last executing test programs: 14.929890399s ago: executing program 2 (id=393): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r3) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000140)={0x9, @raw_data="aa1d33c716d5b6c598bb846045a4bcde20fce0759b5c056dddb296fe6a83dba0fddded3748767a86464e2d891fd2233e2e34bc803b4b8da2533af7268e8114063e523749d15906dd6b2b142a27f2a2422a49a8d947ddcabfc37cb266e3ba7058137740598d04828e74eb7b413ec0847036eca4215e1f2e40b6ec95e1a190fb73954b3ada9faf3ef4d77d6cffe617982304db80ebb456edb8117402076cea30bccfc83eddbac4c369c3528b552ad400"}) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000100)) r7 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='iocharset', &(0x7f00000001c0)='io#(ap\xac\xbesyt\xca\xb6(\xf9\xde\xe7\x82\v\xad\x9c\xf2\xd7+\x9bCN:?\xfd\xedf0\xb3\xb1\xf4\x8c\x15\xf9G+\x7f\x87\x91JQ\x01\x00\x00\x00\xee@\xf0Pbp\x95\x1a\xc2\xde\xad]\x80~\xf9\xbd|!\ta\xaa\xb2p\xee\x8d\xb6\n\x90wx\xd2\xc5\x00'/95, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000340)={0x980900, 0xfffffffc, @value}) dup2(r4, r4) getpid() 9.200624891s ago: executing program 1 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080), 0x29e1460, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@uid_lt={'uid<', r0}}, {@dont_appraise}, {@fowner_gt={'fowner>', r0}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'proc\x00'}}, {@pcr={'pcr', 0x3d, 0x1e}}]}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newsa={0x148, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast2, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0xffffffff, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "0040002000008b0a696b0b86e3dc0100"}}]}, 0x148}}, 0x0) 8.776339566s ago: executing program 1 (id=404): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e40000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000509000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x84) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2218, 0x7521, 0x16, 0x0, 0x0) 8.71257312s ago: executing program 3 (id=405): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34091}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000001406241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 8.23772617s ago: executing program 1 (id=409): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = eventfd2(0x2, 0x80001) fgetxattr(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{0x1}, 0x9}}}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd8400000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x6, 0x98, &(0x7f0000000000)=""/152}, 0x94) 5.63201519s ago: executing program 1 (id=411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x1d000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c00078008000400040000000800010018000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r5, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe8c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0xa4500001}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004040) write$cgroup_pressure(r3, &(0x7f0000000440)={'full', 0x20, 0x2, 0x20, 0x100}, 0x2f) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r6 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80200c}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x140a, 0x300, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000009c0)='blkio.reset_stats\x00', 0x2, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r9) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0d0700f5", @ANYRES16=r10], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x4}, 0x38) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r12 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r12, &(0x7f0000001500)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x108}}], 0x2, 0x4048840) accept(r12, &(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x80) 5.20425412s ago: executing program 4 (id=412): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') 5.053402668s ago: executing program 0 (id=413): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x6, &(0x7f00000000c0)={0x5, "810556c721100f00"}}) 5.024135977s ago: executing program 3 (id=414): epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) inotify_init1(0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 4.917944106s ago: executing program 4 (id=415): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0xe, 0x7, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x7, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x9}}]}, 0x38}}, 0x0) 4.704489888s ago: executing program 0 (id=416): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) 4.703019396s ago: executing program 2 (id=417): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newpolicy={0xb8, 0x13, 0x101, 0x70bd2c, 0x0, {{@in6=@remote, @in=@broadcast, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 4.666827213s ago: executing program 4 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 4.51172624s ago: executing program 3 (id=419): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e40000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000509000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x84) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2218, 0x7521, 0x16, 0x0, 0x0) 4.292107369s ago: executing program 0 (id=420): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0xd, 0xffb, &(0x7f0000002cc0)=""/4091, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffe4}, 0x94) 4.276288014s ago: executing program 2 (id=421): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000007c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) 4.202650012s ago: executing program 4 (id=422): syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) read(r0, &(0x7f0000001040)=""/14, 0xe) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.181354452s ago: executing program 3 (id=423): ioprio_set$pid(0x3, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x20, 0x1, 0x4, r0, 0x0, 0x0, 0xa00}]) 4.096160885s ago: executing program 2 (id=424): socket$rds(0x15, 0x5, 0x0) r0 = syz_io_uring_setup(0x76b, &(0x7f0000000540)={0x0, 0x5ff6, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18) 4.032539521s ago: executing program 0 (id=425): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB='\x00\x00'], 0x3c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004100)=@newtfilter={0x64, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x64}}, 0x40) 3.915564175s ago: executing program 0 (id=426): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') 3.854299321s ago: executing program 2 (id=427): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x3, "c41d21"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x6, &(0x7f00000000c0)={0x5, "810556c721100f00"}}) 3.65729647s ago: executing program 0 (id=428): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r3) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x1) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000140)={0x9, @raw_data="aa1d33c716d5b6c598bb846045a4bcde20fce0759b5c056dddb296fe6a83dba0fddded3748767a86464e2d891fd2233e2e34bc803b4b8da2533af7268e8114063e523749d15906dd6b2b142a27f2a2422a49a8d947ddcabfc37cb266e3ba7058137740598d04828e74eb7b413ec0847036eca4215e1f2e40b6ec95e1a190fb73954b3ada9faf3ef4d77d6cffe617982304db80ebb456edb8117402076cea30bccfc83eddbac4c369c3528b552ad400"}) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000100)) r7 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='iocharset', &(0x7f00000001c0)='io#(ap\xac\xbesyt\xca\xb6(\xf9\xde\xe7\x82\v\xad\x9c\xf2\xd7+\x9bCN:?\xfd\xedf0\xb3\xb1\xf4\x8c\x15\xf9G+\x7f\x87\x91JQ\x01\x00\x00\x00\xee@\xf0Pbp\x95\x1a\xc2\xde\xad]\x80~\xf9\xbd|!\ta\xaa\xb2p\xee\x8d\xb6\n\x90wx\xd2\xc5\x00'/95, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000340)={0x980900, 0xfffffffc, @value}) dup2(r4, r4) getpid() 2.77222677s ago: executing program 3 (id=429): epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) inotify_init1(0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 2.77203893s ago: executing program 4 (id=430): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) sendmsg(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000002240), 0x0, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x12d8}, 0x801) 2.406501419s ago: executing program 4 (id=431): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000740)=[{0x0, 0x6011, 0x0, 0x0}, {0xd, 0x1001, 0x0, 0x0}], 0x2}) 1.736080067s ago: executing program 1 (id=432): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.572056149s ago: executing program 2 (id=433): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e40000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000509000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x84) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2218, 0x7521, 0x16, 0x0, 0x0) 333.698536ms ago: executing program 1 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 0s ago: executing program 3 (id=435): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="5ce5f722afde7c1d564116cfdc3876cba258ffe95384551a7d54788d7e4f7a6d17f45eb393996e49971a183420ce2be1a6a6385e7ff9b00e9aa2c12e883d3dd3e64e9f305e3fbabd3da08364d14ae3da53009fb2a744d95edfb309e4eb979d5239bbae94ab63d70d00f49df4c763920ab0503466605e1fca2f5a753d1e024a0102cdf645249abeedaf00ee4f4b8accdcb57c1faaea57b28407db60593d5033e8303bb193b6630f5bd972e7c452b1154f7fc20079eeb1831417459c961b329b9e2ec1dc16285e1a5ddddcb919ed5ffbf9cb114610c1444c7702eaba6312a6bc852185980ca26d4003cac3f68741df5558d7a617442a0bbc02f36bd6236394b062699d0f7b74b8ef55f15a8c182138546b92cd4e7e06b46f0578f8a21c3d2aa4c521751bc211f852d9df55ea1edabbf95d90b9894ea685cfb7879b68ee5ff3690c5b49a6c987d50599b7cbca7a26a0be2bad008f1d5219c406c32af4c53bf600c4fdee16bf60c0a31238d9ccf549f1997b4fd501d4ab8c9cb0f9082312abfc64ea8a516fffed538c4f61c5f73bc12ebdf60e47f95264ae74dcafc4bca9b41e79272ca821558919051bf4265e23072557ed13f5b58aabd8e5704c010e8b4341f611db9a9d192bb0c4ed07853a2dd8380d0a18b795e9967ce67e71142045edfa787e8a5dd9471516b7badfe684e1bf334df849a0c548c46d847a2164ee4e8f41e186560750cd3f4250be48595a9e5cd05e28f1b6c87d03cf03022378a51fcaf450dcc6432b69ad389ac4fc57bb7325d1e5594a4adf393d93f8d538a12212e2c0188aebbe1eb52a84b2b5b3d823868736cddc3245b9d4861f87d10769f5c942f4a31b11a5233ffbcf371b48d9f9d1fdb1c2a31dfdd86a43b6db2067b0674a45c45eb070ad89946e19d633ca123c43e1d7dd0a90c3afeef99e6127f222f48079fe01a444ae7757911e6cb27c33288ef498f8cd28cc5bc99a6378e5cefd0a49bba57891a9c28960ed82e5e665e9f6d5efd54ca6620f01fd784a7bf4487dc35930233a0fd80efdb9835469967e60636bd0b9d62efba907c39ec79abf95403fc231f31c7d34fa347cabd3c85eec08284000a491604856813f7fc3576803e5f076d0f76f8ce9cecdf1db1d2ce0dfdd91937fc6ee1bed0d54ecaef9b09caeb7bace1ae15707dfe25782a67d97c2992f2964f13718ef31020348c0e786a52089fc871a3799377942c02d8c7574792b93821602975f35e8602429f36ad5af13eaf637fba276e31839bfe963958fbb7651cf41063f21ef6afafc301a3ed05dce33019b364ae43953378d36c3fe3719f3bc9d1b20372aaea4d4cbca71552530dd71f86384f55df6bb3f8cbb893d76b0be9af3533a5420c867ab9734ed8932dfef88fca2d253c0d7f8d10fef500599dcb940b98487ee194857d1606268f831195a3b0a188949e103d61cff91dda3e28fe5f46347e788e13072e984df559144145ffb946c82f6b66cfbe670acef44b15fed3e13c9afdd0187447eb7646dc29b9ef400227e8df8447879c654690366b38f8332987a0167d9a0a7a52a1cef2bf7b827877db8a5d3be6ff782d0438b11a5cfff7a28585779608aee42bfc3fd907898f2d1b34d0b5273267913c9d1628e2ed107cf5e1b08e1fbc12ef