last executing test programs: 6.888909347s ago: executing program 0 (id=201): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r3, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) write(r6, &(0x7f00000004c0)='\n', 0x1) 6.345117201s ago: executing program 0 (id=204): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 5.736281528s ago: executing program 0 (id=210): socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$inet6(0xa, 0x3, 0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) 4.015817235s ago: executing program 0 (id=212): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r3, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) write(r6, &(0x7f00000004c0)='\n', 0x1) 3.692655795s ago: executing program 3 (id=214): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28000000000000002900000004"], 0x28}, 0xc0) 3.348496003s ago: executing program 3 (id=217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x7, 0x9, 0x3, 0x8}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x10, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0x1, 0x5, 0x5, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0xeeee0000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x9, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0xdddd1000, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x4, 0x4, 0xff, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xadd8}, {0xfffff000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) writev(0xffffffffffffffff, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.014673692s ago: executing program 3 (id=219): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 2.809978192s ago: executing program 1 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040), 0x1200083, &(0x7f0000001640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 2.5768117s ago: executing program 1 (id=222): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') 2.502650205s ago: executing program 3 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000000)={'team_slave_1\x00', @ifru_addrs=@nl=@unspec}) 2.308130764s ago: executing program 3 (id=224): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000040)=[{0x4, 0x1, 0x0, 0x0}, {0x204, 0xfa11, 0x0, 0x0}], 0x2}) 2.262837425s ago: executing program 1 (id=225): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000200)='8', 0xfffffdb3, 0x10000000005971}]) 2.262604234s ago: executing program 2 (id=226): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) 2.053408873s ago: executing program 2 (id=227): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000780)={0x28, 0x2, r1, 0x0, &(0x7f0000000680)='%', 0x1, 0x33e2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f00000006c0)='h', 0x1, 0x388}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x7, 0x280000000}) 1.918621887s ago: executing program 1 (id=228): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) 1.581109147s ago: executing program 2 (id=229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x57, 0x4) 1.444611048s ago: executing program 1 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000340), 0x0, &(0x7f0000000040), 0x1200083, &(0x7f0000001640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 1.353691977s ago: executing program 2 (id=231): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 941.64581ms ago: executing program 1 (id=232): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 510.673459ms ago: executing program 2 (id=233): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') 474.525734ms ago: executing program 0 (id=234): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) 30.053361ms ago: executing program 0 (id=235): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) 29.808287ms ago: executing program 3 (id=236): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001900)={&(0x7f00000014c0)={{@any, 0x4e4f}, {@local, 0xec}, 0x400, "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"}, 0x418, 0x41}) 0s ago: executing program 2 (id=237): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4004000) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@ng={0x4, 0xd}, 0x2, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x400000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) gettid() timer_create(0x7, 0x0, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap$snddsp_status(&(0x7f000000a000/0x3000)=nil, 0x1000, 0x0, 0x110, r6, 0x82000000) timer_delete(r7) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}], 0x1c) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 57.193057][ T5279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.213743][ T5279] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. syzkaller login: [ 79.563732][ T5604] cgroup: Unknown subsys name 'net' [ 79.647919][ T5604] cgroup: Unknown subsys name 'cpuset' [ 79.651482][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.391185][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.856927][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.860531][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.864340][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.873157][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.875200][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.875745][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.876352][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.876878][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.877781][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.885562][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.894228][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.894503][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.912553][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.915335][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.917578][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.930678][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.934733][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.935316][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.942541][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.951326][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.558118][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.558775][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.558892][ T5616] bridge_slave_0: entered allmulticast mode [ 85.560252][ T5616] bridge_slave_0: entered promiscuous mode [ 85.622586][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.622707][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.622810][ T5616] bridge_slave_1: entered allmulticast mode [ 85.640273][ T5616] bridge_slave_1: entered promiscuous mode [ 85.701525][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.701627][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.701745][ T5615] bridge_slave_0: entered allmulticast mode [ 85.703809][ T5615] bridge_slave_0: entered promiscuous mode [ 85.752110][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.752201][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.752313][ T5615] bridge_slave_1: entered allmulticast mode [ 85.757390][ T5615] bridge_slave_1: entered promiscuous mode [ 85.771014][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.819586][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.881710][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.881885][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.882015][ T5613] bridge_slave_0: entered allmulticast mode [ 85.885647][ T5613] bridge_slave_0: entered promiscuous mode [ 85.910458][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.934194][ T5616] team0: Port device