069d2ddf7b39fb34899f08b937fb21a1a739df9ed8cc2e4e8ec9f46ebbe62af8ee7e097e47b05f28678a577b88cd3943e3788a1037cc994234dfa6bdb1800f70a314e755245eeb2d8a03fd1167ce7c54e7da11c94031b139c68b05e7aa6643d9c9b48e8811a2e5165938345cfbe35c", 0xe2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000540)="2bd189bf5c3aac3b1dd970f04a7c840bf9a4037c5b4a53ca0b114c41d95e") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r5 = userfaultfd(0x80001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x4000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x7c}}, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x110) write(r7, &(0x7f0000000200)='r:_y_probe ./file0:0', 0x14) 2.973125203s ago: executing program 0 (id=1243): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0xe, 0xecc809e1cbc6f4eb) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x4) 2.858060577s ago: executing program 0 (id=1244): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000240)={[0x25000, 0x0, 0x30000, 0x10000], 0x3, 0x50, 0x528caa49}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000052000100000000040000000002000000080001"], 0x1c}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 2.798557629s ago: executing program 3 (id=1245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x55}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={r4, r5+10000000}, 0x0) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000480)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r8, &(0x7f0000000700)=""/115, 0x73, 0x5) 2.510566461s ago: executing program 1 (id=1246): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x6002) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x6002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001fc0)={0x24, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=interlReave:7-', @ANYRESDEC]) 2.319562034s ago: executing program 0 (id=1247): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 2.194658393s ago: executing program 1 (id=1248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e20, @private}, 'lo\x00'}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000800000018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="0f082da3000fc730360f01cf650f01c3ba4100edb800008ed8ba6100ed2e26362e0f01c40f01c3"}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x3507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0xa, 0x3, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.020981596s ago: executing program 1 (id=1249): connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x80}, 0xa) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) 1.973595079s ago: executing program 0 (id=1250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001fffffffffffffff5000700000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700700000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514"], 0xe8}}, 0x0) 1.934767639s ago: executing program 2 (id=1251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 1.846659492s ago: executing program 3 (id=1252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x20, 0x22, 0x9, {0x9, 0x2, "9cf8abdc47d332"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="ac600954e46d", @ANYRES64=r3], 0xb2) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) 1.712062737s ago: executing program 0 (id=1253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff3f00) 1.409474085s ago: executing program 1 (id=1254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000400e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0) 1.325902729s ago: executing program 2 (id=1255): mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) dup(r1) (async) dup(r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) 1.218690783s ago: executing program 1 (id=1256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x40b, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x28}, @void, @val={0xc, 0x99, {0x0, 0x4b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@getsa={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfd, {@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4d3, 0xa, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x2c000010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x7800, 0x7818, 0x10005, 0x5, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x65, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x6, [{@private=0xa010102, 0x9}]}, @lsrr={0x83, 0x3, 0x5f}, @lsrr={0x83, 0x27, 0x82, [@multicast2, @empty, @multicast2, @private=0xa010102, @loopback, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x8b, 0x1, 0x2, [{@broadcast, 0xe4}, {@loopback, 0x9}, {@local, 0x3}]}]}}}}}) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f"], 0x120}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) read$watch_queue(r7, &(0x7f0000000340)=""/163, 0xa3) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0x890d}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast}, {0x0, 0x6557, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 1.092899819s ago: executing program 3 (id=1257): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000, 0xff000000}}], 0x50}, 0xff00) 914.315822ms ago: executing program 3 (id=1258): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) (async) 702.769989ms ago: executing program 1 (id=1259): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x71bd27, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500ab000300000000000000", @ANYRES16=r2, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r3, &(0x7f0000001480)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0200000000000000160af3653c001ac00400020008000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r6 = userfaultfd(0x80001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x4000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x7c}}, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x110) write(r8, &(0x7f0000000200)='r:_y_probe ./file0:0', 0x14) 577.857446ms ago: executing program 3 (id=1260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x55}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={r4, r5+10000000}, 0x0) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000480)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r8, &(0x7f0000000700)=""/115, 0x73, 0x5) 462.414889ms ago: executing program 0 (id=1261): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='r:_y_probe ./file0:0', 0x14) (fail_nth: 8) 0s ago: executing program 2 (id=1262): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000063c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2d, 0xfffffffd, 0x0, 0x0, 0x8}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000200", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 88.792077][ T5583] cgroup: Unknown subsys name 'net' [ 89.039988][ T5583] cgroup: Unknown subsys name 'cpuset' [ 89.085631][ T5583] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.552176][ T37] cfg80211: failed to load regulatory.db [ 91.068525][ T5583] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.090574][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.091846][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.116599][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.134058][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.138340][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.140004][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.143197][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.144786][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.151213][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.162404][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.166805][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.167680][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.171248][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.173492][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.177330][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.178896][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.239346][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.252144][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.256052][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.260125][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.243022][ T5607] Bluetooth: hci3: command tx timeout [ 97.396641][ T5607] Bluetooth: hci2: command tx timeout [ 97.478752][ T60] Bluetooth: hci0: command tx timeout [ 97.478751][ T5607] Bluetooth: hci1: command tx timeout [ 97.786885][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.788365][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.788555][ T5605] bridge_slave_0: entered allmulticast mode [ 97.790918][ T5605] bridge_slave_0: entered promiscuous mode [ 97.857118][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.857334][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.857557][ T5603] bridge_slave_0: entered allmulticast mode [ 97.859596][ T5603] bridge_slave_0: entered promiscuous mode [ 97.863395][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.863592][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.863959][ T5605] bridge_slave_1: entered allmulticast mode [ 97.867425][ T5605] bridge_slave_1: entered promiscuous mode [ 97.926724][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.926898][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.927191][ T5603] bridge_slave_1: entered allmulticast mode [ 97.929832][ T5603] bridge_slave_1: entered promiscuous mode [ 97.972319][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.972511][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.972684][ T5604] bridge_slave_0: entered allmulticast mode [ 97.974601][ T5604] bridge_slave_0: entered promiscuous mode [ 98.038212][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.038529][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.038793][ T5604] bridge_slave_1: entered allmulticast mode [ 98.041001][ T5604] bridge_slave_1: entered promiscuous mode [ 98.043603][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.043807][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.043967][ T5602] bridge_slave_0: entered allmulticast mode [ 98.056958][ T5602] bridge_slave_0: entered promiscuous mode [ 98.104562][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.126222][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.126431][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.126593][ T5602] bridge_slave_1: entered allmulticast mode [ 98.128549][ T5602] bridge_slave_1: entered promiscuous mode [ 98.134699][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.148669][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.196002][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.226686][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.400670][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.409640][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.434297][ T5605] team0: Port device team_slave_0 added [ 98.458413][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.461092][ T5603] team0: Port device team_slave_0 added [ 98.464486][ T5605] team0: Port device team_slave_1 added [ 98.517500][ T5603] team0: Port device team_slave_1 added [ 98.539494][ T5604] team0: Port device team_slave_0 added [ 98.592088][ T5604] team0: Port device team_slave_1 added [ 98.609461][ T5602] team0: Port device team_slave_0 added [ 98.641694][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.641710][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.641724][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.685401][ T5602] team0: Port device team_slave_1 added [ 98.688215][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.688233][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.688258][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.697354][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.697401][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.697426][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.763014][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.763032][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.763058][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.786903][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.786922][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.786947][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.843386][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.843403][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.843428][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.847499][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.847514][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.847538][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.890149][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.890169][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.890195][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.028281][ T5605] hsr_slave_0: entered promiscuous mode [ 99.029918][ T5605] hsr_slave_1: entered promiscuous mode [ 99.058243][ T5603] hsr_slave_0: entered promiscuous mode [ 99.059540][ T5603] hsr_slave_1: entered promiscuous mode [ 99.060704][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 99.060803][ T5603] Cannot create hsr debugfs directory [ 99.113527][ T5604] hsr_slave_0: entered promiscuous mode [ 99.120632][ T5604] hsr_slave_1: entered promiscuous mode [ 99.121886][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 99.121913][ T5604] Cannot create hsr debugfs directory [ 99.169803][ T5602] hsr_slave_0: entered promiscuous mode [ 99.171068][ T5602] hsr_slave_1: entered promiscuous mode [ 99.172052][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 99.172077][ T5602] Cannot create hsr debugfs directory [ 99.315106][ T5607] Bluetooth: hci3: command tx timeout [ 99.475256][ T5607] Bluetooth: hci2: command tx timeout [ 99.555192][ T60] Bluetooth: hci1: command tx timeout [ 99.555324][ T5607] Bluetooth: hci0: command tx timeout [ 