872fd7d5b6bc85d9964b2021fc90cad88af27b5ccf38435f2b988d20426167e0d0b13554bcf3f83e885e00fc3523b54c714c799a8706d09d643f61547987bf493a9cf72655edd6125e5391899059176f040064ec4bdfdf12bccdd79b05d519ba8bf088db22c8bfeaec0328288925ef7cf29f281d5aaae4c82c9feb1821609cf32e699f55589b18def3e1eec60198bf2fb4a72623a78a9fe56d08342ce9d187cfce3e9f76b38f9dcb09743ece9edd99641383bb9d7581aff586cf23863264022818af2309d2549cfc3f5c96d1ee50d9bdb22d6f0b889e4c150c77d5d373307c579c14f06e279a9b4eff1f850c7054958bb349be02970587583643313f96e6033cd0078cb122bdc88c29d78fc60e8dba3867b197a151e04f786fd56e91a0ffa0fb1d1700f3b72140e3179d4c06c3ba0583e3a9889cac4fad206ff87776ff93b9c78f108316e588458000e3e988c2ab1b4b47d0c650120d52f3067ec783a886f8b72205a441f218b30f2c702285de9b18828de8306c5cc20489cc9e169ad373732c3999a47a605871f45e64ef30e79d2485bed70d76c05474c814379730d2880368a3038fb95196731faf8a2d602a695e98bec34ee9147f23a95351f31063244abf7a3a033ebf1b2560971f63c1966fd5d21126795132d0a3e330bdc524f4e57f720bb776834cce9df55bc497413a32fed3626b194b84266e7c7b9a0d6524e49c81020a25e7cc865589802f12b5872e727873603de7fa2af0f203c9fe0d6019080cea26a4472cd468b753fa329a789067ce0f45c81b40b718f3689d14d20f72ae3180237280163b7cc85530adaeb96724e664a53965f405f53b61b1720944d59aa27b1fb68d0c97d6f94e2690b414636f73a9ad52738a4567ee97a9a074f7467bf943c34ced6044f08cd7cd9a5bce98cff478a3343b7140f5e623bfc958c896d66f22b60d53649666d32ba5c12789e9f7176907ffcb8920b93fdd771523453413da99379e61b1c46a0fac8b8a8c4642913d4e92475de993d35200822795322362f43bb08bd1fc5bbfa7c52f83d6cda415342921db1e0ddca3fafd8fe18122b202bd01f1d1cccb21f177f0aa589c42ce58b014bd979b696c7bec58b3a5552989468b27a67a104c9727204eaaabdc6e49c6ba2a59222ce568f9653f39cdb5dae4f7f3e30fb3ffb5ebf61802fda98526a50e517b4e3619959d93a30b96704484cc93f4ede1565c23cc821f12f1877086ff1df25402c1087d5c0046deacc841b3c56e7c8aba911994cb388f8bd3a0643efcca6f92cc5ff93d1d6560855f4489ef78505f04fbba29b3c6c0f6ca1d388c03d3e21e3ff9061f60c7997d41e32969ae72a1292d1d59f1d44c2fd5a0000ce3ce6db6a1c2c993eb33b65e26adc3265dffb97edad6e30cb7a66b8821c6efc31f2256b921db39374c266123c3ef6c50566ed10cb847a8eb2cb480fc53752af00bfa715ab17040dae63beecb44d9e3cacbb08d7dc2ea17fc46a69ecd130bbc754bc4ff5b67b1a107bce0f07a67ee13df90c1edbbd26190dc7efb736e4529c67af7e8c9c86a6efc4b3826246871a20062ce79c336006b9125f2affb2723d22e4bf762f73517551bd9508714ce95e9110ee7898efbf818f859edecd6036431114740e21b936db252d5e1c0bdbe912c90b5afe6dd3e5a83155c6634a9d5ca9132fdfde1146eb4f43e51be2fa90232a83c267d619e765d2df67612b747b0d7a3d2a73ddd0df65ac67f80d4474c3ac77f5084f43a3a570a651fa6f420243335f4481ee4e6cfade77e1b1e8df89c51bbd180488bb5f8b5dbd7d89c9be29d344f69a083ea4055e875c04774745d6db0d9da9a5e45300e5be3e91eb28cbaa5fe77d05470011e51cabc553165e5ea89f0dd953341a77f27f397184d72f40890984f8761fa9d44d711e4f44cbeea4baf6e6bd50b579db9eb86ca5c30b9066a179c691c0aaca58cc2734ace033c8f6f1bd77fd787736580b9825cbddf3c15e7be451d4084fd6d21504926514b253f56d63b329e0ec71235da1f767d76528bddc6c5b19ec625dc44e53ea998b92ef203c85cd161017782ba85194ca65a9a758ab1c825243fbcad6c7f90ca6feefee36ec78e8f847c245b033b8a81056799259f7fcbb6ab2fc4b3e0f4a9f9d6b518d4019594c89538d20e6d471eb2e33834d244b9832bd91a1c4c6f9806f5c4edf7fd538c1a8622831a325ce17f05831a4958b07d4360e9d78e2ca2f6a02ead8cf9e64308ccac3af6a26fba9d2ca1af61e91c5172abb7bd6842640e2849cec05f89a9552c6487abe7c8697e418f699def69737b37f2e386c517421f04ad071b3726f4f5256c665ce6c65d330a956d52ba59e32e3c3ee33c4cc33864dc11340db58c2d06621623311025bf4aed22bab73dba20a2c51b550918f6afebfe347e62b8be78a0363867c1f1849faf8af59a4abebbceed3afc2effad08ea79ffac6e687fab119a5957a1363317363c6877a9c2c9dcdbc9722bcf90cbbd067696a94ce3db5969d35e10e84750dfab911f5f2d0f232b4d8de76025fb8326c322cbfc02e134f6647b56ec3b67ff877deae5f534fc4af0af351453be68d9c0e740533c458503fe8094eb44b2c16ecbb856fa01053e44812a1a763ec0e459eb993f6884aabccdffd1a8a33e8d3805f4086cc40421a75ceb7c36996bce383fc208bf56b75fa10253b6e13c11dd7de50a57507ae89615cdc3d19ae3ad3ccacce7e4af0db6fa9eb890346d1f09d4167df432505863397170b984bdaeb19d853bad6a866cd216f77627f5c01120f06060b6b09b62b890bf2bcf18904c9f54726ea7116222c5b39d774e1aeac4aac3b6731289a40c5c6a4da49582cfdf76982633a04886858ed8f4f7f933b1f4b4b9ce67ede2d0960d26b336572720a91fafbe6d3d2490cfc8e7e63e153f15dab8c1377315e1483c18926d8bba7126437c106b14acf3fd7bb06523eb3e6f66b393e82a8d24c422cad441bd2e399df06091ffe28622bcbd00f3d7ca572892cfaf3ec3f9b66858d04e1b67d2f190448b3bdf07974442539073b9d90f9f4a4ef8412f9e4142622efa3e6c3a69fa5b043424acfba50c01bd5df09986131fb406ea678fe8336d3ca271dbaf665c77c4f1a718c6c73c68e1f26aaa1733890b1a0eb112365d754d951bbc15c66ff650e9933dc304b7c577b2c5b53869c3c7d610b44dfcb2fc3b48cbda1c0780186de75a6c4719a7d71079ab7765b5305a2fc9c1abf4e5f2a7a85be2eb35a9304606af18abf8cd59cdc2c507c9d115147fdf61bf076d6900d1a1330cecaf865a03a6a20d026a0209b87e305d9fd0f4aa811208ad44da7de4a243825ae96c7525832f00c6f7e1828334a3e783ab5adc07b81d06880cec1158e940b231b3dc0c2df2faf594a67a2fd53a5720798b14cc510cacc9560b9b777747072ec23d4995a8a614003e8f635c0f88681239a2722683f14e587affff88e76e5a60b468b75f05d7caa439ce8d292874321ef66c0b06765c245c597d94d595fecd20615eb66ecbce90747750a82ce06e9d37564472636577624a17dacf5f90829cdfdf03409dce8f919bb7bba7eb297db9232d7ad7d2f22ed10e2bc78b50fdbe5504bc0bcfc8eeb1cad95e7f5aa67387d355b6795807c027cc2ea4e8cd19cdba3e7975a32c99b5c3ab9e7a4f440cbd834048547f0f6539f77ae4bcf7c704d5b02b80ba019c2d5ee825b79b7d2441161ae5f3dae16efb4e1a7b283478ec964c519c81ca543167f2bafe743db8a5fbb107568dd6c27394f414211024ba7132f10cad7d01c1b73d6ebe88574a8c5f0797d26ba412bfb8f9f", 0xf20}], 0x1}, 0x4040000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) kernel console output (not intermixed with test programs): [ 94.342803][ T1240] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 99.665169][ T5573] cgroup: Unknown subsys name 'net' [ 99.908346][ T5573] cgroup: Unknown subsys name 'cpuset' [ 99.971069][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.014490][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.341127][ T4900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.407218][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.433598][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.435358][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.436152][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.443879][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.467257][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.468259][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.497146][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.497834][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.524070][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.529307][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.535496][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.542439][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.560517][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.565607][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.566989][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.568593][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.569127][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.586707][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.587617][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.608591][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.616091][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.650403][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.667174][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.771318][ T5601] Bluetooth: hci4: command tx timeout [ 107.771451][ T5601] Bluetooth: hci3: command tx timeout [ 107.771991][ T4900] Bluetooth: hci2: command tx timeout [ 107.850311][ T5598] Bluetooth: hci0: command tx timeout [ 107.850515][ T4900] Bluetooth: hci1: command tx timeout [ 108.604152][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.605362][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.605524][ T5590] bridge_slave_0: entered allmulticast mode [ 108.607735][ T5590] bridge_slave_0: entered promiscuous mode [ 108.648611][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.648732][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.649096][ T5591] bridge_slave_0: entered allmulticast mode [ 108.660611][ T5591] bridge_slave_0: entered promiscuous mode [ 108.697305][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.697519][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.697880][ T5594] bridge_slave_0: entered allmulticast mode [ 108.699736][ T5594] bridge_slave_0: entered promiscuous mode [ 108.718833][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.719199][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.731557][ T5590] bridge_slave_1: entered allmulticast mode [ 108.738995][ T5590] bridge_slave_1: entered promiscuous mode [ 108.767446][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.767568][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.767690][ T5591] bridge_slave_1: entered allmulticast mode [ 108.769628][ T5591] bridge_slave_1: entered promiscuous mode [ 108.811979][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.812116][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.812304][ T5594] bridge_slave_1: entered allmulticast mode [ 108.814162][ T5594] bridge_slave_1: entered promiscuous mode [ 108.884978][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.885098][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.885331][ T5592] bridge_slave_0: entered allmulticast mode [ 108.887368][ T5592] bridge_slave_0: entered promiscuous mode [ 108.946202][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.946336][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.946859][ T5593] bridge_slave_0: entered allmulticast mode [ 108.949062][ T5593] bridge_slave_0: entered promiscuous mode [ 108.989565][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.989690][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.989861][ T5592] bridge_slave_1: entered allmulticast mode [ 109.002492][ T5592] bridge_slave_1: entered promiscuous mode [ 109.035215][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.035517][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.035681][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.035858][ T5593] bridge_slave_1: entered allmulticast mode [ 109.038318][ T5593] bridge_slave_1: entered promiscuous mode [ 109.058091][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.103646][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.106626][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.140842][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.166612][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.226498][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.271550][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.298670][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.324121][ T5590] team0: Port device team_slave_0 added [ 109.327119][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.329139][ T5591] team0: Port device team_slave_0 added [ 109.365085][ T5594] team0: Port device team_slave_0 added [ 109.368165][ T5590] team0: Port device team_slave_1 added [ 109.402665][ T5591] team0: Port device team_slave_1 added [ 109.427551][ T5594] team0: Port device team_slave_1 added [ 109.477939][ T5592] team0: Port device team_slave_0 added [ 109.515293][ T5593] team0: Port device team_slave_0 added [ 109.538188][ T5592] team0: Port device team_slave_1 added [ 109.559870][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.559890][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.559909][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.597773][ T5593] team0: Port device team_slave_1 added [ 109.602798][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.602840][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.602943][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.660917][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.660932][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.660952][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.663307][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.663324][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.663353][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.758053][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.758080][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.758120][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.808176][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.808196][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.808224][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.850337][ T4900] Bluetooth: hci2: command tx timeout [ 109.850378][ T4900] Bluetooth: hci3: command tx timeout [ 109.850412][ T4900] Bluetooth: hci4: command tx timeout [ 109.892028][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.892043][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.892062][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.930654][ T5598] Bluetooth: hci1: command tx timeout [ 109.930690][ T5598] Bluetooth: hci0: command tx timeout [ 109.952306][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.952358][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.952439][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.981316][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.981378][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.981469][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.475971][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.475991][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.476012][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.674791][ T5590] hsr_slave_0: entered promiscuous mode [ 110.675951][ T5590] hsr_slave_1: entered promiscuous mode [ 110.694440][ T5591] hsr_slave_0: entered promiscuous mode [ 110.695426][ T5591] hsr_slave_1: entered promiscuous mode [ 110.696372][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 110.696467][ T5591] Cannot create hsr debugfs directory [ 110.737995][ T5594] hsr_slave_0: entered promiscuous mode [ 110.739132][ T5594] hsr_slave_1: entered promiscuous mode [ 110.739853][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 110.739873][ T5594] Cannot create hsr debugfs directory [ 110.821345][ T5592] hsr_slave_0: entered promiscuous mode [ 110.822617][ T5592] hsr_slave_1: entered promiscuous mode [ 110.825780][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 110.825804][ T5592] Cannot create hsr debugfs directory [ 110.893214][ T5593] hsr_slave_0: entered promiscuous mode [ 110.894185][ T5593] hsr_slave_1: entered promiscuous mode [ 110.894867][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 110.894888][ T5593] Cannot create hsr debugfs directory [ 111.940981][ T4900] Bluetooth: hci4: command tx timeout [ 111.941024][ T4900] Bluetooth: hci3: command tx timeout [ 111.941047][ T4900] Bluetooth: hci2: command tx timeout [ 111.995567][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.010689][ T5598] Bluetooth: hci0: command tx timeout [ 112.010737][ T5598] Bluetooth: hci1: command tx timeout [ 112.045143][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.060432][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.105627][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.118611][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.146689][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.175061][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.204961][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.362378][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.407486][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.415935][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.439510][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.455945][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.494928][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.531756][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.564247][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.709460][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.736050][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.750644][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.773618][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.777431][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.826170][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.857401][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.884037][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.045488][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.083684][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.089521][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.137242][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.162937][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.194529][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.252583][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.283721][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.401299][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.508640][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.546109][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.560896][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.604589][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.613001][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.643712][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.665235][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.715773][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.752114][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.807724][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.808191][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.863691][ T1459] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.863833][ T1459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.870086][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.010533][ T4900] Bluetooth: hci2: command tx timeout [ 114.010840][ T5601] Bluetooth: hci4: command tx timeout [ 114.010892][ T5598] Bluetooth: hci3: command tx timeout [ 114.052402][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.091963][ T4900] Bluetooth: hci1: command tx timeout [ 114.092021][ T4900] Bluetooth: hci0: command tx timeout [ 114.098286][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.133656][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.133758][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.193134][ T2178] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.193363][ T2178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.263070][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.316652][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.356895][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.357137][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.442434][ T1459] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.442613][ T1459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.515734][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.565175][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.623159][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.623348][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.688694][ T1459] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.688849][ T1459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.773553][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.857516][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.880712][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.979123][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.979304][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.682726][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.056306][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.615455][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.673456][ T5594] veth0_vlan: entered promiscuous mode [ 116.787011][ T5594] veth1_vlan: entered promiscuous mode [ 116.958769][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.024047][ T5590] veth0_vlan: entered promiscuous mode [ 117.048124][ T5591] veth0_vlan: entered promiscuous mode [ 117.071446][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.095806][ T5590] veth1_vlan: entered promiscuous mode [ 117.122317][ T5591] veth1_vlan: entered promiscuous mode [ 117.128347][ T5594] veth0_macvtap: entered promiscuous mode [ 117.166028][ T5594] veth1_macvtap: entered promiscuous mode [ 117.264765][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.286091][ T5592] veth0_vlan: entered promiscuous mode [ 117.314754][ T5590] veth0_macvtap: entered promiscuous mode [ 117.327100][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.356744][ T5591] veth0_macvtap: entered promiscuous mode [ 117.367512][ T5590] veth1_macvtap: entered promiscuous mode [ 117.400308][ T5592] veth1_vlan: entered promiscuous mode [ 117.403517][ T5593] veth0_vlan: entered promiscuous mode [ 117.404453][ T5591] veth1_macvtap: entered promiscuous mode [ 117.526292][ T5593] veth1_vlan: entered promiscuous mode [ 117.556842][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.647007][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.683173][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.825085][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.931172][ T5592] veth0_macvtap: entered promiscuous mode [ 117.985923][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.985954][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.047185][ T5592] veth1_macvtap: entered promiscuous mode [ 118.222987][ T5593] veth0_macvtap: entered promiscuous mode [ 118.408335][ T5593] veth1_macvtap: entered promiscuous mode [ 118.442325][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.442342][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.822898][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.889949][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.889972][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.910967][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.014677][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.104839][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.104863][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.133743][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.197005][ T5594] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 119.318811][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.318835][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.783849][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.783872][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.806600][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.394568][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.394591][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.452884][ T996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.455790][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.472100][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.611256][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.611790][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.612004][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.612208][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.612405][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.612601][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.779577][ T5790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6'. [ 120.899107][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.899131][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.216066][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.216092][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.292249][ T5799] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 121.413080][ T5803] netlink: 'syz.4.9': attribute type 1 has an invalid length. [ 121.432125][ T5796] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 121.851838][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.851860][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.875747][ T49] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.000346][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.000399][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.000441][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.000489][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.000529][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.000569][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.000607][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.000647][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.000686][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.000725][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.190274][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 122.191681][ T49] usb 4-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 122.242627][ T49] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 122.242659][ T49] usb 4-1: config 0 has no interface number 0 [ 122.242695][ T49] usb 4-1: config 0 interface 66 has no altsetting 0 [ 122.277506][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.277538][ T49] usb 4-1: Product: syz [ 122.277555][ T49] usb 4-1: Manufacturer: syz [ 122.277570][ T49] usb 4-1: SerialNumber: syz [ 122.388402][ T49] usb 4-1: config 0 descriptor?? [ 123.437800][ T49] usb 4-1: selecting invalid altsetting 3 [ 123.437836][ T49] comedi comedi5: could not set alternate setting 3 in high speed [ 123.437854][ T49] usbduxsigma 4-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 123.703941][ T49] usbduxsigma 4-1:0.66: probe with driver usbduxsigma failed with error -22 [ 123.845619][ T49] usb 4-1: USB disconnect, device number 2 [ 124.355598][ T5836] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15'. [ 124.828336][ T5844] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 125.192239][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.400389][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 126.408639][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 126.571244][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 126.571292][ T31] usb 4-1: config 179 has no interface number 0 [ 126.571340][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 126.571388][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 126.571432][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.571460][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 126.571514][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 126.571561][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.172505][ T31] usb 4-1: can't set config #179, error -71 [ 128.294673][ T31] usb 4-1: USB disconnect, device number 3 [ 129.042175][ T5868] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 129.253914][ T5878] comedi comedi3: pcl730: I/O base address not correctly aligned [ 129.340304][ T5816] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.347881][ T5878] overlayfs: failed to resolve './file0': -2 [ 129.510291][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 129.511918][ T5816] usb 4-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 129.513619][ T5883] netlink: 72 bytes leftover after parsing attributes in process `syz.0.28'. [ 129.513735][ T5816] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 129.513760][ T5816] usb 4-1: config 0 has no interface number 0 [ 129.513794][ T5816] usb 4-1: config 0 interface 66 has no altsetting 0 [ 129.518687][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.518716][ T5816] usb 4-1: Product: syz [ 129.518731][ T5816] usb 4-1: Manufacturer: syz [ 129.518747][ T5816] usb 4-1: SerialNumber: syz [ 129.612190][ T5816] usb 4-1: config 0 descriptor?? [ 130.219051][ T5816] usb 4-1: selecting invalid altsetting 3 [ 130.219082][ T5816] comedi comedi5: could not set alternate setting 3 in high speed [ 130.219099][ T5816] usbduxsigma 4-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 130.286421][ T5816] usbduxsigma 4-1:0.66: probe with driver usbduxsigma failed with error -22 [ 130.307788][ T5894] binder: 5890:5894 ioctl c0306201 0 returned -14 [ 130.321843][ T5816] usb 4-1: USB disconnect, device number 4 [ 130.341844][ T5895] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 131.084003][ T5909] netlink: 72 bytes leftover after parsing attributes in process `syz.0.39'. [ 131.421710][ T5914] comedi comedi3: pcl730: I/O base address not correctly aligned [ 131.472823][ T5914] overlayfs: failed to resolve './file0': -2 [ 132.787652][ T5944] binder: 5934:5944 ioctl c0306201 0 returned -14 [ 132.892662][ T5937] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 133.207538][ T5948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53'. [ 133.402824][ T5947] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.620265][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 133.622102][ T5947] usb 1-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 133.624901][ T5947] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 133.624928][ T5947] usb 1-1: config 0 has no interface number 0 [ 133.624963][ T5947] usb 1-1: config 0 interface 66 has no altsetting 0 [ 133.640421][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.640532][ T5947] usb 1-1: Product: syz [ 133.640577][ T5947] usb 1-1: Manufacturer: syz [ 133.640619][ T5947] usb 1-1: SerialNumber: syz [ 133.921343][ T5947] usb 1-1: config 0 descriptor?? [ 134.364287][ T5947] usb 1-1: selecting invalid altsetting 3 [ 134.364316][ T5947] comedi comedi5: could not set alternate setting 3 in high speed [ 134.364334][ T5947] usbduxsigma 1-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 134.457884][ T5947] usbduxsigma 1-1:0.66: probe with driver usbduxsigma failed with error -22 [ 134.560104][ T5947] usb 1-1: USB disconnect, device number 2 [ 135.169581][ T5979] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 135.254019][ T5985] binder: 5980:5985 ioctl c0306201 0 returned -14 [ 135.280799][ T5983] netlink: 132 bytes leftover after parsing attributes in process `syz.3.66'. [ 135.316344][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.316506][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.660357][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 136.699301][ T6023] netlink: 88 bytes leftover after parsing attributes in process `syz.0.81'. [ 136.812468][ T6026] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 136.838887][ T5816] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.851016][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.851063][ T5816] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.854714][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.854761][ T5816] usb 2-1: SerialNumber: syz [ 137.101135][ T5947] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.292629][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 137.293446][ T5947] usb 4-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 137.294945][ T5947] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 137.294972][ T5947] usb 4-1: config 0 has no interface number 0 [ 137.295006][ T5947] usb 4-1: config 0 interface 66 has no altsetting 0 [ 137.298164][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.298189][ T5947] usb 4-1: Product: syz [ 137.298206][ T5947] usb 4-1: Manufacturer: syz [ 137.298221][ T5947] usb 4-1: SerialNumber: syz [ 137.411250][ T5947] usb 4-1: config 0 descriptor?? [ 137.442018][ T5816] usb 2-1: 0:2 : does not exist [ 137.442197][ T5816] usb 2-1: unit 4 not found! [ 137.725806][ T6044] Zero length message leads to an empty skb [ 140.312735][ T5947] usb 4-1: selecting invalid altsetting 3 [ 140.312800][ T5947] comedi comedi5: could not set alternate setting 3 in high speed [ 140.312859][ T5947] usbduxsigma 4-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 140.425919][ T5947] usbduxsigma 4-1:0.66: probe with driver usbduxsigma failed with error -22 [ 140.452646][ T5947] usb 4-1: USB disconnect, device number 5 [ 140.900405][ T6055] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 140.998682][ T5816] usb 2-1: USB disconnect, device number 2 [ 141.937022][ T6084] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 141.983711][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.522436][ T5816] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.623039][ T6094] comedi comedi3: pcl730: I/O base address not correctly aligned [ 142.760631][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 142.762589][ T5816] usb 2-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 142.764886][ T5816] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 142.764915][ T5816] usb 2-1: config 0 has no interface number 0 [ 142.764950][ T5816] usb 2-1: config 0 interface 66 has no altsetting 0 [ 142.768623][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.768661][ T5816] usb 2-1: Product: syz [ 142.768678][ T5816] usb 2-1: Manufacturer: syz [ 142.768694][ T5816] usb 2-1: SerialNumber: syz [ 142.774022][ T6096] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 142.774096][ T6096] CIFS mount error: No usable UNC path provided in device string! [ 142.774096][ T6096] [ 142.774745][ T6096] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 143.473182][ T5816] usb 2-1: config 0 descriptor?? [ 144.009753][ T5816] usb 2-1: selecting invalid altsetting 3 [ 144.009804][ T5816] comedi comedi5: could not set alternate setting 3 in high speed [ 144.009827][ T5816] usbduxsigma 2-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 144.048563][ T5816] usbduxsigma 2-1:0.66: probe with driver usbduxsigma failed with error -22 [ 144.063597][ T5816] usb 2-1: USB disconnect, device number 3 [ 144.788608][ T6128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.121'. [ 144.974689][ T6130] comedi comedi3: pcl730: I/O base address not correctly aligned [ 146.208386][ T6160] netlink: 132 bytes leftover after parsing attributes in process `syz.4.133'. [ 146.637004][ T6166] comedi comedi3: pcl730: I/O base address not correctly aligned [ 