team_slave_0 added [ 85.934606][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.934736][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.934925][ T5613] bridge_slave_1: entered allmulticast mode [ 85.936692][ T5613] bridge_slave_1: entered promiscuous mode [ 85.939956][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.940252][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.944647][ T5614] bridge_slave_0: entered allmulticast mode [ 85.949784][ T5614] bridge_slave_0: entered promiscuous mode [ 85.965274][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.022737][ T5616] team0: Port device team_slave_1 added [ 86.038370][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.038488][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.038590][ T5614] bridge_slave_1: entered allmulticast mode [ 86.039975][ T5614] bridge_slave_1: entered promiscuous mode [ 86.074177][ T5629] Bluetooth: hci1: command tx timeout [ 86.074177][ T4933] Bluetooth: hci0: command tx timeout [ 86.074391][ T5621] Bluetooth: hci3: command tx timeout [ 86.074530][ T52] Bluetooth: hci2: command tx timeout [ 86.076292][ T5615] team0: Port device team_slave_0 added [ 86.133935][ T5615] team0: Port device team_slave_1 added [ 86.153699][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.156397][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.183141][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.183158][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.183177][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.200039][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.209480][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.266273][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.266290][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.266314][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.323010][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.323029][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.323055][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.390829][ T5614] team0: Port device team_slave_0 added [ 86.391598][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.391615][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.391643][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.394937][ T5614] team0: Port device team_slave_1 added [ 86.406537][ T5613] team0: Port device team_slave_0 added [ 86.466972][ T5613] team0: Port device team_slave_1 added [ 86.529399][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.529418][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.529446][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.546004][ T5616] hsr_slave_0: entered promiscuous mode [ 86.549294][ T5616] hsr_slave_1: entered promiscuous mode [ 86.556074][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.556116][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.556188][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.602595][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.602645][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.602718][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.611531][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.611618][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.611705][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.732257][ T5615] hsr_slave_0: entered promiscuous mode [ 86.733105][ T5615] hsr_slave_1: entered promiscuous mode [ 86.735964][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 86.736664][ T5615] Cannot create hsr debugfs directory [ 86.906092][ T5613] hsr_slave_0: entered promiscuous mode [ 86.907240][ T5613] hsr_slave_1: entered promiscuous mode [ 86.908154][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 86.908174][ T5613] Cannot create hsr debugfs directory [ 86.938473][ T5614] hsr_slave_0: entered promiscuous mode [ 86.939583][ T5614] hsr_slave_1: entered promiscuous mode [ 86.940365][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 86.940385][ T5614] Cannot create hsr debugfs directory [ 87.462066][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.480848][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.481810][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.492803][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.499956][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.521143][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.522360][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.541111][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.616745][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.623043][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.630247][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.649096][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.649914][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.657987][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.684520][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.688601][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.776893][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.780874][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.781634][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.792015][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.819329][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.830592][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.849826][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.862421][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.940608][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.951195][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.966481][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.969919][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.970927][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.979636][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.013933][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.017879][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.066453][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.140332][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.157391][ T4933] Bluetooth: hci0: command tx timeout [ 88.157425][ T4933] Bluetooth: hci1: command tx timeout [ 88.157537][ T5621] Bluetooth: hci3: command tx timeout [ 88.157614][ T52] Bluetooth: hci2: command tx timeout [ 88.191136][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.191537][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.217123][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.247813][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.247888][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.312671][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.338412][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.357027][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.357109][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.397547][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.397622][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.436407][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.470510][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.489393][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.489469][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.556728][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.556847][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.605262][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.658438][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.658549][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.753381][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.753492][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.633069][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.722750][ T5616] veth0_vlan: entered promiscuous mode [ 89.755674][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.783257][ T5616] veth1_vlan: entered promiscuous mode [ 89.879410][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.923000][ T5616] veth0_macvtap: entered promiscuous mode [ 89.948220][ T5616] veth1_macvtap: entered promiscuous mode [ 89.973621][ T5615] veth0_vlan: entered promiscuous mode [ 90.021197][ T5615] veth1_vlan: entered promiscuous mode [ 90.051516][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.063114][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.091345][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.112145][ T5614] veth0_vlan: entered promiscuous mode [ 90.153214][ T5614] veth1_vlan: entered promiscuous mode [ 90.166752][ T5615] veth0_macvtap: entered promiscuous mode [ 90.210263][ T5615] veth1_macvtap: entered promiscuous mode [ 90.233705][ T5629] Bluetooth: hci2: command tx timeout [ 90.233744][ T5629] Bluetooth: hci1: command tx timeout [ 90.233822][ T5621] Bluetooth: hci0: command tx timeout [ 90.233890][ T52] Bluetooth: hci3: command tx timeout [ 90.316598][ T1119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.343818][ T5613] veth0_vlan: entered promiscuous mode [ 90.365212][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.370796][ T5614] veth0_macvtap: entered promiscuous mode [ 90.371652][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.371671][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.427939][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.431631][ T5614] veth1_macvtap: entered promiscuous mode [ 90.449455][ T5613] veth1_vlan: entered promiscuous mode [ 90.504059][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.504082][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.535104][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.607673][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.642323][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.686150][ T976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.686350][ T976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.686526][ T976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.686714][ T976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754318][ T3357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754370][ T3357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754409][ T3357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754449][ T3357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754488][ T3357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754528][ T3357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754567][ T3357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.830512][ T5613] veth0_macvtap: entered promiscuous mode [ 90.860916][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.860948][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.890794][ T5613] veth1_macvtap: entered promiscuous mode [ 91.001236][ T5772] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 91.093216][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.093240][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.148285][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.204657][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.211899][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.211921][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.283722][ T976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.345857][ T965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.345925][ T965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.392557][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.392607][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.443613][ T1119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.522231][ T5777] rust_binder: 5776:5777 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 112, size: 185) [ 91.524241][ T5777] rust_binder: 5776:5777 error while translating object: EINVAL [ 91.524523][ T5777] rust_binder: Failure in copy_transaction_data: EINVAL [ 91.524569][ T5777] rust_binder: 5776:5777 transaction call to 5776:0 failed EINVAL, code 0 size 88-24 [ 91.527355][ T5617] rust_binder: 5776: undelivered TRANSACTION_ERROR: 29201 [ 91.622913][ T5777] syz.2.3 (5777) used greatest stack depth: 11936 bytes left [ 91.667553][ T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.667576][ T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.793159][ T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.793182][ T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.910065][ T5785] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 92.043270][ T969] cfg80211: failed to load regulatory.db [ 92.318843][ T4933] Bluetooth: hci1: command tx timeout [ 92.318962][ T4933] Bluetooth: hci2: command tx timeout [ 92.320350][ T5621] Bluetooth: hci0: command tx timeout [ 92.321542][ T52] Bluetooth: hci3: command tx timeout [ 93.160102][ T5794] nvmet: adding nsid 1 to subsystem testsubsys [ 93.277243][ T5797] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 94.237703][ T5811] configfs-gadget.g1 gadget.0: HOST MAC be:89:9c:5f:81:f8 [ 94.237733][ T5811] configfs-gadget.g1 gadget.0: MAC 22:8d:ef:c2:70:b3 [ 94.442998][ T5817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.443189][ T5817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.517777][ T5817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.544271][ T969] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.563995][ T5817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.564067][ T5817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.600456][ T5817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.635923][ T5817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.636041][ T5817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.637820][ T5817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.664494][ T5817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.666794][ T5817] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.687410][ T5817] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.711994][ T969] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 94.753114][ T969] usb 1-1: Dual-Role OTG device on HNP port [ 94.755092][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.755166][ T969] usb 1-1: SerialNumber: 1234567890 [ 95.112966][ T969] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, be:89:9c:5f:81:f8 [ 95.642062][ T5843] ubi0: attaching mtd0 [ 95.649898][ T5843] ubi0: scanning is finished [ 95.649945][ T5843] ubi0: empty MTD device detected [ 96.993893][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.993966][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.994000][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.994032][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.047830][ T5843] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 98.502778][ T5868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.527270][ T5868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.983456][ T969] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.033205][ T5880] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET) [ 99.044718][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.044760][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.044787][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.044813][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.143425][ T969] usb 