100.262716][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.320276][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.334219][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.370629][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.384069][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.419435][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.449225][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.481053][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.623077][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.662445][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.666400][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.703308][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.716797][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.779396][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.828712][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.870433][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.033494][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.069638][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.087329][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.120041][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.140311][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.179696][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.210555][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.238789][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.396704][ T5607] Bluetooth: hci3: command tx timeout [ 101.404180][ T5604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.429570][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.446193][ T5604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.488741][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.500741][ T5604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.531117][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.538509][ T5604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.555328][ T5607] Bluetooth: hci2: command tx timeout [ 101.578674][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.636536][ T60] Bluetooth: hci1: command tx timeout [ 101.636901][ T5607] Bluetooth: hci0: command tx timeout [ 101.680444][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.797685][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.826215][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.852207][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.852522][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.929980][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.930118][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.059701][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.103518][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.103673][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.147352][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.164613][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.164739][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.302685][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.333937][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.373640][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.384340][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.454173][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.454331][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.574461][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.653370][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.653686][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.736274][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.736462][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.486511][ T5607] Bluetooth: hci3: command tx timeout [ 103.577659][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.635744][ T5607] Bluetooth: hci2: command tx timeout [ 103.716975][ T5607] Bluetooth: hci0: command tx timeout [ 103.717013][ T5607] Bluetooth: hci1: command tx timeout [ 103.909675][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.186937][ T5605] veth0_vlan: entered promiscuous mode [ 104.240383][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.300031][ T5605] veth1_vlan: entered promiscuous mode [ 104.407659][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.430281][ T5603] veth0_vlan: entered promiscuous mode [ 104.491885][ T5603] veth1_vlan: entered promiscuous mode [ 104.538876][ T5605] veth0_macvtap: entered promiscuous mode [ 104.551767][ T5602] veth0_vlan: entered promiscuous mode [ 104.580409][ T5605] veth1_macvtap: entered promiscuous mode [ 104.627501][ T5602] veth1_vlan: entered promiscuous mode [ 104.694446][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.700852][ T5604] veth0_vlan: entered promiscuous mode [ 104.712546][ T5603] veth0_macvtap: entered promiscuous mode [ 104.734072][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.751656][ T5603] veth1_macvtap: entered promiscuous mode [ 104.792154][ T5604] veth1_vlan: entered promiscuous mode [ 104.800483][ T3428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.825894][ T3428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.834293][ T3428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.871272][ T166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.890439][ T5602] veth0_macvtap: entered promiscuous mode [ 104.964561][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.988518][ T5602] veth1_macvtap: entered promiscuous mode [ 105.063238][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.370295][ T166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.387471][ T166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.406606][ T166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.432545][ T166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.450631][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.493042][ T5604] veth0_macvtap: entered promiscuous mode [ 105.556972][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.619243][ T5604] veth1_macvtap: entered promiscuous mode [ 105.692358][ T1061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.696599][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.696622][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.773512][ T1061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.870610][ T1061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.927902][ T1061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.041583][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.041604][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.070990][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.415947][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.542488][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.542510][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.596181][ T3428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.610218][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.666589][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.673448][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.964429][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.964455][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.134988][ T5750] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 107.137035][ T5750] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.223566][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.223587][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.697333][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.697354][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.016455][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.016477][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.099082][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 108.240577][ T5749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.376472][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.376493][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.614334][ T5757] fuse: Bad value for 'user_id' [ 108.614355][ T5757] fuse: Bad value for 'user_id' [ 109.984077][ T5764] syz.0.6 (5764) used greatest stack depth: 18720 bytes left [ 110.500014][ T5729] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.519206][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.780396][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 110.815978][ T5729] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 110.816013][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.816035][ T5729] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 110.816058][ T5729] usb 4-1: config 0 has no interface number 0 [ 110.816157][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.885111][ T5729] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 110.885155][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.885181][ T5729] usb 4-1: Product: syz [ 110.885197][ T5729] usb 4-1: Manufacturer: syz [ 110.885216][ T5729] usb 4-1: SerialNumber: syz [ 110.895919][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 7 [ 110.906788][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 110.906819][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.906837][ T10] usb 3-1: Product: syz [ 110.906865][ T10] usb 3-1: Manufacturer: syz [ 110.906883][ T10] usb 3-1: SerialNumber: syz [ 111.133111][ T5729] usb 4-1: config 0 descriptor?? [ 111.260557][ T5729] usb-storage 4-1:0.127: USB Mass Storage device detected [ 111.370555][ T5729] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 111.399518][ T5784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11'. [ 111.400433][ T5784] openvswitch: netlink: Flow key attr not present in new flow. [ 112.278600][ T5729] usb 4-1: USB disconnect, device number 2 [ 114.089950][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 114.122567][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 114.151531][ T5804] fuse: Bad value for 'fd' [ 114.509252][ T5807] netlink: 300 bytes leftover after parsing attributes in process `syz.1.18'. [ 114.926453][ T5812] FAULT_INJECTION: forcing a failure. [ 114.926453][ T5812] name failslab, interval 1, probability 0, space 0, times 1 [ 114.926504][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.926528][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.926550][ T5812] Call Trace: [ 114.926565][ T5812] [ 114.926581][ T5812] dump_stack_lvl+0xe8/0x150 [ 114.926628][ T5812] should_fail_ex+0x467/0x600 [ 114.926660][ T5812] should_failslab+0xa8/0x100 [ 114.926681][ T5812] __kmalloc_cache_noprof+0xa1/0x670 [ 114.926710][ T5812] ? __trace_uprobe_create+0x7d3/0xe40 [ 114.926742][ T5812] ? __trace_uprobe_create+0x7d3/0xe40 [ 114.926779][ T5812] __trace_uprobe_create+0x7d3/0xe40 [ 114.926811][ T5812] ? __pfx___trace_uprobe_create+0x10/0x10 [ 114.926836][ T5812] ? __kmalloc_noprof+0x436/0x790 [ 114.926860][ T5812] ? argv_split+0x18d/0x400 [ 114.926878][ T5812] ? argv_split+0x18d/0x400 [ 114.926905][ T5812] ? argv_split+0x378/0x400 [ 114.926927][ T5812] trace_probe_create+0xce/0x130 [ 114.926952][ T5812] ? __pfx___trace_uprobe_create+0x10/0x10 [ 114.926979][ T5812] ? __pfx_trace_probe_create+0x10/0x10 [ 114.927003][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.927024][ T5812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 114.927042][ T5812] ? mutex_lock_nested+0x152/0x1d0 [ 114.927066][ T5812] ? dyn_event_create+0x20/0x70 [ 114.927098][ T5812] dyn_event_create+0x4f/0x70 [ 114.927120][ T5812] create_or_delete_trace_uprobe+0x65/0xa0 [ 114.927140][ T5812] trace_parse_run_command+0x1f3/0x380 [ 114.927173][ T5812] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 114.927193][ T5812] ? __pfx_probes_write+0x10/0x10 [ 114.927210][ T5812] vfs_write+0x29f/0xbb0 [ 114.927242][ T5812] ? __pfx_vfs_write+0x10/0x10 [ 114.927265][ T5812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.927283][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.927299][ T5812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 114.927318][ T5812] ? mutex_lock_nested+0x152/0x1d0 [ 114.927339][ T5812] ? fdget_pos+0x252/0x320 [ 114.927367][ T5812] ksys_write+0x156/0x270 [ 114.927390][ T5812] ? __pfx_ksys_write+0x10/0x10 [ 114.927422][ T5812] do_syscall_64+0x17b/0x530 [ 114.927441][ T5812] ? irqentry_exit+0x10f/0x8f0 [ 114.927458][ T5812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.927477][ T5812] ? clear_bhb_loop+0x40/0x90 [ 114.927500][ T5812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.927519][ T5812] RIP: 0033:0x7fc8ddc8e019 [ 114.927550][ T5812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.927568][ T5812] RSP: 002b:00007fc8dbee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.927592][ T5812] RAX: ffffffffffffffda RBX: 00007fc8ddf15fa0 RCX: 00007fc8ddc8e019 [ 114.927605][ T5812] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 114.927617][ T5812] RBP: 00007fc8dbee6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.927629][ T5812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.927639][ T5812] R13: 00007fc8ddf16038 R14: 00007fc8ddf15fa0 R15: 00007fff9bbbd268 [ 114.927668][ T5812] [ 115.895268][ T10] usb 3-1: USB disconnect, device number 2 [ 116.169987][ T5826] tipc: Started in network mode [ 116.170032][ T5826] tipc: Node identity ffffffffffff00000000000000000001, cluster identity 4711 [ 116.170092][ T5826] tipc: Enabling of bearer rejected, failed to enable media [ 116.908815][ T5686] udevd[5686]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.123475][ T5839] syzkaller1: entered promiscuous mode [ 117.123503][ T5839] syzkaller1: entered allmulticast mode [ 117.451512][ T5851] block2mtd: parameter too long [ 118.759542][ T5729] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 118.942253][ T5729] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 24929, setting to 64 [ 118.942288][ T5729] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.942320][ T5729] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 118.942342][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.006610][ T5729] usb 3-1: config 0 descriptor?? [ 119.010021][ T5864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.425205][ T5878] nullb0: [POWERTEC] p1 p2 p3 p4 p5 [ 119.499229][ T5878] nullb0: p1 start 1697608821 is beyond EOD, truncated [ 119.730114][ T5729] usbhid 3-1:0.0: can't add hid device: -71 [ 119.730255][ T5729] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 119.746901][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.846958][ T5729] usb 3-1: USB disconnect, device number 3 [ 119.935550][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 119.953853][ T10] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 119.953891][ T10] usb 4-1: config 2 has no interface number 0 [ 119.953953][ T10] usb 4-1: config 2 interface 31 has no altsetting 0 [ 119.969619][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 119.969651][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.969669][ T10] usb 4-1: Product: syz [ 119.969682][ T10] usb 4-1: Manufacturer: syz [ 119.969696][ T10] usb 4-1: SerialNumber: syz [ 120.160578][ T5889] FAULT_INJECTION: forcing a failure. [ 120.160578][ T5889] name failslab, interval 1, probability 0, space 0, times 0 [ 120.160615][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.160633][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.160642][ T5889] Call Trace: [ 120.160650][ T5889] [ 120.160657][ T5889] dump_stack_lvl+0xe8/0x150 [ 120.160687][ T5889] should_fail_ex+0x467/0x600 [ 120.160715][ T5889] should_failslab+0xa8/0x100 [ 120.160734][ T5889] __kmalloc_cache_noprof+0xa1/0x670 [ 120.160760][ T5889] ? sctp_add_bind_addr+0x8c/0x370 [ 120.160785][ T5889] ? sctp_add_bind_addr+0x8c/0x370 [ 120.160810][ T5889] sctp_add_bind_addr+0x8c/0x370 [ 120.160835][ T5889] sctp_copy_local_addr_list+0x31a/0x4e0 [ 120.160859][ T5889] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 120.160880][ T5889] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 120.160905][ T5889] ? sctp_v4_is_any+0x35/0x60 [ 120.160926][ T5889] ? sctp_copy_one_addr+0x93/0x360 [ 120.160948][ T5889] sctp_bind_addr_copy+0xb3/0x3c0 [ 120.160969][ T5889] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 120.160999][ T5889] sctp_connect_new_asoc+0x2ff/0x6b0 [ 120.161034][ T5889] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 120.161066][ T5889] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 120.161089][ T5889] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.161108][ T5889] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 120.161138][ T5889] ? security_sctp_bind_connect+0x74/0x280 [ 120.161165][ T5889] sctp_sendmsg+0x1506/0x2a50 [ 120.161209][ T5889] ? __pfx_sctp_sendmsg+0x10/0x10 [ 120.161246][ T5889] ? __lock_acquire+0x6df/0x2e40 [ 120.161271][ T5889] ? __lock_acquire+0x6df/0x2e40 [ 120.161293][ T5889] ? sock_rps_record_flow+0x19/0x350 [ 120.161322][ T5889] ? inet_sendmsg+0x298/0x320 [ 120.161349][ T5889] ? __pfx_inet_sendmsg+0x10/0x10 [ 120.161379][ T5889] sock_sendmsg_nosec+0x10e/0x180 [ 120.161406][ T5889] ____sys_sendmsg+0x565/0x870 [ 120.161444][ T5889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.161482][ T5889] ? import_iovec+0x73/0xa0 [ 120.161516][ T5889] ___sys_sendmsg+0x2a5/0x360 [ 120.161544][ T5889] ? __lock_acquire+0x6df/0x2e40 [ 120.161566][ T5889] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.161623][ T5889] ? __fget_files+0x2a/0x420 [ 120.161641][ T5889] ? __fget_files+0x3a8/0x420 [ 120.161672][ T5889] __x64_sys_sendmsg+0x1b7/0x290 [ 120.161698][ T5889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.161740][ T5889] do_syscall_64+0x17b/0x530 [ 120.161759][ T5889] ? irqentry_exit+0x10f/0x8f0 [ 120.161776][ T5889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.161791][ T5889] ? clear_bhb_loop+0x40/0x90 [ 120.161809][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.161822][ T5889] RIP: 0033:0x7fc8ddc8e019 [ 120.161839][ T5889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.161850][ T5889] RSP: 002b:00007fc8dbee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.161867][ T5889] RAX: ffffffffffffffda RBX: 00007fc8ddf15fa0 RCX: 00007fc8ddc8e019 [ 120.161878][ T5889] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 120.161888][ T5889] RBP: 00007fc8dbee6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.161897][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.161907][ T5889] R13: 00007fc8ddf16038 R14: 00007fc8ddf15fa0 R15: 00007fff9bbbd268 [ 120.161931][ T5889] [ 120.210825][ T5886] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.959505][ T5896] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 121.026374][ T5896] sctp: [Deprecated]: syz.0.45 (pid 5896) Use of int in max_burst socket option. [ 121.026374][ T5896] Use struct sctp_assoc_value instead [ 121.030705][ T10] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 121.063298][ T10] usb 4-1: USB disconnect, device number 3 [ 121.516601][ T823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.567247][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.675570][ T823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.675603][ T823] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 121.710325][ T823] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 121.710356][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 121.710373][ T823] usb 2-1: Product: syz [ 121.710385][ T823] usb 2-1: Manufacturer: syz [ 121.874068][ T823] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected [ 122.059816][ T823] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 122.143511][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.167352][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.364278][ T5904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.373623][ T5904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.503005][ T5916] netlink: 6 bytes leftover after parsing attributes in process `syz.0.52'. [ 122.523214][ T9] usb 2-1: USB disconnect, device number 2 [ 122.747245][ T5695] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.750253][ T5920] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.53'. [ 122.941743][ T5695] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 122.941783][ T5695] usb 4-1: can't read configurations, error -22 [ 123.001546][ T9] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 123.010069][ T9] iuu_phoenix 2-1:1.0: device disconnected [ 123.095105][ T5695] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.121375][ T5926] Zero length message leads to an empty skb [ 123.290596][ T5695] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 123.290642][ T5695] usb 4-1: can't read configurations, error -22 [ 123.322533][ T5695] usb usb4-port1: attempt power cycle [ 123.736247][ T5695] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.823970][ T5695] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 123.824010][ T5695] usb 4-1: can't read configurations, error -22 [ 123.975052][ T5695] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.005578][ T5695] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 124.005617][ T5695] usb 4-1: can't read configurations, error -22 [ 124.007762][ T5695] usb usb4-port1: unable to enumerate USB device [ 124.072710][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 124.240646][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 124.243803][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.243858][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 49408, setting to 64 [ 124.243883][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 124.243919][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 124.243939][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.293681][ T5934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.331190][ T5946] comedi comedi2: pcmda12: I/O base address not correctly aligned [ 124.414495][ T9] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 124.454098][ T5948] Invalid source name [ 124.556431][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.580404][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.692373][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 124.692805][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 124.947762][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 124.949915][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.975550][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.174094][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 125.174234][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 125.288360][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 125.392489][ T9] usb 3-1: USB disconnect, device number 4 [ 125.543228][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 125.634220][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 125.643467][ T9] keyspan 3-1:1.0: device disconnected [ 125.689677][ T5961] netlink: 7 bytes leftover after parsing attributes in process `syz.1.65'. [ 125.689700][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'. [ 125.815477][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 125.922490][ T5965] netlink: 44 bytes leftover after parsing attributes in process `syz.1.65'. [ 126.525360][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 126.675244][ T10] usb 3-1: device descriptor read/64, error -71 [ 126.692127][ T5695] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.889417][ T5695] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 126.889443][ T5695] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 126.889458][ T5695] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.889475][ T5695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.889506][ T5695] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 231, using maximum allowed: 30 [ 126.889542][ T5695] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 126.889591][ T5695] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 8.40 [ 126.889612][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.062469][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 127.205315][ T10] usb 3-1: device descriptor read/64, error -71 [ 127.217243][ T5695] usb 4-1: string descriptor 0 read error: -71 [ 127.282393][ T5695] usb 4-1: USB disconnect, device number 8 [ 127.356001][ T10] usb usb3-port1: attempt power cycle [ 127.737145][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 127.755744][ T10] usb 3-1: device descriptor read/8, error -71 [ 127.974994][ T5695] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 128.058845][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 128.076968][ T10] usb 3-1: device descriptor read/8, error -71 [ 128.105123][ T5695] usb 2-1: device descriptor read/64, error -71 [ 128.186172][ T10] usb usb3-port1: unable to enumerate USB device [ 128.356771][ T5695] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 128.555023][ T5695] usb 2-1: device descriptor read/64, error -71 [ 128.683528][ T5695] usb usb2-port1: attempt power cycle [ 129.045267][ T5695] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 129.065976][ T5695] usb 2-1: device descriptor read/8, error -71 [ 129.245852][ T5994] syz.3.75 (5994) used greatest stack depth: 17840 bytes left [ 129.305029][ T5695] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 129.326896][ T5695] usb 2-1: device descriptor read/8, error -71 [ 129.435931][ T6010] netlink: 104 bytes leftover after parsing attributes in process `syz.2.80'. [ 129.436095][ T5695] usb usb2-port1: unable to enumerate USB device [ 130.947206][ T5706] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 131.105017][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 131.107092][ T5706] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 131.107140][ T5706] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 131.107166][ T5706] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.107193][ T5706] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 131.107205][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.131058][ T5706] usb 4-1: config 0 descriptor?? [ 131.238476][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.395679][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 131.401445][ T10] usb 2-1: config 6 has an invalid interface number: 170 but max is 0 [ 131.401475][ T10] usb 2-1: config 6 has no interface number 0 [ 131.401503][ T10] usb 2-1: config 6 interface 170 has no altsetting 0 [ 131.404785][ T10] usb 2-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=9f.85 [ 131.404816][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.404982][ T10] usb 2-1: Product: syz [ 131.405005][ T10] usb 2-1: Manufacturer: syz [ 131.405018][ T10] usb 2-1: SerialNumber: syz [ 131.492412][ T5706] lg-g15 0003:046D:C227.0001: ignoring exceeding usage max [ 131.810919][ T10] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 131.973311][ T5706] lg-g15 0003:046D:C227.0001: hidraw0: USB HID v0.01 Device [HID 046d:c227] on usb-dummy_hcd.3-1/input0 [ 132.099943][ T10] usb 2-1: USB disconnect, device number 7 [ 132.120383][ T5706] usb 4-1: USB disconnect, device number 9 [ 133.481704][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 133.588118][ T6084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.882419][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 134.335013][ T5695] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 134.499637][ T5695] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 134.499679][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.499699][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 134.499720][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 134.499752][ T5695] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 134.499769][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.598326][ T5706] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.607790][ T5695] usb 3-1: config 0 descriptor?? [ 134.610278][ T6095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.773712][ T5706] usb 4-1: device descriptor read/64, error -71 [ 135.005026][ T5706] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.044413][ T5695] elecom 0003:056E:010D.0002: unexpected long global item [ 135.054257][ T5695] elecom 0003:056E:010D.0002: probe with driver elecom failed with error -22 [ 135.135128][ T5706] usb 4-1: device descriptor read/64, error -71 [ 135.216293][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.246036][ T5706] usb usb4-port1: attempt power cycle [ 135.382942][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 