146.793398][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 147.066377][ T5816] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 147.083780][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.083807][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.083836][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.143312][ T5816] usb 5-1: config 0 descriptor?? [ 147.787869][ T5816] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.787922][ T5816] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.787951][ T5816] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.787980][ T5816] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.788009][ T5816] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.788036][ T5816] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.788073][ T5816] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 148.038142][ T5816] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 149.173179][ T6190] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 149.484246][ T6195] netlink: 132 bytes leftover after parsing attributes in process `syz.0.144'. [ 150.848101][ T5816] cp2112 0003:10C4:EA90.0001: error requesting version [ 150.910361][ T5816] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 150.932350][ T5816] usb 5-1: USB disconnect, device number 2 [ 151.136311][ T6205] blktrace: Concurrent blktraces are not allowed on loop4 [ 151.343264][ T6220] comedi comedi3: pcl730: I/O base address not correctly aligned [ 151.821182][ T6221] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 152.711767][ T6223] bond1: (slave gretap1): making interface the new active one [ 152.842811][ T6223] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 153.074927][ T6227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.156'. [ 153.696107][ T6232] kernel profiling enabled (shift: 5) [ 153.776567][ T6223] syz.3.153 (6223) used greatest stack depth: 19296 bytes left [ 155.990671][ T6258] gfs2: error -5 reading superblock [ 155.992382][ T6261] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 156.210281][ T31] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 156.267994][ T6264] FAULT_INJECTION: forcing a failure. [ 156.267994][ T6264] name failslab, interval 1, probability 0, space 0, times 1 [ 156.268053][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.4.167 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.268151][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.268175][ T6264] Call Trace: [ 156.268192][ T6264] [ 156.268220][ T6264] dump_stack_lvl+0xe8/0x150 [ 156.268377][ T6264] should_fail_ex+0x46b/0x600 [ 156.268417][ T6264] should_failslab+0xa8/0x100 [ 156.268458][ T6264] kmem_cache_alloc_node_noprof+0xac/0x660 [ 156.268491][ T6264] ? preload_this_cpu_lock+0x49/0xc0 [ 156.268552][ T6264] ? preload_this_cpu_lock+0x49/0xc0 [ 156.268587][ T6264] ? alloc_vmap_area+0x21c/0x1420 [ 156.268619][ T6264] preload_this_cpu_lock+0x49/0xc0 [ 156.268655][ T6264] alloc_vmap_area+0x3c3/0x1420 [ 156.268700][ T6264] ? __pfx_alloc_vmap_area+0x10/0x10 [ 156.268732][ T6264] ? __kmalloc_cache_node_noprof+0x461/0x670 [ 156.268772][ T6264] ? __get_vm_area_node+0x155/0x2f0 [ 156.268807][ T6264] __get_vm_area_node+0x200/0x2f0 [ 156.268852][ T6264] ? relay_open_buf+0x3b0/0xda0 [ 156.268876][ T6264] vmap+0x158/0x300 [ 156.268903][ T6264] ? relay_open_buf+0x3b0/0xda0 [ 156.268932][ T6264] relay_open_buf+0x3b0/0xda0 [ 156.268965][ T6264] ? relay_open+0x3a4/0x900 [ 156.268993][ T6264] relay_open+0x413/0x900 [ 156.269024][ T6264] blk_trace_setup_prepare+0x425/0x5a0 [ 156.269073][ T6264] blk_trace_setup+0x2f5/0x520 [ 156.269187][ T6264] ? __pfx_blk_trace_setup+0x10/0x10 [ 156.269245][ T6264] ? snprintf+0xe8/0x140 [ 156.269299][ T6264] blk_trace_ioctl+0x37f/0x910 [ 156.269342][ T6264] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 156.269381][ T6264] ? kasan_quarantine_put+0xbb/0x1f0 [ 156.269423][ T6264] ? tomoyo_path_number_perm+0x219/0x5f0 [ 156.269455][ T6264] ? tomoyo_path_number_perm+0x219/0x5f0 [ 156.269488][ T6264] ? do_vfs_ioctl+0x1184/0x1550 [ 156.269525][ T6264] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 156.269558][ T6264] ? __pfx_smack_log+0x10/0x10 [ 156.269597][ T6264] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.269633][ T6264] ? smk_tskacc+0x2fb/0x370 [ 156.269677][ T6264] ? smack_file_ioctl+0x2c4/0x370 [ 156.269706][ T6264] ? __pfx_smack_file_ioctl+0x10/0x10 [ 156.269741][ T6264] blkdev_ioctl+0x4c4/0x750 [ 156.269772][ T6264] ? __pfx_blkdev_ioctl+0x10/0x10 [ 156.269796][ T6264] ? __fget_files+0x2a/0x420 [ 156.269833][ T6264] ? bpf_lsm_file_ioctl+0x9/0x20 [ 156.269861][ T6264] ? __pfx_blkdev_ioctl+0x10/0x10 [ 156.269887][ T6264] __se_sys_ioctl+0xff/0x170 [ 156.269922][ T6264] do_syscall_64+0x166/0x520 [ 156.269955][ T6264] ? trace_irq_disable+0x3b/0x140 [ 156.269985][ T6264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.270011][ T6264] ? clear_bhb_loop+0x70/0xc0 [ 156.270041][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.270065][ T6264] RIP: 0033:0x7f25f9d3e159 [ 156.270101][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.270126][ T6264] RSP: 002b:00007f25f7f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.270163][ T6264] RAX: ffffffffffffffda RBX: 00007f25f9fc5fa0 RCX: 00007f25f9d3e159 [ 156.270181][ T6264] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003 [ 156.270197][ T6264] RBP: 00007f25f9dd503b R08: 0000000000000000 R09: 0000000000000000 [ 156.270212][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.270226][ T6264] R13: 00007f25f9fc6038 R14: 00007f25f9fc5fa0 R15: 00007fff535a6998 [ 156.270264][ T6264] [ 156.726892][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.741951][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 156.742014][ T31] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 156.778226][ T31] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 156.778257][ T31] usb 1-1: config 0 has no interface number 0 [ 156.778308][ T31] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 156.778339][ T31] usb 1-1: config 0 interface 88 has no altsetting 0 [ 156.861196][ T31] usb 1-1: language id specifier not provided by device, defaulting to English [ 156.913473][ T31] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 156.913505][ T31] usb 1-1: Product: syz [ 157.007730][ T31] usb 1-1: config 0 descriptor?? [ 157.036933][ T6259] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.926037][ T6269] netlink: 88 bytes leftover after parsing attributes in process `syz.4.169'. [ 158.465327][ T31] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input5 [ 159.257665][ T6277] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 160.277243][ T31] usb 1-1: USB disconnect, device number 3 [ 160.277332][ C1] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 161.185329][ T6274] bond1: (slave gretap1): making interface the new active one [ 161.687657][ T6274] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 162.025036][ T5850] udevd[5850]: Error opening device "/dev/input/event4": No such file or directory [ 162.025175][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 162.025301][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 163.745184][ T6306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.181'. [ 165.048043][ T6312] netlink: 88 bytes leftover after parsing attributes in process `syz.0.183'. [ 165.560309][ T5602] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.710452][ T5602] usb 5-1: Using ep0 maxpacket: 8 [ 165.711357][ T5602] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.712920][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.712970][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.783541][ T5602] usb 5-1: config 0 descriptor?? [ 166.194033][ T5602] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 166.559516][ T5709] usb 5-1: USB disconnect, device number 3 [ 167.278202][ T6338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.193'. [ 169.613880][ T6345] netlink: 88 bytes leftover after parsing attributes in process `syz.2.196'. [ 169.820491][ T6354] netlink: 'syz.4.199': attribute type 1 has an invalid length. [ 170.533053][ T6359] gfs2: error -5 reading superblock [ 171.895791][ T6349] bond2: (slave gretap1): making interface the new active one [ 172.006881][ T6349] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 172.223578][ T6367] comedi comedi3: pcl730: I/O base address not correctly aligned [ 172.294500][ T6373] binder: 6369:6373 ioctl c0306201 0 returned -14 [ 172.652612][ T6382] netlink: 88 bytes leftover after parsing attributes in process `syz.3.210'. [ 176.115286][ T6405] tmpfs: Bad value for 'mpol' [ 177.086742][ T6414] netlink: 88 bytes leftover after parsing attributes in process `syz.2.221'. [ 177.413878][ T6413] comedi comedi3: pcl730: I/O base address not correctly aligned [ 178.791281][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 178.791467][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.131036][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.174244][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 179.305067][ T6442] tmpfs: Bad value for 'mpol' [ 179.341864][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 179.344446][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 179.347363][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.347397][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.347424][ T9] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 179.347453][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 179.347482][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 179.347508][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.347553][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.856294][ T9] usb 2-1: usb_control_msg returned -32 [ 180.856379][ T9] usbtmc 2-1:16.0: can't read capabilities [ 182.135341][ T9] usb 2-1: USB disconnect, device number 4 [ 182.874960][ T6468] tmpfs: Bad value for 'mpol' [ 182.946056][ T5816] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 183.144205][ T5816] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 183.147702][ T5816] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 183.147754][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 183.147782][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 183.147825][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.028013][ T6488] lo: entered promiscuous mode [ 184.067308][ T6488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.815066][ T6502] tmpfs: Bad value for 'mpol' [ 186.184027][ T5816] usb 4-1: config 0 descriptor?? [ 186.204274][ T5816] usb 4-1: can't set config #0, error -71 [ 186.217623][ T5816] usb 4-1: USB disconnect, device number 6 [ 187.869698][ T6511] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 188.071241][ T6524] lo: left promiscuous mode [ 188.210857][ T5818] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 188.400359][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 188.402092][ T5818] usb 5-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 188.428723][ T5818] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 188.428797][ T5818] usb 5-1: config 0 has no interface number 0 [ 188.428835][ T5818] usb 5-1: config 0 interface 66 has no altsetting 0 [ 188.457145][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.457245][ T5818] usb 5-1: Product: syz [ 188.457263][ T5818] usb 5-1: Manufacturer: syz [ 188.457279][ T5818] usb 5-1: SerialNumber: syz [ 188.519417][ T5818] usb 5-1: config 0 descriptor?? [ 188.818057][ T5818] usb 5-1: selecting invalid altsetting 3 [ 188.818087][ T5818] comedi comedi5: could not set alternate setting 3 in high speed [ 188.818104][ T5818] usbduxsigma 5-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 188.852679][ T5818] usbduxsigma 5-1:0.66: probe with driver usbduxsigma failed with error -22 [ 188.870072][ T5818] usb 5-1: USB disconnect, device number 4 [ 188.912805][ T6539] syzkaller1: entered allmulticast mode [ 189.460276][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 189.648214][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.655619][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 189.655737][ T31] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 189.678059][ T31] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 189.678090][ T31] usb 2-1: config 0 has no interface number 0 [ 189.678141][ T31] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 189.678172][ T31] usb 2-1: config 0 interface 88 has no altsetting 0 [ 189.757902][ T31] usb 2-1: language id specifier not provided by device, defaulting to English [ 189.806801][ T31] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 189.806836][ T31] usb 2-1: Product: syz [ 189.868042][ T31] usb 2-1: config 0 descriptor?? [ 189.878709][ T6533] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.119943][ T6533] vlan2: entered promiscuous mode [ 190.119970][ T6533] hsr0: entered promiscuous mode [ 190.147082][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 190.147176][ T6533] vlan2: entered allmulticast mode [ 190.147195][ T6533] hsr0: entered allmulticast mode [ 190.147210][ T6533] hsr_slave_0: entered allmulticast mode [ 190.147236][ T6533] hsr_slave_1: entered allmulticast mode [ 190.206935][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.209866][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.229355][ T6542] hsr_slave_0: left promiscuous mode [ 190.262810][ T6542] hsr_slave_1: left promiscuous mode [ 190.468275][ T5818] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 190.518455][ T6533] can: request_module (can-proto-0) failed. [ 190.561662][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 190.617788][ T6572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.279'. [ 190.648351][ T5818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.649764][ T5818] usb 3-1: not running at top speed; connect to a high speed hub [ 190.649805][ T5818] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 190.660816][ T5818] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 190.660842][ T5818] usb 3-1: config 0 has no interface number 0 [ 190.660896][ T5818] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 190.660925][ T5818] usb 3-1: config 0 interface 88 has no altsetting 0 [ 190.726914][ T5818] usb 3-1: language id specifier not provided by device, defaulting to English [ 190.778784][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 190.778819][ T5818] usb 3-1: Product: syz [ 190.800048][ T5818] usb 3-1: config 0 descriptor?? [ 190.819354][ T6553] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.994330][ T5818] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input6 [ 192.267441][ T6580] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 192.318665][ T31] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input7 [ 192.499159][ T5818] usb 3-1: USB disconnect, device number 2 [ 192.499197][ C1] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 192.655488][ T31] usb 2-1: USB disconnect, device number 5 [ 192.661368][ T49] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 192.910349][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 192.911100][ T49] usb 1-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 192.912384][ T49] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 192.912412][ T49] usb 1-1: config 0 has no interface number 0 [ 192.912447][ T49] usb 1-1: config 0 interface 66 has no altsetting 0 [ 192.954093][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.954170][ T49] usb 1-1: Product: syz [ 192.954212][ T49] usb 1-1: Manufacturer: syz [ 192.954264][ T49] usb 1-1: SerialNumber: syz [ 193.044913][ T5784] udevd[5784]: Error opening device "/dev/input/event4": No such file or directory [ 193.046619][ T5784] udevd[5784]: Unable to EVIOCGABS device "/dev/input/event4" [ 193.046745][ T5784] udevd[5784]: Unable to EVIOCGABS device "/dev/input/event4" [ 193.238923][ T49] usb 1-1: config 0 descriptor?? [ 193.249060][ T5854] udevd[5854]: Error opening device "/dev/input/event5": No such file or directory [ 193.249212][ T5854] udevd[5854]: Unable to EVIOCGABS device "/dev/input/event5" [ 193.249332][ T5854] udevd[5854]: Unable to EVIOCGABS device "/dev/input/event5" [ 194.632063][ T49] usb 1-1: selecting invalid altsetting 3 [ 194.632093][ T49] comedi comedi5: could not set alternate setting 3 in high speed [ 194.632128][ T49] usbduxsigma 1-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 194.752567][ T6606] syz.4.291 uses obsolete (PF_INET,SOCK_PACKET) [ 194.756259][ T49] usbduxsigma 1-1:0.66: probe with driver usbduxsigma failed with error -22 [ 194.787923][ T49] usb 1-1: USB disconnect, device number 4 [ 195.447425][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 196.563903][ T6641] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 196.744116][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.744197][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.911693][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 198.007064][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 198.236931][ T31] usb 1-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 198.309756][ T31] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 198.309788][ T31] usb 1-1: config 0 has no interface number 0 [ 198.309824][ T31] usb 1-1: config 0 interface 66 has no altsetting 0 [ 198.340421][ T49] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 198.367774][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.367805][ T31] usb 1-1: Product: syz [ 198.367822][ T31] usb 1-1: Manufacturer: syz [ 198.367838][ T31] usb 1-1: SerialNumber: syz [ 198.451358][ T31] usb 1-1: config 0 descriptor?? [ 198.509373][ T49] usb 5-1: unable to get BOS descriptor or descriptor too short [ 198.573138][ T49] usb 5-1: not running at top speed; connect to a high speed hub [ 198.649066][ T49] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 198.672936][ T49] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 198.672970][ T49] usb 5-1: config 0 has no interface number 0 [ 198.673606][ T49] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 198.673641][ T49] usb 5-1: config 0 interface 88 has no altsetting 0 [ 198.736747][ T49] usb 5-1: language id specifier not provided by device, defaulting to English [ 198.824977][ T49] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 198.825010][ T49] usb 5-1: Product: syz [ 198.866533][ T49] usb 5-1: config 0 descriptor?? [ 198.868890][ T6628] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.006247][ T31] usb 1-1: selecting invalid altsetting 3 [ 199.006313][ T31] comedi comedi5: could not set alternate setting 3 in high speed [ 199.006327][ T31] usbduxsigma 1-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 199.116103][ T31] usbduxsigma 1-1:0.66: probe with driver usbduxsigma failed with error -22 [ 199.134573][ T6674] netlink: 'syz.3.316': attribute type 2 has an invalid length. [ 199.134605][ T6674] netlink: 224 bytes leftover after parsing attributes in process `syz.3.316'. [ 199.244652][ T31] usb 1-1: USB disconnect, device number 5 [ 199.259469][ T49] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input8 [ 199.502595][ T6679] netlink: 'syz.3.316': attribute type 10 has an invalid length. [ 199.580393][ T49] usb 5-1: USB disconnect, device number 5 [ 199.580403][ C0] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 200.116576][ T6679] team0: Port device dummy0 added [ 201.528730][ T6718] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 202.921531][ T36] audit: type=1800 audit(1789097625.116:2): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.332" name="file0" dev="overlay" ino=312 res=0 errno=0 [ 202.929921][ T49] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 203.131545][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 203.167852][ T49] usb 4-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 203.185371][ T49] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 203.185400][ T49] usb 4-1: config 0 has no interface number 0 [ 203.185435][ T49] usb 4-1: config 0 interface 66 has no altsetting 0 [ 203.226672][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.226702][ T49] usb 4-1: Product: syz [ 203.226725][ T49] usb 4-1: Manufacturer: syz [ 203.226741][ T49] usb 4-1: SerialNumber: syz [ 203.324081][ T49] usb 4-1: config 0 descriptor?? [ 203.556116][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 203.645675][ T6739] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 203.652207][ T49] usb 4-1: selecting invalid altsetting 3 [ 203.652274][ T49] comedi comedi5: could not set alternate setting 3 in high speed [ 203.652318][ T49] usbduxsigma 4-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 203.761581][ T49] usbduxsigma 4-1:0.66: probe with driver usbduxsigma failed with error -22 [ 203.782896][ T49] usb 4-1: USB disconnect, device number 7 [ 203.890647][ T5947] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 204.082795][ T5947] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.083422][ T5947] usb 1-1: not running at top speed; connect to a high speed hub [ 204.083461][ T5947] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 204.085101][ T5947] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 204.085128][ T5947] usb 1-1: config 0 has no interface number 0 [ 204.085192][ T5947] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 204.085234][ T5947] usb 1-1: config 0 interface 88 has no altsetting 0 [ 204.124088][ T5947] usb 1-1: language id specifier not provided by device, defaulting to English [ 204.198758][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 204.198791][ T5947] usb 1-1: Product: syz [ 204.237017][ T5947] usb 1-1: config 0 descriptor?? [ 204.238281][ T6720] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 205.798145][ T5947] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input9 [ 205.854225][ T6749] syz.2.337 (6749) used greatest stack depth: 18816 bytes left [ 206.255798][ T5947] usb 1-1: USB disconnect, device number 6 [ 206.255881][ C1] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 206.892124][ T46] rds_connect_path_complete: Cannot transition to state UP, current state is 2 [ 207.083126][ T5850] udevd[5850]: Error opening device "/dev/input/event4": No such file or directory [ 207.083204][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 207.083251][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 207.083305][ T5850] udevd[5850]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 207.202598][ T4951] udevd[4951]: worker [5850] terminated by signal 6 (Aborted) [ 207.216172][ T4951] udevd[4951]: worker [5850] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input9/event4' [ 207.310916][ T5818] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 207.462697][ T5818] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 207.475311][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.475373][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.537625][ T5818] usb 4-1: config 0 descriptor?? [ 207.585375][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 207.983770][ T5818] pwc: recv_control_msg error -32 req 02 val 2b00 [ 208.017661][ T5818] pwc: recv_control_msg error -32 req 02 val 2700 [ 208.035126][ T5818] pwc: recv_control_msg error -32 req 02 val 2c00 [ 208.039000][ T5818] pwc: recv_control_msg error -32 req 04 val 1000 [ 208.058066][ T5818] pwc: recv_control_msg error -32 req 04 val 1300 [ 208.066789][ T5818] pwc: recv_control_msg error -32 req 04 val 1400 [ 208.220469][ T6789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.350'. [ 208.286976][ T5818] pwc: recv_control_msg error -71 req 02 val 2100 [ 208.288363][ T5818] pwc: recv_control_msg error -71 req 04 val 1500 [ 208.291166][ T5818] pwc: recv_control_msg error -71 req 02 val 2500 [ 208.313088][ T5818] pwc: recv_control_msg error -71 req 02 val 2400 [ 208.314236][ T5818] pwc: recv_control_msg error -71 req 02 val 2600 [ 208.315063][ T5818] pwc: recv_control_msg error -71 req 02 val 2900 [ 208.319215][ T5818] pwc: recv_control_msg error -71 req 02 val 2800 [ 208.348335][ T5818] pwc: recv_control_msg error -71 req 04 val 1100 [ 208.382718][ T5818] pwc: recv_control_msg error -71 req 04 val 1200 [ 208.417656][ T5818] pwc: Registered as video103. [ 208.432153][ T5818] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 208.466464][ T5818] usb 4-1: USB disconnect, device number 8 [ 209.653896][ T6808] process 'syz.3.359' launched './file2' with NULL argv: empty string added [ 210.050850][ T6820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.361'. [ 211.006094][ T6851] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 211.310278][ T5818] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 211.324080][ T5710] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 211.480234][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 211.481912][ T5818] usb 4-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 211.485734][ T5818] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 211.485761][ T5818] usb 4-1: config 0 has no interface number 0 [ 211.485795][ T5818] usb 4-1: config 0 interface 66 has no altsetting 0 [ 211.561924][ T5710] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 211.563512][ T5710] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 211.563543][ T5710] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.564185][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.564211][ T5818] usb 4-1: Product: syz [ 211.564227][ T5818] usb 4-1: Manufacturer: syz [ 211.564243][ T5818] usb 4-1: SerialNumber: syz [ 211.566525][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 211.566552][ T5710] usb 3-1: Product: syz [ 211.566569][ T5710] usb 3-1: Manufacturer: syz [ 211.566584][ T5710] usb 3-1: SerialNumber: syz [ 211.693602][ T5710] usb 3-1: config 0 descriptor?? [ 211.697417][ T6850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 211.725713][ T5710] usb 3-1: selecting invalid altsetting 0 [ 211.876835][ T5818] usb 4-1: config 0 descriptor?? [ 212.521738][ T6858] gfs2: error -5 reading superblock [ 212.946710][ T6854] syz.4.375 (6854) used greatest stack depth: 16928 bytes left [ 213.809898][ T6861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.378'. [ 213.814917][ T5818] usb 4-1: selecting invalid altsetting 3 [ 213.815008][ T5818] comedi comedi5: could not set alternate setting 3 in high speed [ 213.815270][ T5818] usbduxsigma 4-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 214.157824][ T5818] usbduxsigma 4-1:0.66: probe with driver usbduxsigma failed with error -22 [ 215.076921][ T5818] usb 4-1: USB disconnect, device number 9 [ 215.358977][ T5710] usb 3-1: USB disconnect, device number 3 [ 218.517207][ T36] audit: type=1326 audit(1789097641.456:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.4.383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f9d3e159 code=0x7ffc0000 [ 218.517271][ T36] audit: type=1326 audit(1789097641.456:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.4.383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f9d3e159 code=0x7ffc0000 [ 218.581217][ T6883] FAULT_INJECTION: forcing a failure. [ 218.581217][ T6883] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 218.581256][ T6883] CPU: 1 UID: 0 PID: 6883 Comm: syz.2.384 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.581283][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.581303][ T6883] Call Trace: [ 218.581313][ T6883] [ 218.581323][ T6883] dump_stack_lvl+0xe8/0x150 [ 218.581366][ T6883] should_fail_ex+0x46b/0x600 [ 218.581404][ T6883] _copy_to_user+0x31/0xb0 [ 218.581441][ T6883] bpf_verifier_vlog+0x3a2/0x900 [ 218.581485][ T6883] __btf_verifier_log+0xe2/0x140 [ 218.581511][ T6883] ? kasan_save_track+0x4f/0x80 [ 218.581548][ T6883] ? __pfx___btf_verifier_log+0x10/0x10 [ 218.581570][ T6883] ? do_syscall_64+0x166/0x520 [ 218.581619][ T6883] btf_verifier_log_member+0x5a8/0x800 [ 218.581654][ T6883] ? __pfx_btf_verifier_log_member+0x10/0x10 [ 218.581694][ T6883] btf_struct_resolve+0xbb7/0x12c0 [ 218.581738][ T6883] btf_resolve+0x42d/0x14a0 [ 218.581782][ T6883] btf_parse_type_sec+0xd88/0x2360 [ 218.581822][ T6883] ? btf_parse_hdr+0x1da/0x810 [ 218.581866][ T6883] ? btf_parse_hdr+0x5f2/0x810 [ 218.581918][ T6883] btf_new_fd+0x487/0xc10 [ 218.581964][ T6883] __sys_bpf+0xd2e/0xd90 [ 218.582006][ T6883] ? __pfx___sys_bpf+0x10/0x10 [ 218.582041][ T6883] ? do_futex+0x3e7/0x4e0 [ 218.582094][ T6883] ? rcu_is_watching+0x16/0xb0 [ 218.582160][ T6883] __x64_sys_bpf+0xba/0xd0 [ 218.582194][ T6883] do_syscall_64+0x166/0x520 [ 218.582224][ T6883] ? trace_irq_disable+0x3b/0x140 [ 218.582254][ T6883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.582279][ T6883] ? clear_bhb_loop+0x70/0xc0 [ 218.582313][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.582336][ T6883] RIP: 0033:0x7ffb84f9e159 [ 218.582358][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.582379][ T6883] RSP: 002b:00007ffb831f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.582404][ T6883] RAX: ffffffffffffffda RBX: 00007ffb85225fa0 RCX: 00007ffb84f9e159 [ 218.582422][ T6883] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 218.582437][ T6883] RBP: 00007ffb8503503b R08: 0000000000000000 R09: 0000000000000000 [ 218.582452][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.582466][ T6883] R13: 00007ffb85226038 R14: 00007ffb85225fa0 R15: 00007ffe4c506138 [ 218.582503][ T6883] [ 218.758864][ T36] audit: type=1326 audit(1789097641.526:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.4.383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25f9d3e159 code=0x7ffc0000 [ 218.784766][ T36] audit: type=1326 audit(1789097641.726:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.4.383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f9d3e159 code=0x7ffc0000 [ 218.802494][ T36] audit: type=1326 audit(1789097641.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.4.383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f9d3e159 code=0x7ffc0000 [ 219.122237][ T6892] netlink: 132 bytes leftover after parsing attributes in process `syz.4.390'. [ 220.346701][ T6901] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 222.022450][ T6914] 9p: Bad value for 'wfdno' [ 222.080427][ T49] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 222.283569][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 222.283646][ T6918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.395'. [ 222.395301][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 224.214466][ T49] usb 2-1: device descriptor read/all, error -71 [ 224.563253][ T6924] FAULT_INJECTION: forcing a failure. [ 224.563253][ T6924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.563282][ T6924] CPU: 1 UID: 0 PID: 6924 Comm: syz.1.398 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.563300][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.563311][ T6924] Call Trace: [ 224.563317][ T6924] [ 224.563325][ T6924] dump_stack_lvl+0xe8/0x150 [ 224.563357][ T6924] should_fail_ex+0x46b/0x600 [ 224.563383][ T6924] _copy_to_user+0x31/0xb0 [ 224.563409][ T6924] bpf_verifier_vlog+0x3a2/0x900 [ 224.563443][ T6924] __btf_verifier_log+0xe2/0x140 [ 224.563462][ T6924] ? kasan_save_track+0x4f/0x80 [ 224.563489][ T6924] ? __pfx___btf_verifier_log+0x10/0x10 [ 224.563505][ T6924] ? do_syscall_64+0x166/0x520 [ 224.563539][ T6924] btf_verifier_log_member+0x5a8/0x800 [ 224.563564][ T6924] ? __pfx_btf_verifier_log_member+0x10/0x10 [ 224.563592][ T6924] btf_struct_resolve+0xbb7/0x12c0 [ 224.563630][ T6924] btf_resolve+0x42d/0x14a0 [ 224.563661][ T6924] btf_parse_type_sec+0xd88/0x2360 [ 224.563690][ T6924] ? btf_parse_hdr+0x1da/0x810 [ 224.563716][ T6924] ? btf_parse_hdr+0x5f2/0x810 [ 224.563742][ T6924] btf_new_fd+0x487/0xc10 [ 224.563772][ T6924] __sys_bpf+0xd2e/0xd90 [ 224.563802][ T6924] ? __pfx___sys_bpf+0x10/0x10 [ 224.563829][ T6924] ? do_futex+0x3e7/0x4e0 [ 224.563866][ T6924] ? rcu_is_watching+0x16/0xb0 [ 224.563897][ T6924] __x64_sys_bpf+0xba/0xd0 [ 224.563921][ T6924] do_syscall_64+0x166/0x520 [ 224.563950][ T6924] ? trace_irq_disable+0x3b/0x140 [ 224.563972][ T6924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.563989][ T6924] ? clear_bhb_loop+0x70/0xc0 [ 224.564009][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.564027][ T6924] RIP: 0033:0x7f1af70fe159 [ 224.564042][ T6924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.564055][ T6924] RSP: 002b:00007f1af5356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.564074][ T6924] RAX: ffffffffffffffda RBX: 00007f1af7385fa0 RCX: 00007f1af70fe159 [ 224.564086][ T6924] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 224.564097][ T6924] RBP: 00007f1af719503b R08: 0000000000000000 R09: 0000000000000000 [ 224.564107][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.564117][ T6924] R13: 00007f1af7386038 R14: 00007f1af7385fa0 R15: 00007ffee1874098 [ 224.564142][ T6924] [ 225.178581][ T6932] ======================================================= [ 225.178581][ T6932] WARNING: The mand mount option has been deprecated and [ 225.178581][ T6932] and is ignored by this kernel. Remove the mand [ 225.178581][ T6932] option from the mount to silence this warning. [ 225.178581][ T6932] ======================================================= [ 225.430843][ T6936] netlink: 132 bytes leftover after parsing attributes in process `syz.0.403'. [ 225.891320][ T5602] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 226.040144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.110184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.130142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.140142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.150136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.160136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.170149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.240160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.260154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.270148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 