2-1: Using ep0 maxpacket: 16 [ 99.144209][ T969] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 99.170034][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.170062][ T969] usb 2-1: Product: syz [ 99.170072][ T969] usb 2-1: Manufacturer: syz [ 99.170083][ T969] usb 2-1: SerialNumber: syz [ 99.227036][ T969] usb 2-1: config 0 descriptor?? [ 99.247443][ T969] usb 2-1: selecting invalid altsetting 1 [ 99.247469][ T969] technisat-usb2: could not set alternate setting to 0 [ 99.479118][ T969] technisat-usb2: firmware version: 0.0 [ 99.479167][ T969] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 99.504446][ T5886] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 100.644380][ T969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.668930][ T969] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 100.668999][ T969] usb 2-1: media controller created [ 100.691629][ T969] technisat-usb2: i2c-error: out failed 53 = -22 [ 100.691763][ T969] dvb-usb: MAC address reading failed. [ 100.847102][ T969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.973041][ T969] DVB: Unable to find symbol stv090x_attach() [ 100.980470][ T969] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 101.075966][ T5895] FAULT_INJECTION: forcing a failure. [ 101.075966][ T5895] name failslab, interval 1, probability 0, space 0, times 1 [ 101.076016][ T5895] CPU: 1 UID: 0 PID: 5895 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) [ 101.076042][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.076065][ T5895] Call Trace: [ 101.076078][ T5895] [ 101.076089][ T5895] dump_stack_lvl+0xe8/0x150 [ 101.076126][ T5895] should_fail_ex+0x3eb/0x540 [ 101.076169][ T5895] should_failslab+0xa8/0x100 [ 101.076198][ T5895] __kmalloc_cache_noprof+0x9e/0x600 [ 101.076233][ T5895] ? snd_seq_port_use_ptr+0x29/0x260 [ 101.076257][ T5895] ? snd_seq_port_connect+0x6b/0x3a0 [ 101.076279][ T5895] ? snd_seq_port_connect+0x6b/0x3a0 [ 101.076311][ T5895] snd_seq_port_connect+0x6b/0x3a0 [ 101.076335][ T5895] ? snd_seq_port_use_ptr+0x29/0x260 [ 101.076356][ T5895] ? snd_seq_port_use_ptr+0x29/0x260 [ 101.076380][ T5895] ? snd_seq_port_use_ptr+0x229/0x260 [ 101.076408][ T5895] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 101.076444][ T5895] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 101.076472][ T5895] ? clientptr+0x17/0x160 [ 101.076492][ T5895] ? clientptr+0x17/0x160 [ 101.076510][ T5895] ? clientptr+0x17/0x160 [ 101.076542][ T5895] snd_seq_oss_midi_open+0x558/0x890 [ 101.076583][ T5895] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 101.076624][ T5895] ? __kmalloc_cache_noprof+0x31c/0x600 [ 101.076659][ T5895] ? snd_seq_oss_timer_new+0x51/0x230 [ 101.076683][ T5895] ? snd_seq_oss_timer_new+0x51/0x230 [ 101.076715][ T5895] snd_seq_oss_midi_open_all+0x59/0xc0 [ 101.076752][ T5895] snd_seq_oss_open+0x9ac/0xf40 [ 101.076785][ T5895] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 101.076833][ T5895] ? __mutex_trylock_common+0x15f/0x270 [ 101.076863][ T5895] ? __pfx___mutex_trylock_common+0x10/0x10 [ 101.076907][ T5895] ? rcu_is_watching+0x16/0xb0 [ 101.076932][ T5895] ? trace_contention_end+0x3d/0x140 [ 101.076979][ T5895] ? __pfx___mutex_lock+0x10/0x10 [ 101.077009][ T5895] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 101.077037][ T5895] ? __pfx_free_devinfo+0x10/0x10 [ 101.077062][ T5895] ? do_raw_spin_unlock+0xf5/0x200 [ 101.077095][ T5895] ? soundcore_open+0x2da/0x490 [ 101.077126][ T5895] odev_open+0x67/0xa0 [ 101.077151][ T5895] chrdev_open+0x4d9/0x600 [ 101.077178][ T5895] ? __pfx_chrdev_open+0x10/0x10 [ 101.077205][ T5895] ? devcgroup_check_permission+0x31/0x8f0 [ 101.077248][ T5895] ? __pfx_chrdev_open+0x10/0x10 [ 101.077271][ T5895] do_dentry_open+0x80e/0x1360 [ 101.077308][ T5895] vfs_open_consume+0x4a/0x350 [ 101.077333][ T5895] ? path_openat+0x14bb/0x1e40 [ 101.077371][ T5895] path_openat+0x14d7/0x1e40 [ 101.077428][ T5895] do_file_open+0x23e/0x4a0 [ 101.077467][ T5895] ? __pfx_do_file_open+0x10/0x10 [ 101.077528][ T5895] ? _raw_spin_unlock+0x28/0x50 [ 101.077558][ T5895] ? alloc_fd+0x651/0x6c0 [ 101.077597][ T5895] do_sys_openat2+0x115/0x200 [ 101.077623][ T5895] ? __se_sys_futex+0x3a8/0x450 [ 101.077650][ T5895] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.077683][ T5895] ? rcu_is_watching+0x16/0xb0 [ 101.077711][ T5895] __x64_sys_openat+0x138/0x170 [ 101.077744][ T5895] do_syscall_64+0x166/0x520 [ 101.077765][ T5895] ? trace_irq_disable+0x3b/0x140 [ 101.077798][ T5895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.077830][ T5895] ? clear_bhb_loop+0x70/0xc0 [ 101.077858][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.077882][ T5895] RIP: 0033:0x7f6fb8d9e159 [ 101.077913][ T5895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.077933][ T5895] RSP: 002b:00007f6fb9d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.077963][ T5895] RAX: ffffffffffffffda RBX: 00007f6fb9025fa0 RCX: 00007f6fb8d9e159 [ 101.077981][ T5895] RDX: 0000000000008002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 101.077998][ T5895] RBP: 00007f6fb8e3503b R08: 0000000000000000 R09: 0000000000000000 [ 101.078013][ T5895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.078026][ T5895] R13: 00007f6fb9026038 R14: 00007f6fb9025fa0 R15: 00007ffd1ab94498 [ 101.078063][ T5895] [ 101.115685][ T969] rc_core: IR keymap rc-technisat-usb2 not found [ 101.115706][ T969] Registered IR keymap rc-empty [ 101.125738][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.126001][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.126226][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.126550][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.501916][ T969] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 101.567634][ T969] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 102.863690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 103.043345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.203345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.213352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.273720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.443265][ T969] dvb-usb: schedule remote query interval to 100 msecs. [ 103.523363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.673343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.723351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.064287][ T969] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 104.088352][ T5715] dvb-usb: error -71 while querying for an remote control event. [ 104.139285][ T969] usb 2-1: USB disconnect, device number 2 [ 104.626325][ T5915] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 104.659462][ T969] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 104.716657][ T5916] syz.1.37 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.406488][ T5701] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.564732][ T5701] usb 3-1: Using ep0 maxpacket: 8 [ 105.580925][ T5701] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 105.581385][ T5723] usb 1-1: USB disconnect, device number 2 [ 105.607402][ T5701] usb 3-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 105.607433][ T5701] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.607457][ T5701] usb 3-1: config 1 has no interface number 0 [ 105.607498][ T5701] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 105.607526][ T5701] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 105.607554][ T5701] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 105.610072][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.610100][ T5701] usb 3-1: Product: syz [ 105.610117][ T5701] usb 3-1: Manufacturer: syz [ 105.610133][ T5701] usb 3-1: SerialNumber: syz [ 105.735659][ T5723] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 106.616153][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.764657][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 106.765506][ T9] usb 4-1: config 0 has no interfaces? [ 106.777059][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.777134][ T9] usb 4-1: Product: syz [ 106.777176][ T9] usb 4-1: Manufacturer: syz [ 106.777211][ T9] usb 4-1: SerialNumber: syz [ 106.843270][ T9] usb 4-1: config 0 descriptor?? [ 107.086353][ T9] usb 4-1: USB disconnect, device number 2 [ 107.188303][ T5701] usb 3-1: USB disconnect, device number 2 [ 107.262638][ T5955] input: syz0 as /devices/virtual/input/input7 [ 107.545318][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.667268][ T5977] block nbd3: shutting down sockets [ 110.290883][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 111.469231][ T6009] fuseblk: Bad value for 'fd' [ 113.183780][ T5715] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.783716][ T5715] usb 2-1: Using ep0 maxpacket: 8 [ 114.806925][ T5715] usb 2-1: device descriptor read/all, error -71 [ 116.438416][ T1119] IPVS: starting estimator thread 0... [ 116.524665][ T6036] IPVS: using max 25 ests per chain, 60000 per kthread [ 118.970024][ T6069] clocksource: Switched to clocksource acpi_pm [ 121.915991][ T6077] FAULT_INJECTION: forcing a failure. [ 121.915991][ T6077] name failslab, interval 1, probability 0, space 0, times 0 [ 121.916022][ T6077] CPU: 1 UID: 0 PID: 6077 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 121.916040][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.916049][ T6077] Call Trace: [ 121.916056][ T6077] [ 121.916063][ T6077] dump_stack_lvl+0xe8/0x150 [ 121.916103][ T6077] should_fail_ex+0x3eb/0x540 [ 121.916126][ T6077] should_failslab+0xa8/0x100 [ 121.916143][ T6077] ? do_getname_kernel+0x54/0x230 [ 121.916162][ T6077] kmem_cache_alloc_noprof+0x9c/0x600 [ 121.916184][ T6077] ? trace_kmalloc+0x2a/0xf0 [ 121.916206][ T6077] ? do_getname_kernel+0x54/0x230 [ 121.916225][ T6077] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 121.916252][ T6077] do_getname_kernel+0x54/0x230 [ 121.916269][ T6077] ? kern_path+0x1b/0x150 [ 121.916291][ T6077] kern_path+0x25/0x150 [ 121.916313][ T6077] __trace_uprobe_create+0x396/0xe40 [ 121.916341][ T6077] ? trace_kmalloc+0x2a/0xf0 [ 121.916363][ T6077] ? __pfx___trace_uprobe_create+0x10/0x10 [ 121.916386][ T6077] ? __kmalloc_noprof+0x387/0x710 [ 121.916409][ T6077] ? __kmalloc_noprof+0x1a6/0x710 [ 121.916430][ T6077] ? argv_split+0x18d/0x400 [ 121.916453][ T6077] ? argv_split+0x18d/0x400 [ 121.916482][ T6077] ? argv_split+0x378/0x400 [ 121.916510][ T6077] trace_probe_create+0xce/0x130 [ 121.916532][ T6077] ? __pfx___trace_uprobe_create+0x10/0x10 [ 121.916555][ T6077] ? __pfx_trace_probe_create+0x10/0x10 [ 121.916582][ T6077] ? __might_fault+0xaf/0x130 [ 121.916606][ T6077] dyn_event_create+0x59/0x80 [ 121.916623][ T6077] create_or_delete_trace_uprobe+0x65/0xa0 [ 121.916648][ T6077] trace_parse_run_command+0x1f3/0x380 [ 121.916673][ T6077] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 121.916699][ T6077] ? __pfx_probes_write+0x10/0x10 [ 121.916722][ T6077] vfs_write+0x296/0xba0 [ 121.916751][ T6077] ? __pfx_vfs_write+0x10/0x10 [ 121.916774][ T6077] ? __fget_files+0x2a/0x420 [ 121.916798][ T6077] ? __fget_files+0x3a2/0x420 [ 121.916817][ T6077] ? __fget_files+0x2a/0x420 [ 121.916843][ T6077] ksys_write+0x150/0x270 [ 121.916867][ T6077] ? __pfx_ksys_write+0x10/0x10 [ 121.916898][ T6077] do_syscall_64+0x166/0x520 [ 121.916913][ T6077] ? trace_irq_disable+0x3b/0x140 [ 121.916935][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.916952][ T6077] ? clear_bhb_loop+0x70/0xc0 [ 121.916971][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.916987][ T6077] RIP: 0033:0x7f6fb8d9e159 [ 121.917008][ T6077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.917021][ T6077] RSP: 002b:00007f6fb9d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.917041][ T6077] RAX: ffffffffffffffda RBX: 00007f6fb9025fa0 RCX: 00007f6fb8d9e159 [ 121.917053][ T6077] RDX: 000000000000001b RSI: 0000200000000300 RDI: 0000000000000003 [ 121.917063][ T6077] RBP: 00007f6fb8e3503b R08: 0000000000000000 R09: 0000000000000000 [ 121.917073][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.917087][ T6077] R13: 00007f6fb9026038 R14: 00007f6fb9025fa0 R15: 00007ffd1ab94498 [ 121.917112][ T6077] [ 123.320814][ T6088] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.111477][ T6096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.79'. [ 125.662900][ T969] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.814849][ T969] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 125.817942][ T969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.817998][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.885853][ T969] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 125.886165][ T969] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 125.886244][ T969] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 125.922552][ T969] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 125.941039][ T969] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 125.963833][ T969] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 125.968520][ T969] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 125.968613][ T969] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 125.971893][ T969] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 126.315264][ T969] usb 4-1: USB disconnect, device number 3 [ 126.377667][ T969] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 126.398022][ T969] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 126.399638][ T969] keyspan 4-1:1.0: device disconnected [ 127.016086][ T6113] nvme_fabrics: unknown parameter or missing value 'u¹w' in ctrl creation request [ 127.045182][ T6115] fuseblk: Bad value for 'fd' [ 127.352805][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.476487][ T5723] Process accounting resumed [ 127.613882][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 127.680781][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 127.809542][ T9] usb 4-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 127.809702][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.809855][ T9] usb 4-1: config 1 has no interface number 0 [ 127.810616][ T9] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 127.810672][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 127.810726][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 128.119348][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.119405][ T9] usb 4-1: Product: syz [ 128.119456][ T9] usb 4-1: Manufacturer: syz [ 128.119529][ T9] usb 4-1: SerialNumber: syz [ 130.107779][ T6131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.92'. [ 130.242399][ T9] usb 4-1: USB disconnect, device number 4 [ 130.412971][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.791846][ T6148] fuseblk: Bad value for 'fd' [ 130.941507][ T969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.125654][ T5617] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.232800][ T969] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 131.378714][ T969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.379164][ T969] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 131.379897][ T5617] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 131.380078][ T969] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.785361][ T5617] usb 1-1: Dual-Role OTG device on HNP port [ 