135.382967][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.382982][ T10] usb 2-1: Product: syz [ 135.382990][ T10] usb 2-1: Manufacturer: syz [ 135.382999][ T10] usb 2-1: SerialNumber: syz [ 135.413535][ T10] usb 2-1: config 0 descriptor?? [ 135.441326][ T9] usb 3-1: USB disconnect, device number 9 [ 135.596512][ T5706] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.617206][ T5706] usb 4-1: device descriptor read/8, error -71 [ 135.958533][ T5706] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 135.997030][ T5706] usb 4-1: device descriptor read/8, error -71 [ 136.110467][ T5706] usb usb4-port1: unable to enumerate USB device [ 136.573483][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.584217][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.629733][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.832241][ T6141] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 137.238635][ T9] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 137.259562][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 137.259592][ T10] usb 2-1: Please update to version 0.2 or newer [ 137.418289][ T9] usb 1-1: No LPM exit latency info found, disabling LPM. [ 137.423548][ T9] usb 1-1: config 7 has an invalid interface number: 3 but max is 0 [ 137.423577][ T9] usb 1-1: config 7 has no interface number 0 [ 137.423606][ T9] usb 1-1: config 7 interface 3 has no altsetting 0 [ 137.434340][ T9] usb 1-1: string descriptor 0 read error: -22 [ 137.434485][ T9] usb 1-1: New USB device found, idVendor=05c6, idProduct=9047, bcdDevice=f5.6a [ 137.434507][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.798349][ T37] usb 1-1: USB disconnect, device number 2 [ 137.970024][ T9] usb 2-1: USB disconnect, device number 8 [ 138.152897][ T6159] netlink: 14 bytes leftover after parsing attributes in process `syz.2.127'. [ 138.745017][ T823] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.895211][ T823] usb 1-1: Using ep0 maxpacket: 32 [ 138.912258][ T823] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 138.912287][ T823] usb 1-1: config 0 has no interface number 0 [ 138.936206][ T823] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 138.936236][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.936260][ T823] usb 1-1: Product: syz [ 138.936273][ T823] usb 1-1: Manufacturer: syz [ 138.936284][ T823] usb 1-1: SerialNumber: syz [ 138.984638][ T823] usb 1-1: config 0 descriptor?? [ 139.095125][ T5706] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.255026][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 139.259427][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.259457][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 139.259482][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 139.259506][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.268502][ T5706] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 139.268531][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.268549][ T5706] usb 4-1: Product: syz [ 139.268563][ T5706] usb 4-1: Manufacturer: syz [ 139.268574][ T5706] usb 4-1: SerialNumber: syz [ 139.298911][ T5706] usb 4-1: config 0 descriptor?? [ 139.314218][ T6175] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 139.460109][ T823] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 139.460151][ T823] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 139.669848][ T823] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 139.670389][ T823] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 139.989260][ T6185] netlink: 57 bytes leftover after parsing attributes in process `syz.2.137'. [ 140.010778][ T6185] netlink: 57 bytes leftover after parsing attributes in process `syz.2.137'. [ 140.186749][ T6188] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 140.647478][ T5729] usb 4-1: USB disconnect, device number 14 [ 140.905126][ T5706] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.945206][ T823] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.055017][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 141.061069][ T6194] kvm [6193]: vcpu0, guest rIP: 0x183 Unhandled WRMSR(0xc1) = 0x8000 [ 141.095018][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 141.777866][ T9] usb 1-1: USB disconnect, device number 3 [ 143.174573][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.184097][ T5706] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 143.184136][ T5706] usb 3-1: can't read configurations, error -71 [ 143.187557][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.188677][ T823] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 143.188711][ T823] usb 2-1: can't read configurations, error -71 [ 143.296695][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.308290][ T38] audit: type=1326 audit(1785621275.420:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6217 comm="syz.3.143" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9037a1e019 code=0x7fc00000 [ 143.314750][ T38] audit: type=1326 audit(1785621275.420:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6217 comm="syz.3.143" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9037a1e019 code=0x7fc00000 [ 143.444994][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 143.448019][ T9] usb 1-1: config index 0 descriptor too short (expected 17170, got 18) [ 143.448047][ T9] usb 1-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 143.448074][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 143.450512][ T9] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 143.450539][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.450556][ T9] usb 1-1: Product: syz [ 143.450569][ T9] usb 1-1: Manufacturer: syz [ 143.450583][ T9] usb 1-1: SerialNumber: syz [ 143.525281][ T9] usb 1-1: config 0 descriptor?? [ 143.530178][ T9] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 143.770016][ T9] usb 1-1: USB disconnect, device number 4 [ 144.242005][ T6227] Bluetooth: MGMT ver 1.23 [ 144.319465][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'. [ 144.537757][ T5695] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 144.685086][ T5695] usb 4-1: Using ep0 maxpacket: 8 [ 144.688429][ T5695] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.688454][ T5695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.693077][ T5695] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 144.693108][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.693128][ T5695] usb 4-1: Product: syz [ 144.693141][ T5695] usb 4-1: Manufacturer: syz [ 144.693156][ T5695] usb 4-1: SerialNumber: syz [ 145.401607][ T6253] tipc: Cannot configure node identity twice [ 145.576250][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 146.339215][ T6270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.160'. [ 146.379556][ T5706] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 146.599058][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 146.616834][ T5706] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 146.616862][ T5706] usb 3-1: config 0 has no interface number 0 [ 146.658510][ T5706] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 146.658544][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.658563][ T5706] usb 3-1: Product: syz [ 146.658578][ T5706] usb 3-1: Manufacturer: syz [ 146.658592][ T5706] usb 3-1: SerialNumber: syz [ 146.709899][ T5706] usb 3-1: config 0 descriptor?? [ 146.714615][ T5706] hub 3-1:0.132: bad descriptor, ignoring hub [ 146.714653][ T5706] hub 3-1:0.132: probe with driver hub failed with error -5 [ 146.759966][ T5706] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input5 [ 147.369955][ T5706] usb 3-1: USB disconnect, device number 12 [ 147.532610][ T5695] usb 4-1: unit 0 not found! [ 147.601458][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 147.820792][ T5695] usb 4-1: USB disconnect, device number 15 [ 148.033797][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.166'. [ 148.046227][ T6289] capability: warning: `syz.0.166' uses deprecated v2 capabilities in a way that may be insecure [ 148.393591][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.215179][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.365189][ T5706] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 149.386905][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 149.391286][ T10] usb 1-1: config 5 has an invalid interface number: 227 but max is 0 [ 149.391318][ T10] usb 1-1: config 5 has no interface number 0 [ 149.391339][ T10] usb 1-1: config 5 interface 227 has no altsetting 0 [ 149.391358][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=44.6f [ 149.391369][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.257038][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 151.472325][ T6349] syz.3.185(6349): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 152.301559][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.362320][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.434508][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.440615][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.444067][ T6368] capability: warning: `syz.0.190' uses 32-bit capabilities (legacy support in use) [ 153.185166][ T200] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 153.276059][ T5729] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.437627][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 154.708666][ T10] usb 1-1: string descriptor 0 read error: -32 [ 155.093760][ T5729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.094804][ T5729] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 155.095038][ T5729] usb 3-1: can't read configurations, error -71 [ 155.577197][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.227/input/input6 [ 155.830135][ T4948] bcm5974 1-1:5.227: could not read from device [ 155.968505][ T4948] bcm5974 1-1:5.227: could not read from device [ 156.036527][ T4948] bcm5974 1-1:5.227: could not read from device [ 156.274602][ T5883] bcm5974 1-1:5.227: could not read from device [ 156.367272][ T4948] bcm5974 1-1:5.227: could not read from device [ 156.456525][ T4948] bcm5974 1-1:5.227: could not read from device [ 156.537642][ T4948] bcm5974 1-1:5.227: could not read from device [ 156.738626][ T38] audit: type=1326 audit(1785621288.830:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6407 comm="syz.0.201" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddc8e019 code=0x7ffc0000 [ 156.738792][ T38] audit: type=1326 audit(1785621288.840:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6407 comm="syz.0.201" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddc8e019 code=0x7ffc0000 [ 156.740801][ T38] audit: type=1326 audit(1785621288.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6407 comm="syz.0.201" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc8ddc8e019 code=0x7ffc0000 [ 156.741683][ T38] audit: type=1326 audit(1785621288.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6407 comm="syz.0.201" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddc8e019 code=0x7ffc0000 [ 156.741819][ T38] audit: type=1326 audit(1785621288.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6407 comm="syz.0.201" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddc8e019 code=0x7ffc0000 [ 156.742134][ T38] audit: type=1326 audit(1785621288.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6407 comm="syz.0.201" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fc8ddc8e019 code=0x7ffc0000 [ 156.742513][ T38] audit: type=1326 audit(1785621288.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6407 comm="syz.0.201" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddc8e019 code=0x7ffc0000 [ 157.374063][ T6419] ======================================================= [ 157.374063][ T6419] WARNING: The mand mount option has been deprecated and [ 157.374063][ T6419] and is ignored by this kernel. Remove the mand [ 157.374063][ T6419] option from the mount to silence this warning. [ 157.374063][ T6419] ======================================================= [ 158.427856][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 158.485327][ T200] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.652596][ T200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.652630][ T200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.652668][ T200] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 158.652690][ T200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.738577][ T200] usb 2-1: config 0 descriptor?? [ 160.326198][ T5695] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 160.334281][ T200] usb 2-1: language id specifier not provided by device, defaulting to English [ 160.475646][ T5695] usb 3-1: Using ep0 maxpacket: 32 [ 160.492568][ T5695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.515944][ T5695] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 160.515975][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.515993][ T5695] usb 3-1: Product: syz [ 160.516005][ T5695] usb 3-1: Manufacturer: syz [ 160.516018][ T5695] usb 3-1: SerialNumber: syz [ 160.886287][ T5695] usb 3-1: unit 0 not found! [ 160.963362][ T200] uclogic 0003:256C:006D.0003: v1 frame probing failed: -71 [ 160.963477][ T200] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 160.963584][ T200] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 160.968759][ T5695] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.036803][ T200] usb 2-1: USB disconnect, device number 12 [ 161.074567][ T5695] usb 3-1: unit 0 not found! [ 161.140684][ T5695] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 161.156223][ T5695] usb 3-1: unit 0 not found! [ 162.457017][ T5695] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 162.472862][ T5695] usb 3-1: USB disconnect, device number 16 [ 162.603896][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.885278][ T823] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 163.045019][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 163.059098][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.060362][ T823] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 163.091299][ T823] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 