227.592213][ T6945] e1000e 0000:00:00.0: probe with driver e1000e failed with error -5 [ 227.643580][ T5602] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 227.656969][ T5602] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 227.657001][ T5602] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 227.657022][ T5602] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 227.657042][ T5602] usb 4-1: config 220 has no interface number 2 [ 227.670264][ T5602] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 227.670320][ T5602] usb 4-1: config 220 interface 0 has no altsetting 0 [ 227.670341][ T5602] usb 4-1: config 220 interface 76 has no altsetting 0 [ 227.670360][ T5602] usb 4-1: config 220 interface 1 has no altsetting 0 [ 227.744096][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.744126][ T5602] usb 4-1: Product: syz [ 227.744142][ T5602] usb 4-1: Manufacturer: syz [ 227.744158][ T5602] usb 4-1: SerialNumber: syz [ 228.108684][ T5602] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 228.108736][ T5602] uvcvideo 4-1:220.0: No valid video chain found. [ 228.127449][ T5602] usb 4-1: selecting invalid altsetting 0 [ 228.213815][ T5602] usb 4-1: selecting invalid altsetting 0 [ 228.213861][ T5602] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 228.278786][ T5602] usb 4-1: USB disconnect, device number 10 [ 229.532577][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 229.533571][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 229.535864][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 229.610259][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 229.821368][ T6966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.417'. [ 230.712870][ T5602] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 230.861040][ T5602] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 230.863569][ T5602] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 230.863597][ T5602] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 230.863618][ T5602] usb 3-1: config 4 has no interface number 0 [ 230.863665][ T5602] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.907116][ T5602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.907192][ T5602] usb 3-1: Product: syz [ 230.907235][ T5602] usb 3-1: Manufacturer: syz [ 230.907278][ T5602] usb 3-1: SerialNumber: syz [ 231.470397][ T5602] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 232.292065][ T5602] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 232.293452][ T5602] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 232.293545][ T5602] usb 3-1: media controller created [ 232.364163][ T5602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.553655][ T5709] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 233.873964][ T5709] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 233.994213][ T5709] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 234.064038][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.064073][ T5709] usb 5-1: Product: syz [ 234.064091][ T5709] usb 5-1: Manufacturer: syz [ 234.064107][ T5709] usb 5-1: SerialNumber: syz [ 234.126186][ T5709] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 234.126608][ T5709] dvb-usb: bulk message failed: -22 (3/0) [ 234.196410][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.211125][ T5709] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 234.211193][ T5709] usb 5-1: media controller created [ 234.261692][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.357577][ T5602] DVB: Unable to find symbol dib7000p_attach() [ 234.357598][ T5602] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 234.402449][ T5709] DVB: Unable to find symbol mt352_attach() [ 234.402474][ T5709] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 234.403416][ T5709] dvb-usb: bulk message failed: -22 (3/0) [ 234.428719][ T5709] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 234.709674][ T7006] ------------[ cut here ]------------ [ 234.709694][ T7006] usb 3-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 234.709720][ T7006] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.4.431/7006 [ 234.736113][ T7006] Modules linked in: [ 234.740056][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.4.431 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 234.751395][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.761496][ T7006] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 234.767180][ T7006] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 234.789495][ T7006] RSP: 0018:ffffc90005b17958 EFLAGS: 00010246 [ 234.795693][ T7006] RAX: 0000000000000000 RBX: ffff8880346cec00 RCX: 0000000080000480 [ 234.803755][ T7006] RDX: ffff888020ee6600 RSI: ffffffff8c137940 RDI: ffffffff8fbe8720 [ 234.813497][ T7006] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 234.821572][ T7006] R10: ffffc90005b17a40 R11: fffff52000b62f54 R12: 1ffff11004c77a48 [ 234.829595][ T7006] R13: ffff8880263bd240 R14: ffff888020ee6600 R15: 0000000080000480 [ 234.837657][ T7006] FS: 00007f25f7f966c0(0000) GS:ffff888125cce000(0000) knlGS:0000000000000000 [ 234.846756][ T7006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.854594][ T7006] CR2: 000020000014f030 CR3: 0000000029122000 CR4: 00000000003526f0 [ 234.862711][ T7006] Call Trace: [ 234.866048][ T7006] [ 234.869043][ T7006] usb_start_wait_urb+0x13f/0x5b0 [ 234.874177][ T7006] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 234.879810][ T7006] usb_control_msg+0x234/0x3e0 [ 234.884694][ T7006] dib0700_i2c_xfer+0xbb9/0xf80 [ 234.889626][ T7006] __i2c_transfer+0x7bf/0x1fe0 [ 234.896314][ T7006] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 234.902266][ T7006] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 234.908143][ T7006] ? rt_mutex_lock_nested+0x156/0x1c0 [ 234.913634][ T7006] ? i2c_transfer+0xc7/0x2d0 [ 234.918296][ T7006] i2c_transfer+0x1cb/0x2d0 [ 234.922917][ T7006] i2cdev_ioctl_rdwr+0x460/0x740 [ 234.927951][ T7006] i2cdev_ioctl+0x6a8/0x890 [ 234.933040][ T7006] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 234.938162][ T7006] ? __fget_files+0x3a8/0x420 [ 234.942931][ T7006] ? __fget_files+0x2a/0x420 [ 234.947594][ T7006] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.952616][ T7006] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 234.957701][ T7006] __se_sys_ioctl+0xff/0x170 [ 234.962355][ T7006] do_syscall_64+0x166/0x520 [ 234.966992][ T7006] ? trace_irq_disable+0x3b/0x140 [ 234.972081][ T7006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.978166][ T7006] ? clear_bhb_loop+0x70/0xc0 [ 234.982930][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.988866][ T7006] RIP: 0033:0x7f25f9d3e159 [ 234.993322][ T7006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.013107][ T7006] RSP: 002b:00007f25f7f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.021605][ T7006] RAX: ffffffffffffffda RBX: 00007f25f9fc5fa0 RCX: 00007f25f9d3e159 [ 235.029608][ T7006] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 235.037738][ T7006] RBP: 00007f25f9dd503b R08: 0000000000000000 R09: 0000000000000000 [ 235.045763][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.053777][ T7006] R13: 00007f25f9fc6038 R14: 00007f25f9fc5fa0 R15: 00007fff535a6998 [ 235.061820][ T7006] [ 235.064863][ T7006] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.072188][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.4.431 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.082034][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.092154][ T7006] Call Trace: [ 235.095472][ T7006] [ 235.098414][ T7006] vpanic+0x56d/0xa60 [ 235.102426][ T7006] ? __pfx__printk+0x10/0x10 [ 235.107041][ T7006] ? __pfx_vpanic+0x10/0x10 [ 235.111574][ T7006] ? is_bpf_text_address+0x292/0x2b0 [ 235.116889][ T7006] ? is_bpf_text_address+0x26/0x2b0 [ 235.122124][ T7006] panic+0xc5/0xd0 [ 235.125861][ T7006] ? __pfx_panic+0x10/0x10 [ 235.130395][ T7006] __warn+0x315/0x4c0 [ 235.134411][ T7006] ? usb_submit_urb+0x1057/0x18b0 [ 235.139456][ T7006] ? usb_submit_urb+0x1057/0x18b0 [ 235.144495][ T7006] __report_bug+0x276/0x570 [ 235.149022][ T7006] ? usb_submit_urb+0x1057/0x18b0 [ 235.154061][ T7006] ? __pfx___report_bug+0x10/0x10 [ 235.159127][ T7006] ? stack_depot_save_flags+0x404/0x7f0 [ 235.164710][ T7006] report_bug_entry+0x19b/0x290 [ 235.169579][ T7006] ? usb_submit_urb+0x1100/0x18b0 [ 235.174642][ T7006] ? usb_submit_urb+0x1105/0x18b0 [ 235.179683][ T7006] handle_bug+0xce/0x200 [ 235.183960][ T7006] exc_invalid_op+0x1a/0x50 [ 235.188516][ T7006] asm_exc_invalid_op+0x1a/0x20 [ 235.193380][ T7006] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 235.199038][ T7006] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 235.218745][ T7006] RSP: 0018:ffffc90005b17958 EFLAGS: 00010246 [ 235.224843][ T7006] RAX: 0000000000000000 RBX: ffff8880346cec00 RCX: 0000000080000480 [ 235.232822][ T7006] RDX: ffff888020ee6600 RSI: ffffffff8c137940 RDI: ffffffff8fbe8720 [ 235.240803][ T7006] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 235.248794][ T7006] R10: ffffc90005b17a40 R11: fffff52000b62f54 R12: 1ffff11004c77a48 [ 235.256774][ T7006] R13: ffff8880263bd240 R14: ffff888020ee6600 R15: 0000000080000480 [ 235.264767][ T7006] ? usb_submit_urb+0x1091/0x18b0 [ 235.269982][ T7006] usb_start_wait_urb+0x13f/0x5b0 [ 235.275053][ T7006] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 235.280656][ T7006] usb_control_msg+0x234/0x3e0 [ 235.285490][ T7006] dib0700_i2c_xfer+0xbb9/0xf80 [ 235.290406][ T7006] __i2c_transfer+0x7bf/0x1fe0 [ 235.295195][ T7006] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 235.301048][ T7006] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 235.306908][ T7006] ? rt_mutex_lock_nested+0x156/0x1c0 [ 235.312303][ T7006] ? i2c_transfer+0xc7/0x2d0 [ 235.316928][ T7006] i2c_transfer+0x1cb/0x2d0 [ 235.321451][ T7006] i2cdev_ioctl_rdwr+0x460/0x740 [ 235.326415][ T7006] i2cdev_ioctl+0x6a8/0x890 [ 235.330956][ T7006] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 235.336008][ T7006] ? __fget_files+0x3a8/0x420 [ 235.340711][ T7006] ? __fget_files+0x2a/0x420 [ 235.345326][ T7006] ? bpf_lsm_file_ioctl+0x9/0x20 [ 235.350296][ T7006] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 235.355446][ T7006] __se_sys_ioctl+0xff/0x170 [ 235.360119][ T7006] do_syscall_64+0x166/0x520 [ 235.364780][ T7006] ? trace_irq_disable+0x3b/0x140 [ 235.369823][ T7006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.375921][ T7006] ? clear_bhb_loop+0x70/0xc0 [ 235.380619][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.386544][ T7006] RIP: 0033:0x7f25f9d3e159 [ 235.391003][ T7006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.410788][ T7006] RSP: 002b:00007f25f7f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.419224][ T7006] RAX: ffffffffffffffda RBX: 00007f25f9fc5fa0 RCX: 00007f25f9d3e159 [ 235.427211][ T7006] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 235.435204][ T7006] RBP: 00007f25f9dd503b R08: 0000000000000000 R09: 0000000000000000 [ 235.443192][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.451177][ T7006] R13: 00007f25f9fc6038 R14: 00007f25f9fc5fa0 R15: 00007fff535a6998 [ 235.459208][ T7006] [ 235.462518][ T7006] Kernel Offset: disabled [ 235.466862][ T7006] Rebooting in 86400 seconds..