131.787728][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.787821][ T5617] usb 1-1: SerialNumber: 1234567890 [ 131.798395][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 131.798415][ T969] usb 3-1: Product: syz [ 131.798426][ T969] usb 3-1: Manufacturer: syz [ 131.850634][ T6139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.861633][ T969] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 131.890527][ T969] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 131.923997][ T5617] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, be:89:9c:5f:81:f8 [ 132.093471][ T5617] usb 3-1: USB disconnect, device number 3 [ 132.110597][ T5617] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 132.111824][ T5617] garmin_gps 3-1:1.0: device disconnected [ 132.727920][ T6154] null_blk: disk rnullb0 created [ 132.918811][ T6167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.105'. [ 132.954636][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.954749][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.062047][ T5617] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.213894][ T5617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.216927][ T5617] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.216973][ T5617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.255987][ T5617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.256018][ T5617] usb 2-1: Product: syz [ 133.256035][ T5617] usb 2-1: Manufacturer: syz [ 133.256065][ T5617] usb 2-1: SerialNumber: syz [ 133.303673][ T5617] cdc_mbim 2-1:1.0: skipping garbage [ 133.420617][ T6180] input: syz0 as /devices/virtual/input/input8 [ 133.685950][ T969] Process accounting resumed [ 133.904454][ T6178] Process accounting resumed [ 134.868304][ T5617] cdc_mbim 2-1:1.0: bind() failure [ 135.017711][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.403762][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 135.448861][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.449328][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 135.449741][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.638708][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 135.638842][ T9] usb 3-1: Product: syz [ 135.638926][ T9] usb 3-1: Manufacturer: syz [ 136.436872][ T6196] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.703294][ T5617] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 137.708088][ T9] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 137.734023][ T5617] usb 2-1: USB disconnect, device number 5 [ 137.812571][ T9] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 138.091548][ T9] usb 3-1: USB disconnect, device number 4 [ 138.119595][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 138.140625][ T9] garmin_gps 3-1:1.0: device disconnected [ 138.297209][ T6206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.115'. [ 138.503436][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.672060][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 138.675532][ T25] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 138.679108][ T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 138.679146][ T25] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 138.679184][ T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 138.679220][ T25] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.679279][ T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.679327][ T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.679355][ T25] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 138.679382][ T25] usb 4-1: config 168 interface 0 has no altsetting 0 [ 138.704193][ T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 138.704308][ T25] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 138.704413][ T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 138.704471][ T25] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.704510][ T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.704558][ T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.704599][ T25] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 138.704634][ T25] usb 4-1: config 168 interface 0 has no altsetting 0 [ 138.721623][ T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 138.721737][ T25] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 138.721880][ T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 138.721955][ T25] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.722038][ T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.722126][ T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.722207][ T25] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 138.722303][ T25] usb 4-1: config 168 interface 0 has no altsetting 0 [ 138.786739][ T25] usb 4-1: string descriptor 0 read error: -22 [ 138.787100][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.344853][ T25] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 139.417466][ T25] usb 4-1: USB disconnect, device number 5 [ 140.391209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.491192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 142.801008][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.956229][ T30] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.976456][ T30] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.976495][ T30] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.976562][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.089436][ T30] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.111829][ T30] usb 4-1: invalid MIDI out EP 0 [ 144.696733][ T30] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 144.734440][ T30] usb 4-1: USB disconnect, device number 6 [ 146.445217][ T6285] 9p: Bad value for 'wfdno' [ 149.701729][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.851089][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 149.855900][ T25] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.863360][ T25] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.863435][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.864889][ T25] usb 2-1: config 0 has no interface number 0 [ 149.865080][ T25] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.927398][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.927430][ T25] usb 2-1: Product: syz [ 149.927447][ T25] usb 2-1: Manufacturer: syz [ 149.927463][ T25] usb 2-1: SerialNumber: syz [ 149.963318][ T25] usb 2-1: config 0 descriptor?? [ 149.993552][ T30] usb 1-1: USB disconnect, device number 3 [ 150.048624][ T25] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 150.123740][ T30] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 150.263476][ T25] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 150.263776][ T25] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 150.387894][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.388470][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.491727][ T10] usb 2-1: USB disconnect, device number 6 [ 150.917104][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.070762][ T30] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 151.075565][ T30] usb 1-1: Dual-Role OTG device on HNP port [ 151.076143][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.076168][ T30] usb 1-1: SerialNumber: 1234567890 [ 151.290123][ T30] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, be:89:9c:5f:81:f8 [ 151.623003][ T5723] usb 1-1: USB disconnect, device number 4 [ 151.628852][ T5723] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 153.616475][ T5723] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.620695][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 153.620727][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 