163.091332][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.091350][ T823] usb 2-1: Product: syz [ 163.091363][ T823] usb 2-1: Manufacturer: syz [ 163.091376][ T823] usb 2-1: SerialNumber: syz [ 163.215846][ T6520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.248'. [ 163.378452][ T823] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 163.383053][ T823] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 163.521760][ T823] usb 2-1: USB disconnect, device number 13 [ 163.851875][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.852496][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.055806][ T5729] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 164.207245][ T5729] usb 3-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 164.207278][ T5729] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.207313][ T5729] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 164.207324][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.222370][ T5729] usb 3-1: config 0 descriptor?? [ 164.518248][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 164.566867][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.567436][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.697084][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.697114][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.697129][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.697153][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.697167][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.697182][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.697196][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.697211][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.697225][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.697239][ T5729] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 164.704342][ T5729] zeroplus 0003:0C12:0030.0004: hidraw0: USB HID v0.bf Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0 [ 164.704375][ T5729] zeroplus 0003:0C12:0030.0004: no inputs found [ 164.887674][ T200] usb 3-1: USB disconnect, device number 17 [ 164.967921][ T6549] fido_id[6549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 165.219266][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.219870][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.545250][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 165.709229][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.709264][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.709283][ T9] usb 2-1: config 1 has no interface number 0 [ 165.711587][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 165.711619][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.711637][ T9] usb 2-1: Product: syz [ 165.711650][ T9] usb 2-1: Manufacturer: syz [ 165.711664][ T9] usb 2-1: SerialNumber: syz [ 166.194614][ T9] usb 2-1: 1:0 : does not exist [ 166.194639][ T9] usb 2-1: 1:2 : does not exist [ 166.194693][ T9] usb 2-1: 1:3 : does not exist [ 166.195590][ T9] usb 2-1: BAAD HEADPHONE p_chmask mismatch [ 166.259670][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 166.511024][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 166.529115][ T9] usb 2-1: USB disconnect, device number 14 [ 166.563773][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.570790][ T6610] syzkaller1: entered promiscuous mode [ 167.570809][ T6610] syzkaller1: entered allmulticast mode [ 167.812801][ T6619] usb 1-1: USB disconnect, device number 5 [ 168.640960][ T823] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 168.795294][ T823] usb 2-1: Using ep0 maxpacket: 16 [ 168.814484][ T823] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 168.814533][ T823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 168.814572][ T823] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 168.814607][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.890629][ T823] usb 2-1: config 0 descriptor?? [ 169.110176][ T6621] hub 1-0:1.0: USB hub found [ 169.138356][ T6621] hub 1-0:1.0: 1 port detected [ 169.372266][ T823] apple 0003:05AC:027C.0005: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.1-1/input0 [ 169.562915][ T823] usb 2-1: USB disconnect, device number 15 [ 169.701758][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 169.843685][ T10] usb 1-1: device descriptor read/64, error -32 [ 170.137530][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.305165][ T10] usb 1-1: device descriptor read/64, error -32 [ 171.406612][ T10] usb usb1-port1: attempt power cycle [ 172.735221][ T10] raw-gadget.1 gadget.0: failed to queue resume event [ 172.845064][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 172.871787][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 172.874259][ T10] usb 1-1: device descriptor read/8, error -32 [ 172.994070][ T10] raw-gadget.1 gadget.0: failed to queue suspend event [ 173.010464][ T10] raw-gadget.1 gadget.0: failed to queue reset event [ 173.101046][ T10] raw-gadget.1 gadget.0: failed to queue resume event [ 173.159006][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 173.180655][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 173.180796][ T10] usb 1-1: device descriptor read/8, error -32 [ 173.296127][ T10] raw-gadget.1 gadget.0: failed to queue suspend event [ 173.301301][ T10] usb usb1-port1: unable to enumerate USB device [ 173.595013][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 173.794668][ T9] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 173.794697][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.794715][ T9] usb 3-1: config 0 has no interface number 0 [ 173.794760][ T9] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 173.794780][ T9] usb 3-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.824761][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 173.824988][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.825010][ T9] usb 3-1: Product: syz [ 173.825023][ T9] usb 3-1: Manufacturer: syz [ 173.825036][ T9] usb 3-1: SerialNumber: syz [ 173.882720][ T9] usb 3-1: config 0 descriptor?? [ 173.892772][ T9] asix 3-1:0.251: probe with driver asix failed with error -22 [ 174.160434][ T9] usb 3-1: USB disconnect, device number 18 [ 174.655145][ T5772] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 174.815427][ T5772] usb 2-1: Using ep0 maxpacket: 16 [ 174.817533][ T5772] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 174.817550][ T5772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.817559][ T5772] usb 2-1: config 0 has no interface number 0 [ 174.819867][ T5772] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 174.819956][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.819973][ T5772] usb 2-1: Product: syz [ 174.819985][ T5772] usb 2-1: Manufacturer: syz [ 174.820012][ T5772] usb 2-1: SerialNumber: syz [ 174.823839][ T5772] usb 2-1: config 0 descriptor?? [ 174.934284][ T5772] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 174.934312][ T5772] uvcvideo 2-1:0.105: No valid video chain found. [ 174.989850][ T6703] binder: 6702:6703 ioctl c0306201 0 returned -14 [ 175.114608][ T5729] usb 2-1: USB disconnect, device number 16 [ 178.475424][ T5729] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 178.658362][ T5729] usb 4-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 178.658396][ T5729] usb 4-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.658419][ T5729] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.658450][ T5729] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 178.658471][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.692155][ T5729] usb 4-1: config 0 descriptor?? [ 178.695252][ T6734] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 178.878133][ T5772] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 179.035025][ T5772] usb 3-1: Using ep0 maxpacket: 8 [ 179.037908][ T5772] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.039339][ T5772] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 179.043192][ T5772] usb 3-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 179.043218][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.043235][ T5772] usb 3-1: Product: syz [ 179.043248][ T5772] usb 3-1: Manufacturer: syz [ 179.043261][ T5772] usb 3-1: SerialNumber: syz [ 179.172265][ T5729] uclogic 0003:5543:0003.0006: unexpected long global item [ 179.173085][ T5729] uclogic 0003:5543:0003.0006: parse failed [ 179.173192][ T5729] uclogic 0003:5543:0003.0006: probe with driver uclogic failed with error -22 [ 179.303114][ T5772] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 179.303603][ T5772] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 179.305599][ T5772] usb 3-1: unable to issue vendor read request (ret = -71) [ 179.307450][ T5772] usb 3-1: unable to issue vendor read request (ret = -71) [ 179.309189][ T5772] usb 3-1: unable to issue vendor read request (ret = -71) [ 179.310608][ T5772] usb 3-1: unable to issue vendor read request (ret = -71) [ 179.312697][ T5772] usb 3-1: unable to issue vendor read request (ret = -71) [ 179.313263][ T5772] usb 3-1: unable to issue vendor read request (ret = -71) [ 179.319049][ T5772] usb 3-1: unable to issue vendor read request (ret = -71) [ 179.320199][ T5772] usb 3-1: unable to issue vendor read request (ret = -71) [ 179.369591][ T9] usb 4-1: USB disconnect, device number 17 [ 179.464340][ T6754] overlayfs: overlapping lowerdir path [ 179.620274][ T5772] usb 3-1: USB disconnect, device number 19 [ 180.418222][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.418928][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.433867][ T6786] netlink: 165 bytes leftover after parsing attributes in process `syz.3.347'. [ 181.538597][ T6788] tipc: Enabled bearer , priority 0 [ 181.685061][ T5729] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 181.927849][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 181.931710][ T5729] usb 3-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.931742][ T5729] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.931779][ T5729] usb 3-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 181.931791][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.943879][ T5729] usb 3-1: config 0 descriptor?? [ 182.875808][ T37] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 182.937898][ T5772] tipc: Node number set to 65534 [ 183.087972][ T37] usb 4-1: config 1 interface 0 altsetting 31 bulk endpoint 0x82 has invalid maxpacket 1024 [ 183.088065][ T37] usb 4-1: config 1 interface 0 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.088090][ T37] usb 4-1: config 1 interface 0 has no altsetting 0 [ 183.142699][ T37] usb 4-1: string descriptor 0 read error: -22 [ 183.142824][ T37] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.142838][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 183.185577][ T6792] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 183.391703][ T6792] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 183.577763][ T5729] hid_parser_main: 52 callbacks suppressed [ 183.577897][ T5729] wacom 0003:056A:0030.0007: unknown main item tag 0x2 [ 183.578193][ T5729] wacom 0003:056A:0030.0007: ignoring exceeding usage max [ 183.594465][ T5729] usb 3-1: USB disconnect, device number 20 [ 184.763903][ T37] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -32 [ 184.812011][ T37] usb 4-1: USB disconnect, device number 18 [ 185.443436][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.444034][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.119885][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.120486][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.122407][ T6841] tipc: Started in network mode [ 186.122423][ T6841] tipc: Node identity , cluster identity 4711 [ 186.122534][ T6841] tipc: Failed to obtain node identity [ 186.122562][ T6841] tipc: Enabling of bearer rejected, failed to enable media [ 186.514388][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 187.718798][ T6879] tipc: Started in network mode [ 187.718817][ T6879] tipc: Node identity , cluster identity 4711 [ 187.718917][ T6879] tipc: Failed to obtain node identity [ 187.719009][ T6879] tipc: Enabling of bearer rejected, failed to enable media [ 187.908382][ T6882] netlink: 'syz.1.383': attribute type 15 has an invalid length. [ 188.302416][ T6892] input: syz1 as /devices/virtual/input/input8 [ 188.302632][ T6892] input: failed to attach handler leds to device input8, error: -6 [ 188.305734][ T5772] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 188.345247][ T200] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 188.511943][ T5772] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.512037][ T5772] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 188.513386][ T200] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 188.513497][ T200] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.517342][ T200] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.517429][ T200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.517449][ T200] usb 4-1: SerialNumber: syz [ 188.580780][ T5772] usb 2-1: config index 0 descriptor too short (expected 4123, got 27) [ 188.580810][ T5772] usb 2-1: config 254 has an invalid interface number: 29 but max is 0 [ 188.580842][ T5772] usb 2-1: config 254 has no interface number 0 [ 188.580888][ T5772] usb 2-1: config 254 interface 29 has no altsetting 0 [ 188.582145][ T5772] usb 2-1: config index 1 descriptor too short (expected 4123, got 27) [ 188.582170][ T5772] usb 2-1: config 254 has an invalid interface number: 29 but max is 0 [ 188.582189][ T5772] usb 2-1: config 254 has no interface number 0 [ 188.582233][ T5772] usb 2-1: config 254 interface 29 has no altsetting 0 [ 188.583442][ T5772] usb 2-1: config index 2 descriptor too short (expected 4123, got 27) [ 188.583466][ T5772] usb 2-1: config 254 has an invalid interface number: 29 but max is 0 [ 188.583485][ T5772] usb 2-1: config 254 has no interface number 0 [ 188.583527][ T5772] usb 2-1: config 254 interface 29 has no altsetting 0 [ 188.589356][ T5772] usb 2-1: config index 3 descriptor too short (expected 4123, got 27) [ 188.589381][ T5772] usb 2-1: config 254 has an invalid interface number: 29 but max is 0 [ 188.589398][ T5772] usb 2-1: config 254 has no interface number 0 [ 188.589442][ T5772] usb 2-1: config 254 interface 29 has no altsetting 0 [ 188.603535][ T5772] usb 2-1: config index 4 descriptor too short (expected 4123, got 27) [ 188.603563][ T5772] usb 2-1: config 254 has an invalid interface number: 29 but max is 0 [ 188.603579][ T5772] usb 2-1: config 254 has no interface number 0 [ 188.603625][ T5772] usb 2-1: config 254 interface 29 has no altsetting 0 [ 188.661735][ T5772] usb 2-1: config index 5 descriptor too short (expected 4123, got 27) [ 188.661766][ T5772] usb 2-1: config 254 has an invalid interface number: 29 but max is 0 [ 188.661793][ T5772] usb 2-1: config 254 has no interface number 0 [ 188.661841][ T5772] usb 2-1: config 254 interface 29 has no altsetting 0 [ 188.720777][ T5772] usb 2-1: config index 6 descriptor too short (expected 4123, got 27) [ 188.720808][ T5772] usb 2-1: config 254 has an invalid interface number: 29 but max is 0 [ 188.720828][ T5772] usb 2-1: config 254 has no interface number 0 [ 188.720875][ T5772] usb 2-1: config 254 interface 29 has no altsetting 0 [ 188.746557][ T5772] usb 2-1: config index 7 descriptor too short (expected 4123, got 27) [ 188.746588][ T5772] usb 2-1: config 254 has an invalid interface number: 29 but max is 0 [ 188.746606][ T5772] usb 2-1: config 254 has no interface number 0 [ 188.746653][ T5772] usb 2-1: config 254 interface 29 has no altsetting 0 [ 188.772031][ T38] audit: type=1326 audit(1785621320.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6895 comm="syz.2.390" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6c12e019 code=0x7ffc0000 [ 188.772082][ T38] audit: type=1326 audit(1785621320.860:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6895 comm="syz.2.390" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6c12e019 code=0x7ffc0000 [ 188.772121][ T38] audit: type=1326 audit(1785621320.860:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6895 comm="syz.2.390" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f6c12f887 code=0x7ffc0000 [ 188.772159][ T38] audit: type=1326 audit(1785621320.860:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6895 comm="syz.2.390" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8f6c0ee84e code=0x7ffc0000 [ 188.772197][ T38] audit: type=1326 audit(1785621320.880:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6895 comm="syz.2.390" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8f6c0ee84e code=0x7ffc0000 [ 188.772242][ T38] audit: type=1326 audit(1785621320.880:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6895 comm="syz.2.390" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8f6c0ee84e code=0x7ffc0000 [ 188.772277][ T38] audit: type=1326 audit(1785621320.880:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6895 comm="syz.2.390" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8f6c0ee84e code=0x7ffc0000 [ 188.772901][ T38] audit: type=1326 audit(1785621320.880:18): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6895 comm="syz.2.390" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6c12e019 code=0x7ffc0000 [ 189.054700][ T6888] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 189.063256][ T5772] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff7e, bcdDevice=80.fe [ 189.063283][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.063299][ T5772] usb 2-1: Product: syz [ 189.063369][ T5772] usb 2-1: Manufacturer: syz [ 189.063383][ T5772] usb 2-1: SerialNumber: syz [ 189.236790][ T6901] tipc: Started in network mode [ 189.236808][ T6901] tipc: Node identity , cluster identity 4711 [ 189.236903][ T6901] tipc: Failed to obtain node identity [ 189.236946][ T6901] tipc: Enabling of bearer rejected, failed to enable media [ 189.355003][ T6888] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 189.426186][ T5772] option 2-1:254.29: GSM modem (1-port) converter detected [ 189.481526][ T5772] usb 2-1: USB disconnect, device number 17 [ 189.496292][ T5772] option 2-1:254.29: device disconnected [ 189.665097][ T5695] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 189.783289][ T200] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 189.818505][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.818547][ T5695] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 189.818562][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.830220][ T5695] usb 3-1: config 0 descriptor?? [ 190.195701][ T200] usb 4-1: USB disconnect, device number 19 [ 190.224318][ T200] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 190.304497][ T5695] hid (null): invalid report_size 63349 [ 190.530456][ T5695] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x3 [ 190.530613][ T5695] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x2 [ 190.530640][ T5695] hid-led 0003:0FC5:B080.0008: invalid report_size 63349 [ 190.530655][ T5695] hid-led 0003:0FC5:B080.0008: item 0 2 1 7 parsing failed [ 190.539664][ T5695] hid-led 0003:0FC5:B080.0008: probe with driver hid-led failed with error -22 [ 190.562617][ T5695] usb 3-1: USB disconnect, device number 21 [ 190.708743][ T38] audit: type=1326 audit(1785621322.810:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6927 comm="syz.1.401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f1dfe019 code=0x7ffc0000 [ 190.708795][ T38] audit: type=1326 audit(1785621322.810:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6927 comm="syz.1.401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f1dfe019 code=0x7ffc0000 [ 190.979543][ T5729] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 191.070298][ T6940] process 'syz.3.405' launched './file0' with NULL argv: empty string added [ 191.096546][ T6940] Invalid argument reading file caps for ./file0 [ 191.125029][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 191.178507][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 191.225965][ T5729] usb 2-1: string descriptor 0 read error: -22 [ 191.226111][ T5729] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 191.226132][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.364711][ T5729] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.364790][ T5729] usb 2-1: MIDIStreaming interface descriptor not found [ 191.983608][ T6958] netlink: 104 bytes leftover after parsing attributes in process `syz.3.411'. [ 193.162844][ T5729] usb 2-1: USB disconnect, device number 18 [ 198.040020][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.360538][ T7052] tmpfs: Unsupported parameter 'huge' [ 198.844557][ T7062] netlink: 140 bytes leftover after parsing attributes in process `syz.3.444'. [ 198.881224][ T7062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.444'. [ 202.608660][ T7084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.453'. [ 202.807271][ T7095] fuse: Bad value for 'fd' [ 202.968326][ T37] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 203.723749][ T38] kauditd_printk_skb: 43 callbacks suppressed [ 203.723773][ T38] audit: type=1326 audit(1785621335.810:64): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7096 comm="syz.0.459" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddc8e019 code=0x7ffc0000 [ 203.844961][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 203.871641][ T37] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 203.871674][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.871715][ T37] usb 2-1: Product: syz [ 203.871727][ T37] usb 2-1: Manufacturer: syz [ 203.871739][ T37] usb 2-1: SerialNumber: syz [ 203.947039][ T7108] netlink: 'syz.3.463': attribute type 15 has an invalid length. [ 203.970222][ T7107] netlink: 240 bytes leftover after parsing attributes in process `syz.0.462'. [ 204.577980][ T37] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 204.652526][ T37] usb 2-1: USB disconnect, device number 19 [ 205.815218][ T200] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 205.987133][ T200] usb 2-1: Using ep0 maxpacket: 16 [ 206.000805][ T200] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 206.000835][ T200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.000855][ T200] usb 2-1: Product: syz [ 206.000867][ T200] usb 2-1: Manufacturer: syz [ 206.000948][ T200] usb 2-1: SerialNumber: syz [ 207.463493][ T200] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 207.485677][ T200] usb 2-1: USB disconnect, device number 20 [ 208.100215][ T7222] raw_sendmsg: syz.3.511 forgot to set AF_INET. Fix it! [ 209.459929][ T5706] raw-gadget.1 gadget.0: failed to queue reset event [ 209.541554][ T5706] raw-gadget.1 gadget.0: failed to queue resume event [ 209.615151][ T5706] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 209.615425][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 209.615629][ T5706] raw-gadget.1 gadget.0: failed to queue reset event [ 209.700118][ T5706] raw-gadget.1 gadget.0: failed to queue resume event [ 209.765928][ T5706] usb 1-1: device descriptor read/64, error -32 [ 209.877790][ T5706] raw-gadget.1 gadget.0: failed to queue suspend event [ 209.882470][ T5706] raw-gadget.1 gadget.0: failed to queue reset event [ 209.945055][ T5706] raw-gadget.1 gadget.0: failed to queue resume event [ 210.016101][ T5706] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 210.016387][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 210.016605][ T5706] raw-gadget.1 gadget.0: failed to queue reset event [ 210.097007][ T5706] raw-gadget.1 gadget.0: failed to queue resume event [ 210.158669][ T5706] usb 1-1: device descriptor read/64, error -32 [ 210.265088][ T5706] raw-gadget.1 gadget.0: failed to queue suspend event [ 210.265286][ T5706] usb usb1-port1: attempt power cycle [ 210.265509][ T5706] raw-gadget.1 gadget.0: failed to queue disconnect event [ 210.265891][ T5706] raw-gadget.1 gadget.0: failed to queue reset event [ 210.345146][ T5706] raw-gadget.1 gadget.0: failed to queue resume event [ 210.346952][ T5706] raw-gadget.1 gadget.0: failed to queue reset event [ 210.555494][ T5706] raw-gadget.1 gadget.0: failed to queue resume event [ 210.615195][ T5706] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 210.637180][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 210.637321][ T5706] usb 1-1: device descriptor read/8, error -32 [ 210.748069][ T5706] raw-gadget.1 gadget.0: failed to queue suspend event [ 210.748605][ T5706] raw-gadget.1 gadget.0: failed to queue reset event [ 210.826443][ T5706] raw-gadget.1 gadget.0: failed to queue resume event [ 210.892225][ T5706] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.905172][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 210.906942][ T5706] usb 1-1: device descriptor read/8, error -32 [ 211.020391][ T5706] raw-gadget.1 gadget.0: failed to queue suspend event [ 211.020666][ T5706] usb usb1-port1: unable to enumerate USB device [ 211.509458][ T38] audit: type=1326 audit(1785621343.620:65): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7265 comm="syz.0.528" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddc8e019 code=0x0 [ 215.349028][ T7312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.349619][ T7312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.644990][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 215.810223][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 215.817006][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.817033][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.842134][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.842154][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.842163][ T9] usb 2-1: Product: syz [ 215.842171][ T9] usb 2-1: Manufacturer: syz [ 215.842178][ T9] usb 2-1: SerialNumber: syz [ 215.919601][ T9] usb 2-1: 0:2 : does not exist [ 215.968908][ T7321] netlink: 'syz.0.550': attribute type 15 has an invalid length. [ 216.029050][ T7323] binder: 7322:7323 ioctl 400c620e 200000000400 returned -22 [ 216.118865][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.547'. [ 216.159642][ T5695] usb 2-1: USB disconnect, device number 21 [ 216.286731][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.387599][ T38] audit: type=1800 audit(1785621348.460:67): pid=7325 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.552" name="product" dev="configfs" ino=19666 res=0 errno=0 [ 216.444265][ T38] audit: type=1800 audit(1785621348.460:66): pid=7326 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.552" name="idVendor" dev="configfs" ino=18671 res=0 errno=0 [ 217.863755][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.870488][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.405491][ T7368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.568'. [ 219.442903][ T7401] tipc: Enabling of bearer rejected, failed to enable media [ 219.526492][ T5772] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 219.708300][ T5772] usb 3-1: unable to get BOS descriptor or descriptor too short [ 219.710701][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.710728][ T5772] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.714333][ T5772] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 219.714364][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.714386][ T5772] usb 3-1: Product: syz [ 219.714399][ T5772] usb 3-1: Manufacturer: syz [ 219.714412][ T5772] usb 3-1: SerialNumber: syz [ 220.044977][ T5772] usb 3-1: USB disconnect, device number 22 [ 220.184630][ T7426] tipc: Started in network mode [ 220.184660][ T7426] tipc: Node identity ac1414aa, cluster identity 4711 [ 220.216425][ T7426] tipc: Enabled bearer , priority 10 [ 220.219446][ T7426] tipc: Disabling bearer [ 220.220285][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.598385][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 220.675073][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 220.675481][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 220.675504][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 223.325282][ T7497] overlayfs: failed to resolve './cgroup': -2 [ 224.297058][ T7525] overlayfs: failed to clone upperpath [ 