153.620748][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1a8d instead [ 153.620770][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xdd90 instead [ 153.620788][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 153.620805][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 153.620823][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 153.620856][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 153.620905][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 153.620954][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 153.620976][ T6374] jffs2: Further such events for this erase block will not be printed [ 153.621421][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 153.621443][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 153.621463][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1a8d instead [ 153.621485][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xdd90 instead [ 153.621503][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 153.621521][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 153.621539][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 153.621563][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 153.621599][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 153.621635][ T6374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 153.621652][ T6374] jffs2: Further such events for this erase block will not be printed [ 153.622111][ T6374] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 153.622123][ T6374] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 154.376674][ T5723] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 154.397536][ T5723] usb 1-1: Dual-Role OTG device on HNP port [ 154.407309][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.407353][ T5723] usb 1-1: SerialNumber: 1234567890 [ 154.508967][ T5723] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, be:89:9c:5f:81:f8 [ 154.627026][ T5629] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 155.178969][ T6397] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 155.179391][ T6397] ipvlan0: entered allmulticast mode [ 155.179620][ T6397] veth0_vlan: entered allmulticast mode [ 155.243754][ T6397] team0: Device ipvlan0 failed to register rx_handler [ 156.334718][ T6401] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 156.472166][ T6410] fuseblk: Bad value for 'fd' [ 156.765096][ T5723] usb 1-1: USB disconnect, device number 5 [ 156.778630][ T5723] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 157.963923][ T6438] netlink: 'syz.1.173': attribute type 2 has an invalid length. [ 157.963966][ T6438] netlink: 'syz.1.173': attribute type 2 has an invalid length. [ 158.548975][ T6457] fuseblk: Bad value for 'fd' [ 158.770260][ T5617] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.914586][ T6470] netlink: 92 bytes leftover after parsing attributes in process `syz.0.183'. [ 159.120854][ T5617] usb 1-1: device not accepting address 6, error -71 [ 159.511617][ T6492] fuseblk: Bad value for 'fd' [ 159.545189][ T6490] FAULT_INJECTION: forcing a failure. [ 159.545189][ T6490] name failslab, interval 1, probability 0, space 0, times 0 [ 159.545227][ T6490] CPU: 0 UID: 0 PID: 6490 Comm: syz.3.191 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.545258][ T6490] Tainted: [L]=SOFTLOCKUP [ 159.545267][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.545281][ T6490] Call Trace: [ 159.545290][ T6490] [ 159.545300][ T6490] dump_stack_lvl+0xe8/0x150 [ 159.545336][ T6490] should_fail_ex+0x3eb/0x540 [ 159.545367][ T6490] ? __alloc_skb+0x1db/0x7a0 [ 159.545389][ T6490] should_failslab+0xa8/0x100 [ 159.545417][ T6490] ? __alloc_skb+0x1db/0x7a0 [ 159.545437][ T6490] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 159.545474][ T6490] ? __alloc_skb+0x1db/0x7a0 [ 159.545502][ T6490] __alloc_skb+0x1db/0x7a0 [ 159.545540][ T6490] tipc_buf_acquire+0x2b/0xe0 [ 159.545576][ T6490] tipc_named_publish+0x266/0x770 [ 159.545618][ T6490] tipc_nametbl_publish+0x15e/0x270 [ 159.545652][ T6490] tipc_sk_publish+0x1cd/0x430 [ 159.545685][ T6490] ? __pfx_tipc_sk_publish+0x10/0x10 [ 159.545718][ T6490] ? __local_bh_enable_ip+0xd6/0x140 [ 159.545751][ T6490] tipc_sk_bind+0x1ee/0x300 [ 159.545783][ T6490] __sys_bind+0x2e3/0x410 [ 159.545820][ T6490] ? __pfx___sys_bind+0x10/0x10 [ 159.545867][ T6490] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 159.545905][ T6490] __x64_sys_bind+0x7a/0x90 [ 159.545940][ T6490] do_syscall_64+0x166/0x520 [ 159.545961][ T6490] ? trace_irq_disable+0x3b/0x140 [ 159.545995][ T6490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.546020][ T6490] ? clear_bhb_loop+0x70/0xc0 [ 159.546050][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.546073][ T6490] RIP: 0033:0x7f477559e159 [ 159.546096][ T6490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.546115][ T6490] RSP: 002b:00007f47764e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 159.546141][ T6490] RAX: ffffffffffffffda RBX: 00007f4775825fa0 RCX: 00007f477559e159 [ 159.546158][ T6490] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000005 [ 159.546173][ T6490] RBP: 00007f477563503b R08: 0000000000000000 R09: 0000000000000000 [ 159.546187][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.546201][ T6490] R13: 00007f4775826038 R14: 00007f4775825fa0 R15: 00007ffe72deb038 [ 159.546237][ T6490] [ 159.546247][ T6490] tipc: Publication distribution failure [ 159.786919][ T5617] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.970365][ T5617] usb 1-1: Using ep0 maxpacket: 8 [ 159.971276][ T5617] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 159.974348][ T5617] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.974397][ T5617] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 159.974425][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.999475][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 159.999505][ T5617] usb 1-1: Product: syz [ 159.999521][ T5617] usb 1-1: Manufacturer: syz [ 159.999536][ T5617] usb 1-1: SerialNumber: syz [ 160.070261][ T5617] usb 1-1: config 0 descriptor?? [ 160.221005][ T6499] UDC core: g1: couldn't find an available UDC or it's busy [ 162.009094][ T5617] rc_core: IR keymap rc-imon-rsc not found [ 162.009115][ T5617] Registered IR keymap rc-empty [ 162.011970][ T5617] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 162.016801][ T5617] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 162.131080][ T5617] usb 1-1: USB disconnect, device number 7 [ 164.988581][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.139888][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 165.142284][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 165.142631][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.142656][ T10] usb 1-1: SerialNumber: 1234567890 [ 165.189071][ T5617] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.236947][ T10] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, be:89:9c:5f:81:f8 [ 166.808385][ T5617] usb 3-1: Using ep0 maxpacket: 8 [ 166.811018][ T5617] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.813231][ T5617] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.813259][ T5617] usb 3-1: config 179 has no interface number 0 [ 166.813325][ T5617] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.813368][ T5617] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.813399][ T5617] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.813426][ T5617] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 166.813455][ T5617] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.813498][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.910232][ T6565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.174195][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 167.174271][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 167.174519][ T5617] usb 3-1: USB disconnect, device number 5 [ 167.285276][ T6580] evm: overlay not supported [ 167.630628][ T6586] kvm [6585]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 167.699063][ T6591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 167.699117][ T6591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 167.744553][ T6591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 167.744609][ T6591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 168.083344][ T6600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.858724][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 169.009534][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 169.014496][ T9] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 169.050675][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.050803][ T9] usb 4-1: Product: syz [ 169.050820][ T9] usb 4-1: Manufacturer: syz [ 169.050836][ T9] usb 4-1: SerialNumber: syz [ 169.093516][ T9] usb 4-1: config 0 descriptor?? [ 169.118565][ T9] usb 4-1: selecting invalid altsetting 1 [ 169.118599][ T9] technisat-usb2: could not set alternate setting to 0 [ 169.303804][ T9] technisat-usb2: firmware version: 0.0 [ 169.303956][ T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 169.645224][ T5723] usb 1-1: USB disconnect, device number 8 [ 169.660615][ T5723] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 169.716014][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.716838][ T9] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 169.716895][ T9] usb 4-1: media controller created [ 169.716956][ T9] technisat-usb2: i2c-error: out failed 53 = -22 [ 169.717037][ T9] dvb-usb: MAC address reading failed. [ 169.786810][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.927534][ T6616] technisat-usb2: i2c-error: out failed 04 = -22 [ 170.023944][ T6645] rust_binder: Failure in copy_transaction_data: EINVAL [ 170.023974][ T6645] rust_binder: 6644:6645 transaction async to 6644:0 failed EINVAL, code 0 size 0-24 [ 170.076005][ T9] DVB: Unable to find symbol stv090x_attach() [ 170.085943][ T9] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 170.180322][ T9] rc_core: IR keymap rc-technisat-usb2 not found [ 170.180344][ T9] Registered IR keymap rc-empty [ 170.185730][ T9] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 170.223563][ T9] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11 [ 170.243185][ T5723] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.266577][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 170.267594][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 170.297129][ T9] usb 4-1: USB disconnect, device number 7 [ 170.391565][ T5723] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 170.410593][ T5723] usb 1-1: Dual-Role OTG device on HNP port [ 170.412369][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.412394][ T5723] usb 1-1: SerialNumber: 1234567890 [ 170.482757][ T5723] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, be:89:9c:5f:81:f8 [ 170.513700][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 170.880076][ T6659] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 170.880081][ T9] rust_binder: 6644: undelivered TRANSACTION_ERROR: 29201 [ 170.901019][ T6659] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 170.910413][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.0.235 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.922294][ T6659] Tainted: [L]=SOFTLOCKUP [ 170.927075][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.938170][ T6659] RIP: 0010:strlen+0x29/0x70 [ 170.943304][ T6659] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 170.964947][ T6659] RSP: 0018:ffffc900034ef978 EFLAGS: 00010246 [ 170.971660][ T6659] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 170.980455][ T6659] RDX: ffffc90003e71000 RSI: 0000000000000052 RDI: 0000000000000000 [ 170.989248][ T6659] RBP: ffffc900034efab8 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 170.998057][ T6659] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff9200069df40 [ 171.006877][ T6659] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 171.015676][ T6659] FS: 00007f6fb9d306c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 171.025521][ T6659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.032790][ T6659] CR2: 000000110c2dbd09 CR3: 0000000079922000 CR4: 00000000003526f0 [ 171.041609][ T6659] Call Trace: [ 171.045235][ T6659] [ 171.048477][ T6659] do_getname_kernel+0x1d/0x230 [ 171.053840][ T6659] ? getname_kernel+0xd/0x20 [ 171.058908][ T6659] filp_open+0x87/0x1d0 [ 171.063507][ T6659] ? __pfx_filp_open+0x10/0x10 [ 171.068760][ T6659] ? __pfx___mutex_lock+0x10/0x10 [ 171.074306][ T6659] nvmet_file_ns_enable+0x74/0x350 [ 171.079952][ T6659] nvmet_ns_enable+0xaa/0x780 [ 171.085115][ T6659] ? lock_acquire+0x115/0x350 [ 171.090287][ T6659] nvmet_ns_enable_store+0xd7/0x170 [ 171.096030][ T6659] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 171.102433][ T6659] ? down_read+0x2b9/0x320 [ 171.107316][ T6659] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 171.113727][ T6659] configfs_write_iter+0x337/0x430 [ 171.119382][ T6659] vfs_write+0x612/0xba0 [ 171.124074][ T6659] ? __pfx_vfs_write+0x10/0x10 [ 171.129381][ T6659] ? __fget_files+0x2a/0x420 [ 171.134454][ T6659] ksys_write+0x150/0x270 [ 171.139271][ T6659] ? __pfx_ksys_write+0x10/0x10 [ 171.144669][ T6659] do_syscall_64+0x166/0x520 [ 171.150213][ T6659] ? trace_irq_disable+0x3b/0x140 [ 171.155764][ T6659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.162450][ T6659] ? clear_bhb_loop+0x70/0xc0 [ 171.167631][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.174125][ T6659] RIP: 0033:0x7f6fb8d9e159 [ 171.179000][ T6659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.200581][ T6659] RSP: 002b:00007f6fb9d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.209854][ T6659] RAX: ffffffffffffffda RBX: 00007f6fb9025fa0 RCX: 00007f6fb8d9e159 [ 171.218648][ T6659] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 171.227430][ T6659] RBP: 00007f6fb8e3503b R08: 0000000000000000 R09: 0000000000000000 [ 171.236239][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.245021][ T6659] R13: 00007f6fb9026038 R14: 00007f6fb9025fa0 R15: 00007ffd1ab94498 [ 171.253811][ T6659] [ 171.257146][ T6659] Modules linked in: [ 171.263245][ T6659] ---[ end trace 0000000000000000 ]--- [ 171.327075][ T6645] syz.1.232 (6645): drop_caches: 2 [ 171.458092][ T6659] RIP: 0010:strlen+0x29/0x70 [ 171.458132][ T6659] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 171.458153][ T6659] RSP: 0018:ffffc900034ef978 EFLAGS: 00010246 [ 171.458176][ T6659] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 171.458191][ T6659] RDX: ffffc90003e71000 RSI: 0000000000000052 RDI: 0000000000000000 [ 171.458207][ T6659] RBP: ffffc900034efab8 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 171.458225][ T6659] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff9200069df40 [ 171.458242][ T6659] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 171.458260][ T6659] FS: 00007f6fb9d306c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 171.458280][ T6659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.458296][ T6659] CR2: 00005579bb306950 CR3: 0000000079922000 CR4: 00000000003526f0 [ 171.458328][ T6659] Kernel panic - not syncing: Fatal exception [ 171.568271][ T6659] Kernel Offset: disabled [ 171.573074][ T6659] Rebooting in 86400 seconds..