225.542625][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.543176][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.945132][ T32] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 226.098578][ T32] usb 3-1: config 0 interface 0 altsetting 65 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 226.098614][ T32] usb 3-1: config 0 interface 0 altsetting 65 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.098640][ T32] usb 3-1: config 0 interface 0 has no altsetting 0 [ 226.098685][ T32] usb 3-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 226.098705][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.151910][ T32] usb 3-1: config 0 descriptor?? [ 226.152974][ T7557] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.585117][ T32] wacom 0003:056A:0307.0009: unknown main item tag 0x0 [ 226.585154][ T32] wacom 0003:056A:0307.0009: unknown main item tag 0x0 [ 226.585179][ T32] wacom 0003:056A:0307.0009: unknown main item tag 0x0 [ 226.774313][ T5772] usb 3-1: USB disconnect, device number 23 [ 227.073183][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.073820][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.561357][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 235.898527][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.903333][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.207277][ T7784] tipc: Enabled bearer , priority 10 [ 241.278421][ T5729] tipc: Node number set to 2886997162 [ 242.973512][ T7847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.974086][ T7847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.321268][ T7884] tipc: Started in network mode [ 244.321301][ T7884] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 244.374232][ T7884] tipc: Enabled bearer , priority 10 [ 245.768109][ T5695] tipc: Node number set to 10398378 [ 246.584418][ T7925] binder: 7924:7925 unknown command 1078485779 [ 246.584442][ T7925] binder: 7924:7925 ioctl c0306201 200000000480 returned -22 [ 247.491456][ T7945] EXT4-fs (loop6): unable to read superblock [ 247.763726][ T7953] futex_wake_op: syz.2.791 tries to shift op by 144; fix this program [ 248.920272][ T7963] 9p: Bad value for 'rfdno' [ 249.161702][ T38] audit: type=1326 audit(1785621381.270:68): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7968 comm="syz.2.799" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6c12e019 code=0x7ffc0000 [ 249.161760][ T38] audit: type=1326 audit(1785621381.270:69): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7968 comm="syz.2.799" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f8f6c12e019 code=0x7ffc0000 [ 249.161798][ T38] audit: type=1326 audit(1785621381.270:70): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7968 comm="syz.2.799" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6c12e019 code=0x7ffc0000 [ 250.292828][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 250.293156][ T7983] tipc: Enabled bearer , priority 10 [ 250.473942][ T7991] fuse: Bad value for 'fd' [ 251.054095][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.054692][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.676789][ T200] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 251.827455][ T200] usb 3-1: Using ep0 maxpacket: 8 [ 251.835511][ T200] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 251.835562][ T200] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 251.835585][ T200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.849148][ T200] usb 3-1: config 0 descriptor?? [ 252.289987][ T200] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0 [ 252.290026][ T200] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0 [ 252.290051][ T200] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0 [ 252.290076][ T200] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0 [ 252.290102][ T200] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0 [ 252.290612][ T200] pantherlord 0003:0810:0002.000A: reserved main item tag 0xd [ 252.290647][ T200] pantherlord 0003:0810:0002.000A: reserved main item tag 0xd [ 252.290673][ T200] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0 [ 252.290698][ T200] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0 [ 252.322703][ T200] pantherlord 0003:0810:0002.000A: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 252.322755][ T200] pantherlord 0003:0810:0002.000A: no output reports found [ 252.498086][ T5729] usb 3-1: USB disconnect, device number 24 [ 252.632102][ T8029] fido_id[8029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 253.487471][ T38] audit: type=1326 audit(1785621385.590:71): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8046 comm="syz.1.829" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0f1dfe019 code=0x0 [ 253.568894][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.569584][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.723409][ T8076] netlink: 104 bytes leftover after parsing attributes in process `syz.0.837'. [ 258.159511][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.161392][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.869432][ T8181] tmpfs: Unsupported parameter 'huge' [ 259.015382][ T8186] fuse: Bad value for 'fd' [ 259.071239][ T8186] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 259.071292][ T8186] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 259.148579][ T38] audit: type=1326 audit(1785621391.250:72): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8183 comm="syz.0.881" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddc8e019 code=0x0 [ 259.486542][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.110256][ T8208] overlayfs: failed to clone lowerpath [ 260.348227][ T8220] 9p: Bad value for 'rfdno' [ 262.003848][ T8248] mmap: syz.0.905 (8248) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 262.933480][ T38] audit: type=1804 audit(1785621394.970:73): pid=8257 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.1.909" name="bus" dev="ramfs" ino=22840 res=1 errno=0 [ 263.046282][ T38] audit: type=1804 audit(1785621395.120:74): pid=8259 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=ToMToU comm="syz.1.909" name="bus" dev="ramfs" ino=22840 res=1 errno=0 [ 263.431954][ T8273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.916'. [ 264.048826][ T8282] tipc: Enabling of bearer rejected, failed to enable media [ 265.584939][ T200] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 265.738156][ T200] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.740019][ T200] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 265.759452][ T200] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 265.759482][ T200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.759499][ T200] usb 3-1: Product: syz [ 265.759511][ T200] usb 3-1: Manufacturer: syz [ 265.759523][ T200] usb 3-1: SerialNumber: syz [ 266.034321][ T200] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 266.224544][ T200] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 266.224573][ T200] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 267.348486][ T8349] syz.0.949 (8349) used greatest stack depth: 15712 bytes left [ 267.496314][ T200] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 267.574500][ T200] usb 3-1: USB disconnect, device number 25 [ 268.788019][ T8030] udevd[8030]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.841346][ T8376] fuse: fd is not a fuse device [ 269.943510][ T8379] fuse: Bad value for 'fd' [ 270.006127][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.961'. [ 270.225582][ T8387] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 270.225724][ T8387] syzkaller0: linktype set to 773 [ 274.664351][ T8466] netlink: 'syz.1.994': attribute type 9 has an invalid length. [ 274.673726][ T8468] netlink: 'syz.1.994': attribute type 9 has an invalid length. [ 277.611913][ T8532] veth1_to_bond: entered allmulticast mode [ 277.623090][ T8532] sctp: [Deprecated]: syz.2.1017 (pid 8532) Use of int in max_burst socket option deprecated. [ 277.623090][ T8532] Use struct sctp_assoc_value instead [ 277.785757][ T8531] veth1_to_bond: left allmulticast mode [ 277.877452][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 278.654942][ T5772] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 278.826712][ T8554] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1022'. [ 278.827578][ T5772] usb 3-1: not running at top speed; connect to a high speed hub [ 278.828865][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.828920][ T5772] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 49408, setting to 64 [ 278.828945][ T5772] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 278.828987][ T5772] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 278.829008][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.879041][ T8549] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.899621][ T5772] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 279.076640][ T5772] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 279.077632][ T5772] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 279.320679][ T5772] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 279.416811][ T5772] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 279.417466][ T5772] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 279.452112][ T5772] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 279.658619][ T5772] usb 3-1: USB disconnect, device number 26 [ 279.770374][ T5772] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 279.849628][ T5772] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 279.859517][ T5772] keyspan 3-1:1.0: device disconnected [ 282.503965][ T8617] loop5: detected capacity change from 0 to 7 [ 282.686987][ T8617] Dev loop5: unable to read RDB block 7 [ 282.687038][ T8617] loop5: AHDI p4 [ 282.687056][ T8617] loop5: partition table partially beyond EOD, truncated [ 282.778462][ T8462] Flush: task=udevd[8462] dev=loop5 state=2 [ 282.921347][ T8462] Teardown: task=udevd[8462] dev=loop5 state=2 [ 284.566690][ T37] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 284.721596][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.723933][ T37] usb 3-1: config 67 has an invalid interface number: 47 but max is 0 [ 284.723960][ T37] usb 3-1: config 67 has no interface number 0 [ 284.723989][ T37] usb 3-1: config 67 interface 47 has no altsetting 0 [ 287.373918][ T37] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=6e.21 [ 287.373949][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.417936][ T37] usb 3-1: can't set config #67, error -71 [ 287.430777][ T37] usb 3-1: USB disconnect, device number 27 [ 287.675527][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 288.042121][ T8700] netlink: 'syz.3.1072': attribute type 25 has an invalid length. [ 290.310989][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.311588][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.354242][ T8750] tipc: Started in network mode [ 290.354273][ T8750] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 290.803915][ T8750] tipc: Enabled bearer , priority 10 [ 291.601468][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 291.601607][ T8762] bridge_slave_1: left allmulticast mode [ 291.601640][ T8762] bridge_slave_1: left promiscuous mode [ 291.652627][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.044505][ T8762] bridge_slave_0: left allmulticast mode [ 292.044545][ T8762] bridge_slave_0: left promiscuous mode [ 292.102863][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.272497][ T8777] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1094'. [ 292.308646][ T8777] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1094'. [ 292.987724][ T5706] tipc: Node number set to 4269801492 [ 294.070912][ T8801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1101'. [ 294.584969][ T32] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 294.764927][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 294.768099][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.770712][ T32] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 294.770750][ T32] usb 3-1: can't read configurations, error -61 [ 294.944903][ T32] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 295.094936][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 295.097876][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.100610][ T32] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 295.100647][ T32] usb 3-1: can't read configurations, error -61 [ 295.101104][ T32] usb usb3-port1: attempt power cycle [ 295.575129][ T32] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 295.607645][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 295.616499][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.668360][ T32] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 295.668401][ T32] usb 3-1: can't read configurations, error -61 [ 295.800968][ T32] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 295.821953][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 295.824699][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.840171][ T32] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 295.840208][ T32] usb 3-1: can't read configurations, error -61 [ 295.897670][ T32] usb usb3-port1: unable to enumerate USB device [ 298.187747][ T8869] SET target dimension over the limit! [ 299.223846][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1126'. [ 299.779559][ T8898] openvswitch: netlink: IP tunnel dst address not specified [ 299.779641][ T8898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.832262][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 299.832395][ T8893] bridge_slave_1: left allmulticast mode [ 299.832427][ T8893] bridge_slave_1: left promiscuous mode [ 299.832732][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.125183][ T8893] bridge_slave_0: left allmulticast mode [ 300.125237][ T8893] bridge_slave_0: left promiscuous mode [ 300.125545][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.488367][ T200] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 300.684399][ T200] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.686706][ T200] usb 3-1: not running at top speed; connect to a high speed hub [ 300.721310][ T200] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 300.721342][ T200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.721361][ T200] usb 3-1: Product: syz [ 300.721374][ T200] usb 3-1: Manufacturer: syz [ 300.721388][ T200] usb 3-1: SerialNumber: syz [ 300.907380][ T200] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 301.467809][ T200] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 301.810875][ T200] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 302.888174][ T200] usb 3-1: can't set first interface for hiFace device. [ 302.888219][ T200] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 302.918884][ T200] usb 3-1: can't set first interface for hiFace device. [ 302.918928][ T200] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 303.026067][ T200] usb 3-1: USB disconnect, device number 32 [ 303.120507][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 303.161351][ T8850] udevd[8850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.312505][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.313753][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.150153][ T5607] Bluetooth: hci0: unexpected event for opcode 0x203c [ 304.727010][ T8971] sg_write: data in/out 397308/136 bytes for SCSI command 0x0-- guessing data in; [ 304.727010][ T8971] program syz.0.1150 not setting count and/or reply_len properly [ 304.852511][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 307.111018][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 308.131689][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 308.220793][ T9050] netlink: 'syz.3.1173': attribute type 21 has an invalid length. [ 308.255365][ T9050] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1173'. [ 309.075895][ T9072] tipc: Enabling of bearer rejected, already enabled [ 309.332911][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 309.347250][ T9077] sg_write: data in/out 452058/40 bytes for SCSI command 0x0-- guessing data in; [ 309.347250][ T9077] program syz.2.1183 not setting count and/or reply_len properly [ 309.722985][ T200] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 309.802195][ T9083] team0: No ports can be present during mode change [ 309.927441][ T200] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.927469][ T200] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.928945][ T200] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 309.928973][ T200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.928992][ T200] usb 3-1: SerialNumber: syz [ 310.056212][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 310.335296][ T200] usb 3-1: 0:2 : does not exist [ 310.758958][ T200] usb 3-1: USB disconnect, device number 33 [ 310.987215][ T8850] udevd[8850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.708210][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.708826][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.954080][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.967341][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.265016][ T5772] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 312.429185][ T5772] usb 3-1: Using ep0 maxpacket: 32 [ 312.431348][ T5772] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.431375][ T5772] usb 3-1: config 0 has no interface number 0 [ 312.431409][ T5772] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.431423][ T5772] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.431444][ T5772] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 312.431464][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.440989][ T5772] usb 3-1: config 0 descriptor?? [ 312.795596][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.813420][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.958088][ T9117] tipc: Enabling of bearer rejected, failed to enable media [ 313.248010][ T5772] uclogic 0003:28BD:0094.000B: pen parameters not found [ 313.248038][ T5772] uclogic 0003:28BD:0094.000B: interface is invalid, ignoring [ 313.301546][ T5772] usb 3-1: USB disconnect, device number 34 [ 313.741241][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.741727][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.752832][ T9129] netlink: 'syz.3.1198': attribute type 1 has an invalid length. [ 314.048933][ T5695] kernel read not supported for file /video9 (pid: 5695 comm: kworker/1:4) [ 314.840464][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 316.132896][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.133571][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.141901][ T9189] overlayfs: failed to resolve 'pcr=00000000000000000018': -2 [ 316.148621][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.149263][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.904596][ T9200] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 316.925608][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.928218][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.206394][ T9226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1228'. [ 318.207908][ T9226] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 320.714452][ T9278] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 320.726619][ T9278] tmpfs: Bad value for 'mpol' [ 320.925575][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.770519][ T9297] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1254'. [ 321.820411][ T9299] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 321.890723][ T9301] @0Ù: renamed from bond_slave_1 (while UP) [ 322.045822][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 322.052699][ T9303] xt_hashlimit: max too large, truncated to 1048576 [ 322.719856][ T9321] FAULT_INJECTION: forcing a failure. [ 322.719856][ T9321] name failslab, interval 1, probability 0, space 0, times 0 [ 322.719980][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.0.1261 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.720009][ T9321] Tainted: [L]=SOFTLOCKUP [ 322.720015][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.720039][ T9321] Call Trace: [ 322.720049][ T9321] [ 322.720085][ T9321] dump_stack_lvl+0xe8/0x150 [ 322.720120][ T9321] should_fail_ex+0x467/0x600 [ 322.720212][ T9321] should_failslab+0xa8/0x100 [ 322.720236][ T9321] __kmalloc_noprof+0xfb/0x790 [ 322.720274][ T9321] ? alloc_trace_uprobe+0x32/0x300 [ 322.720330][ T9321] ? alloc_trace_uprobe+0x32/0x300 [ 322.720365][ T9321] alloc_trace_uprobe+0x32/0x300 [ 322.720398][ T9321] __trace_uprobe_create+0x9b5/0xe40 [ 322.720436][ T9321] ? __pfx___trace_uprobe_create+0x10/0x10 [ 322.720466][ T9321] ? __kmalloc_noprof+0x436/0x790 [ 322.720496][ T9321] ? argv_split+0x18d/0x400 [ 322.720514][ T9321] ? argv_split+0x18d/0x400 [ 322.720539][ T9321] ? argv_split+0x378/0x400 [ 322.720564][ T9321] trace_probe_create+0xce/0x130 [ 322.720592][ T9321] ? __pfx___trace_uprobe_create+0x10/0x10 [ 322.720620][ T9321] ? __pfx_trace_probe_create+0x10/0x10 [ 322.720645][ T9321] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.720665][ T9321] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.720685][ T9321] ? mutex_lock_nested+0x152/0x1d0 [ 322.720709][ T9321] ? dyn_event_create+0x20/0x70 [ 322.720734][ T9321] dyn_event_create+0x4f/0x70 [ 322.720755][ T9321] create_or_delete_trace_uprobe+0x65/0xa0 [ 322.720774][ T9321] trace_parse_run_command+0x1f3/0x380 [ 322.720832][ T9321] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 322.720853][ T9321] ? __pfx_probes_write+0x10/0x10 [ 322.720870][ T9321] vfs_write+0x29f/0xbb0 [ 322.720898][ T9321] ? __pfx_vfs_write+0x10/0x10 [ 322.720927][ T9321] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 322.720946][ T9321] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.720963][ T9321] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.720981][ T9321] ? mutex_lock_nested+0x152/0x1d0 [ 322.721005][ T9321] ? fdget_pos+0x252/0x320 [ 322.721031][ T9321] ksys_write+0x156/0x270 [ 322.721053][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 322.721083][ T9321] do_syscall_64+0x17b/0x530 [ 322.721101][ T9321] ? irqentry_exit+0x10f/0x8f0 [ 322.721118][ T9321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.721138][ T9321] ? clear_bhb_loop+0x40/0x90 [ 322.721163][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.721182][ T9321] RIP: 0033:0x7fc8ddc8e019 [ 322.721295][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.721311][ T9321] RSP: 002b:00007fc8dbee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.721394][ T9321] RAX: ffffffffffffffda RBX: 00007fc8ddf15fa0 RCX: 00007fc8ddc8e019 [ 322.721433][ T9321] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 322.721474][ T9321] RBP: 00007fc8dbee6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.721486][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.721497][ T9321] R13: 00007fc8ddf16038 R14: 00007fc8ddf15fa0 R15: 00007fff9bbbd268 [ 322.721530][ T9321] [ 323.088100][ T9321] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 323.088143][ T9321] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 323.088191][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.0.1261 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.088216][ T9321] Tainted: [L]=SOFTLOCKUP [ 323.088222][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.088231][ T9321] RIP: 0010:path_put+0x24/0x60 [ 323.088256][ T9321] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 17 ea 81 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 ee ff 48 8b 7b 08 e8 37 8a 03 00 48 [ 323.088270][ T9321] RSP: 0018:ffffc9001fac79c8 EFLAGS: 00010203 [ 323.088285][ T9321] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888022f69f40 [ 323.088296][ T9321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 323.088306][ T9321] RBP: ffffc9001fac7b50 R08: ffffffff99d12fd7 R09: 0000000000000000 [ 323.088318][ T9321] R10: ffffffff99d12fc0 R11: fffffbfff33a25fb R12: fffffffffffffff4 [ 323.088331][ T9321] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 323.088343][ T9321] FS: 00007fc8dbee66c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 323.088364][ T9321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.088375][ T9321] CR2: 0000001b32a63fff CR3: 000000003c1fa000 CR4: 00000000003526f0 [ 323.088389][ T9321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.088399][ T9321] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 323.088410][ T9321] Call Trace: [ 323.088416][ T9321] [ 323.088424][ T9321] __trace_uprobe_create+0x53c/0xe40 [ 323.088455][ T9321] ? __pfx___trace_uprobe_create+0x10/0x10 [ 323.088478][ T9321] ? __kmalloc_noprof+0x436/0x790 [ 323.088500][ T9321] ? argv_split+0x18d/0x400 [ 323.088515][ T9321] ? argv_split+0x18d/0x400 [ 323.088531][ T9321] ? argv_split+0x378/0x400 [ 323.088547][ T9321] trace_probe_create+0xce/0x130 [ 323.088568][ T9321] ? __pfx___trace_uprobe_create+0x10/0x10 [ 323.088591][ T9321] ? __pfx_trace_probe_create+0x10/0x10 [ 323.088612][ T9321] ? lockdep_hardirqs_on+0x7a/0x110 [ 323.088631][ T9321] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 323.088646][ T9321] ? mutex_lock_nested+0x152/0x1d0 [ 323.088667][ T9321] ? dyn_event_create+0x20/0x70 [ 323.088686][ T9321] dyn_event_create+0x4f/0x70 [ 323.088704][ T9321] create_or_delete_trace_uprobe+0x65/0xa0 [ 323.088721][ T9321] trace_parse_run_command+0x1f3/0x380 [ 323.088748][ T9321] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 323.088764][ T9321] ? __pfx_probes_write+0x10/0x10 [ 323.088777][ T9321] vfs_write+0x29f/0xbb0 [ 323.088820][ T9321] ? __pfx_vfs_write+0x10/0x10 [ 323.088839][ T9321] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 323.088853][ T9321] ? lockdep_hardirqs_on+0x7a/0x110 [ 323.088867][ T9321] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 323.088888][ T9321] ? mutex_lock_nested+0x152/0x1d0 [ 323.088908][ T9321] ? fdget_pos+0x252/0x320 [ 323.088927][ T9321] ksys_write+0x156/0x270 [ 323.088946][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 323.088966][ T9321] do_syscall_64+0x17b/0x530 [ 323.088983][ T9321] ? irqentry_exit+0x10f/0x8f0 [ 323.088997][ T9321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.089014][ T9321] ? clear_bhb_loop+0x40/0x90 [ 323.089033][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.089049][ T9321] RIP: 0033:0x7fc8ddc8e019 [ 323.089072][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.089085][ T9321] RSP: 002b:00007fc8dbee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.089101][ T9321] RAX: ffffffffffffffda RBX: 00007fc8ddf15fa0 RCX: 00007fc8ddc8e019 [ 323.089113][ T9321] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 323.089123][ T9321] RBP: 00007fc8dbee6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.089133][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.089143][ T9321] R13: 00007fc8ddf16038 R14: 00007fc8ddf15fa0 R15: 00007fff9bbbd268 [ 323.089161][ T9321] [ 323.089179][ T9321] Modules linked in: [ 323.089261][ T9321] ---[ end trace 0000000000000000 ]--- [ 323.089303][ T9321] RIP: 0010:path_put+0x24/0x60 [ 323.089322][ T9321] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 17 ea 81 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 ee ff 48 8b 7b 08 e8 37 8a 03 00 48 [ 323.089334][ T9321] RSP: 0018:ffffc9001fac79c8 EFLAGS: 00010203 [ 323.089348][ T9321] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888022f69f40 [ 323.089358][ T9321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 323.089368][ T9321] RBP: ffffc9001fac7b50 R08: ffffffff99d12fd7 R09: 0000000000000000 [ 323.089380][ T9321] R10: ffffffff99d12fc0 R11: fffffbfff33a25fb R12: fffffffffffffff4 [ 323.089392][ T9321] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 323.089404][ T9321] FS: 00007fc8dbee66c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 323.089418][ T9321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.089429][ T9321] CR2: 0000001b32a63fff CR3: 000000003c1fa000 CR4: 00000000003526f0 [ 323.089443][ T9321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.089453][ T9321] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 323.089473][ T9321] Kernel panic - not syncing: Fatal exception [ 323.089868][ T9321] Kernel Offset: disabled